Privacy Policy

For the purposes of this Privacy Policy, Al Ansari Forex and Financial Services Pvt. Ltd., (hereinafter referred to as “we,” “us,” or “our”) is the company incorporated under the laws of India, committed to protecting the privacy and personal data of its customers. References to “you” or “your” refer to any individual who accesses, has purchased or intends to purchase or inquiries about any product(s) or service(s), including but not limited to customers, users of our website or other digital platforms such as mobile site and mobile app, (collectively referred herein as “Website”).

1. Personal Data We Collect

We collect the following personal data based on your consent and legal obligations under FEMA and RBI regulations to provide and enhance our services: Such personal data may be collected when you create an account, submit an enquiry, make a purchase through our website, communicate with our customer service, or engage with us through online events, advertisements, or promotional activities. We ensure that only the minimum necessary personal data required to fulfil the intended purpose is collected, in line with the principle of data minimisation. The categories of personal data listed below have been confirmed based on our operational practices and reflect only the specific data elements actually collected. We collect identity data, including your name, username, passport, national ID card, and date of birth. Contact data such as your address, email, and telephone numbers may also be gathered. Financial data, including your PAN (Permanent Account Number), bank account details, and payment card details, are collected for transactions. We store transaction data related to payments, purchases, and availed services. Additionally, we gather technical data such as your IP address, browser type and version, login data, and device identification details. Profile data, including your username, password, preferences, and survey responses, may also be recorded. We analyse usage data concerning how you interact with our website and mobile app, such as pages visited, links clicked, and time spent on pages. Finally, log data, including browser details, date and time of visits, and session duration, is collected for security and analytical purposes.

2. How We Use Your Personal Data

We ensure that personal data is processed (i.e. used) only for purposes that are lawful and necessary and when the law allows us to, that is, when we have a legal basis for processing.

Depending on the type of service we provide, we may either control and decide how personal data is used (as a Data Fiduciary) or handle personal data on behalf of another entity that determines its use (as a Data Processor), always in accordance with applicable data protection laws.

We generally use the information to establish and enhance our relationship with our users for the following purposes:

• To process transactions and provide requested services;
• to verify your identity and comply with regulatory obligations;
• to improve our website, services, and customer experience;
• to communicate with you regarding service updates and important information;
• to detect and prevent fraud or security breaches.

3. Disclosure of Personal Data

We may disclose your personal data with third parties in accordance with applicable Indian and international laws, strictly for legal, regulatory, and compliance purposes, including:

• Law enforcement bodies, regulatory agencies, courts, or other governmental authorities where disclosure is required under applicable Indian and foreign laws, to comply with legal obligations, exercise or defend legal rights, or protect vital interests.
• Internal Third Parties, including subsidiaries and affiliates of BFC Group.
• External Third Parties, including:
  • Banking and financial service providers – Banks, payment service providers, and financial institutions involved in processing payments and transactions.
  • Government and regulatory bodies – The Reserve Bank of India (RBI), Financial Intelligence Unit (FIU-IND), and other Indian or foreign governmental bodies, central banks, or regulatory authorities as required under applicable laws.
  • Legal and compliance professionals – External legal counsel, auditors, and compliance professionals for auditing, regulatory reporting, and compliance purposes.

All disclosures are made in strict compliance with applicable Indian laws and international regulatory requirements, and are limited to what is necessary to fulfil our legal and regulatory obligations.

4. Data Retention

At Al Ansari Forex, we will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The duration of retention is determined based on various factors, including whether the data is needed to provide the services you have requested; whether there is an ongoing relationship with you; whether you have sought additional information or services from us; whether we are under a legal obligation or have a legitimate right to retain the data; whether third-party obligations require us to retain your personal data; whether our internal policies or regulatory requirements mandate continued retention; for the establishment or defence of legal claims and whether we have a legitimate business interest in retaining the data to support our operations or communication with you.

We will retain your personal data in our databases in accordance with our record retention policy and applicable laws.

Personal data will be securely erased or anonymised when it is no longer necessary, unless its retention is required by law or justified by a legitimate interest. Data Principals may request deletion of their data under applicable conditions, in accordance with Section 12 of the DPDP Act, 2023.

In circumstances we anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, we may use this information indefinitely without further notice to you.

