Protecting Your Data

Introduction and Scope

This Privacy Policy describes how CapitalLyft (SEBI Registered Research Analyst - INH000020934) collects, uses, and protects the personal and financial information you provide to us when using our advisory services and website (capitallyft.in). By subscribing to our services, you consent to the data practices described in this policy.

We are committed to maintaining the confidentiality, integrity, and security of your personal data.

Information We Collect

We collect information necessary to provide services and comply with regulatory requirements. This may include:

• Personal Identification Data: Name, address, telephone number, email address, and IP address.
• KYC/Regulatory Data: PAN, Aadhar details (if required for regulatory checks), and date of birth.
• Financial & Risk Profile Data: Information regarding your investment objectives, risk tolerance, financial goals, and trading experience, collected via our client onboarding forms.
• Transaction Data: Details of services purchased, fees paid, and subscription history.
• Usage Data: Information about how you interact with our website and communications (e.g., time spent, pages viewed).

How We Use Your Information

Your information is used strictly for legitimate business purposes, including:

• To deliver and manage the advisory services you have subscribed to.
• To verify your identity and fulfill Know Your Customer (KYC) obligations.
• To personalize our communication and ensure our recommendations align with your stated risk profile.
• To process payments and manage your account.
• For regulatory compliance, audit, and internal reporting purposes as required by SEBI.
• To improve our website, services, and customer support.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may disclose your data only in the following limited circumstances:

• Regulatory and Legal Obligations: When required by law, court order, or governmental request (e.g., SEBI, Income Tax authorities).
• Service Providers: With trusted third-party service providers who assist us in operating our business (e.g., payment processors, communication platforms), strictly under confidentiality agreements.
• Consent: With your explicit consent for any other purpose.

Data Security and Retention

Security: We implement appropriate technical and organizational measures, including encryption and access controls, to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no data transmission over the internet can be guaranteed to be 100% secure.

Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or regulatory requirements, which in India often requires retaining financial records for several years.

Your Rights and Choices

You have certain rights regarding the personal information we hold about you:

• Access: You can request access to the personal data we hold about you.
• Correction: You may request the correction of inaccurate or incomplete information.
• Opt-Out: You can opt out of receiving promotional or marketing communications from us.

To exercise any of these rights, please contact our Compliance Officer.

Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly.

Last Updated: October 7, 2025

Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Compliance Officer: