Privacy Policy

Effective Date: July 3, 2026
Last Updated: July 3, 2026

Galaxy Capital (“we,” “us,” or “our”) operates gcapital.in (the “Website”). We are committed to protecting the privacy and confidentiality of the personal and financial data of our clients and visitors. This Privacy Policy details how we handle user data in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection (DPDP) Act, 2023

1. Types of Data We Collect

We collect both Personal Data and Sensitive Personal Data or Information (SPDI) necessary to provide financial consulting services:

  • Personal Data: Name, age, gender, residential address, email address, and mobile number.
  • Sensitive Personal Data (SPDI): Permanent Account Number (PAN), Tax Return Files, Income Details, Bank Account Numbers, Investment Portfolios, Demat account details, and financial goals.
  • Technical Data: Internet Protocol (IP) address, browser type, device information, and website usage statistics collected via cookies.

2. Legal Basis and Purpose of Collection

We process your data strictly based on your explicit consent to fulfill our financial consulting obligations. Your data is used to:

  1. Assess your financial profile and provide customized investment or wealth advisory.
  2. Verify your identity and conduct Know Your Customer (KYC) compliance if required by regulators (like SEBI or RBI).
  3. Communicate consulting reports, invoices, and service updates.
  4. Respond to customer support requests and queries.

3. Data Processing and Sharing Limitations

We strictly regulate how your data is shared with external parties:

  • No Commercial Sale: We never sell, rent, or trade your personal or financial data to third-party marketing companies.
  • Regulated Disclosures: Data is shared only with financial institutions or regulators (e.g., SEBI, Income Tax Department) when mandatory to execute your investment requests or when required by Indian law.
  • Third-Party Vendors: We may share data with trusted IT infrastructure providers (like secure cloud hosting services or CRM tools) operating under strict non-disclosure agreements.

4. Data Security and Infrastructure

We implement mandatory Reasonable Security Practices under Section 43A of the IT Act:

  • Encryption: Secure Socket Layer (SSL/TLS) encryption for all data transmitted through the Website.
  • Access Control: Strict role-based access limits ensuring only assigned financial consultants can view your sensitive financial records.
  • Storage Residency: All personal and financial data is stored and processed exclusively on servers located within the geographic boundaries of India.

5. Your Rights as a Data Principal

Under Indian data protection laws, you hold the following absolute rights regarding your information:

  • Right to Access: You can request a summary of the personal and financial data we hold about you.
  • Right to Correction: You can request updates to inaccurate or obsolete data.
  • Right to Erasure (Withdrawal of Consent): You may withdraw your consent for data processing at any time. Upon receiving this request, we will delete your records, unless legal or tax compliance forces us to retain them.

6. Children’s Privacy

Our financial consulting services are intended strictly for individuals who can legally form a contract under the Indian Contract Act, 1872. We do not knowingly collect information from individuals under 18 years of age.

7. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023 [1], we have appointed a Grievance Officer to address data privacy disputes.

For queries, corrections, or complaints, contact:

  • Name of Officer: Manoj Kumar Gupta
  • Designation: Grievance Officer, Galaxy Capital
  • Email Address:galaxy.capital7@gmail.com
  • Physical Address: Varanasi

We will acknowledge your grievance within 36 hours and resolve it within 30 days of receipt