5. User Data Protection Rights

You have the following rights concerning your personal data:

1. Right to Access Personal Data
   • You have the right to request a copy of the personal data we hold about you and details of how it is processed. We will respond to such requests within 30 days from the date of receipt, and the data will be provided in a commonly used electronic format unless you request otherwise.
2. Right to Correction and Rectification
   • You may request correction of inaccurate or incomplete personal data. We will also notify third parties (if any) who have received incorrect data. You can submit your correction request by contacting us through the designated email address provided on our website. We will respond to such requests within 30 days from the date of receipt.
3. Right to Data Portability (if applicable under law)
   • You may request a copy of your personal data in a structured format and, where technically feasible, request its transfer to another entity. This right applies only to personal data you have provided to us, and does not include derived data, internal assessments, or data generated through analytics.
4. Right to Withdraw Consent
   • You may withdraw consent for processing your personal data at any time. However, withdrawal may impact certain service functionalities where data processing is necessary. Please note that the withdrawal of consent will not affect the lawfulness of any processing carried out prior to such withdrawal.
5. Right to Erasure (“Right to be Forgotten”)
   • You may request deletion of your personal data when it is no longer required for legal or regulatory purposes. This right is subject to certain exceptions, such as when the retention of personal data is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims, including in connection with pending or reasonably foreseeable litigation.
6. Right to Object to Processing
   • You have the right to object to the processing of your personal data, except where processing is necessary for the fulfilment of legal obligations, regulatory compliance, or contractual performance. As our data processing activities are limited to these purposes, you cannot object to data processing necessary for legal or contractual obligations. If you believe that your personal data is being processed in error, please contact us at the provided contact details.
7. Right to Restrict Processing
   • You may request a temporary restriction on processing your personal data under certain conditions, such as during a data verification process.
8. Right to Be Informed
   • You have the right to be informed about the collection, use, and storage of your personal data.
9. Right to Lodge a Complaint
   • If you believe your data protection rights have been violated, you may file a complaint with the Data Protection Board of India (once operational) or other regulatory authorities such as the Ministry of Electronics and Information Technology (MeitY)

6. Children

This Website is not intentionally directed at children. Al Ansari Forex does not knowingly collect personal data from individuals under the age of 18unless verifiable consent is provided by the parent or lawful guardian through its website. We encourage parents, guardians, and educators to be actively involved in children’s online activities and to guide them when providing personal information.

However, in accordance with applicable regulations, minors may initiate forex transactions under the supervision of a parent or legal guardian. In such cases, all required documents, including proof of identity and guardianship, will be duly collected and verified. The transaction will be processed strictly under the oversight of the guardian. Additionally, we are in the process of implementing enhanced login and user access controls specifically for minor users to ensure secure and compliant digital interaction.

If you believe that a child under the age of 18 has submitted personal data through our website without appropriate consent, please contact us immediately so we can take appropriate action.

7. Compliance with Applicable Privacy Laws

Al Ansari Forex (Al Ansari Forex and Financial Services Private Limited) is committed to maintaining the highest standards of regulatory and legal compliance across all its operations. This includes adherence to applicable Indian laws such as the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA). All controls and procedures applicable to branch-level transactions are equally enforced on our web site, ensuring consistent adherence to regulatory requirements including, but not limited to, customer identification, transaction monitoring, recordkeeping, and reporting obligations. Our systems are designed to uphold security, accuracy, and compliance across all platforms.

In jurisdictions where the GDPR applies, Al Ansari Forex ensures that personal data is processed lawfully, transparently, and for legitimate purposes. Individuals may exercise their rights under the GDPR, which include the right to access and portability of personal data, the right to rectification, the right to erasure (subject to legal exceptions), and the right to withdraw consent or object to processing. We also recognize the right of individuals to lodge a complaint with the appropriate supervisory authority, where applicable.

Similarly, where applicable, we comply with the United Kingdom General Data Protection Regulation (UK GDPR), and relevant United States state-level privacy laws such as the California Consumer Privacy Act (CCPA), which provide individuals with rights including access, correction, deletion, and the right to opt out of the sale or sharing of personal information.

These laws may become applicable when individuals from such jurisdictions access our services, and in such cases, Al Ansari Forex processes their personal data in accordance with the relevant data protection laws of those regions.

We ensure that personal data is processed in accordance with local legal standards and user rights are respected in all applicable jurisdictions.

8. Updates to Privacy Policy

We may revise our Privacy Policy periodically to align with legal, technical, or business developments. Any changes will take effect once posted on this page, unless otherwise mandated by law. When updates occur, we will take appropriate measures to notify you, based on the significance of the changes. Changes will become effective upon posting unless required otherwise by law. We encourage you to review this Privacy Policy periodically. The last updated date will be displayed at the top of this Policy.

We shall maintain a changelog and make archived versions of the Privacy Policy available upon request.

Our website or services may contain links to third-party websites, including those of our group companies. These sites operate independently and are governed by their own privacy policies. We do not accept responsibility or liability for the content, security, or privacy practices of such third-party sites. We encourage you to review their privacy policies before providing any personal information.

Contact Information

If you have questions or concerns about this policy, please contact us.

• Phone Number: +91 82876 10055
• Email ID: contactus@alansariforex.com