Privacy Policy
Last updated: March 2026 · Effective: March 2026
Governed by the Digital Personal Data Protection (DPDP) Act, 2023 and SEBI regulations
1. Who We Are
ExpertsBazaar is operated by Ashutosh Kumar Gupta, a SEBI Registered Research Analyst (INH000020679) and SEBI Registered Investment Adviser (INA000019974), based in Gurugram, Haryana, India.
Branch Office: C-24, 4th Floor, Signature Global Park-2, Sector-36, Sohna, Gurugram – 122103, Haryana
Registered Office: Flat No. 202, Dall Mill Road, Uttam Nagar West, New Delhi – 110059
Email: [email protected]
Website: expertsbazaar.com
Under the Digital Personal Data Protection (DPDP) Act, 2023, ExpertsBazaar is the Data Fiduciary for personal data collected through this website and its services.
2. What Data We Collect
| Category | Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, PAN card number, date of birth, photograph | KYC onboarding (RA & IA services) |
| Contact Data | Mobile number, email address, city, postal address | Enquiry forms, KYC, enrolment |
| Financial Data | Bank account details (for fee payment), approximate investment amount, income range | IA advisory onboarding, fee collection |
| Risk Profile Data | Risk tolerance, investment horizon, financial goals, existing portfolio details | IA risk profiling (mandatory before advice) |
| Usage Data | Pages visited, time on site, device type, browser type, IP address | Automatically via website cookies and analytics |
| Communication Data | Emails sent to us, WhatsApp messages, form submissions, complaint records | When you contact us |
| Marketing Data | Ad interaction data (clicks, conversions) via Meta Pixel | When visiting website via Meta ads |
3. How We Collect Data
- Directly from you: When you fill enquiry forms, apply for programmes, complete KYC, or contact us via email or WhatsApp
- Automatically: Via cookies and web analytics tools when you browse expertsbazaar.com
- Via third-party platforms: When you interact with our Meta (Facebook/Instagram) advertisements or pages
- Via GHL (GoHighLevel) CRM: Our CRM platform captures and stores lead and client data submitted through our forms
- Via payment systems: When you pay fees via CeFCoM or direct bank transfer
4. Why We Collect Data & Legal Basis
| Purpose | Data Used | Legal Basis (DPDP Act 2023) |
|---|---|---|
| Provide RA trading education services | Identity, contact, communication | Consent + Legitimate use (contractual) |
| Provide IA investment advisory services | Identity, contact, financial, risk profile | Consent + Legal obligation (SEBI IA Regulations) |
| KYC compliance (IA services) | Identity, financial | Legal obligation (SEBI mandate) |
| Fee collection and invoicing | Identity, financial, contact | Contractual necessity |
| Responding to enquiries and complaints | Contact, communication | Consent + Legitimate use |
| SEBI record-keeping obligations | All client data | Legal obligation (5-year retention) |
| Marketing and advertising (Meta) | Contact, usage, marketing | Consent (opt-in via form submission) |
| Website analytics and improvement | Usage data | Legitimate use + Cookie consent |
| Newsletter and educational emails | Name, email | Consent (newsletter opt-in) |
5. Who We Share Data With
We do not sell your personal data. We share data only where necessary and with appropriate safeguards:
- GoHighLevel (GHL) CRM: Our CRM platform stores lead and client contact data for service delivery and follow-up. GHL is a US-based platform operating under standard contractual clauses.
- Meta Platforms (Facebook/Instagram): We use Meta Pixel for advertising. Meta receives interaction data per Meta’s data policy. See Section 9 for full details.
- TradingView: When clients use our proprietary indicators on TradingView, their TradingView account data is governed by TradingView’s own privacy policy.
- SEBI / BSE RAASB / BSE IAASB: Client records may be shared with SEBI or BSE bodies when required by law or as part of regulatory inspections.
- Payment processors: Bank and payment details are processed by CeFCoM or direct bank transfer as applicable. We do not store full card details.
- Legal and regulatory authorities: When required by law, court order, or regulatory direction.
6. How Long We Keep Data
| Data Type | Retention Period | Reason |
|---|---|---|
| KYC and identity documents (IA clients) | 5 years from end of relationship | SEBI IA Regulations mandatory retention |
| Advisory records and communications (IA) | 5 years | SEBI mandatory |
| Research service records (RA clients) | 5 years | SEBI RA Regulations |
| Enquiry and lead data (non-clients) | Up to 2 years | Legitimate business purpose |
| Newsletter subscribers | Until unsubscribe | Consent-based |
| Website analytics data | Up to 26 months | Standard analytics retention |
| Complaint records | 5 years | SEBI regulatory requirement |
After the retention period expires, data is securely deleted or anonymised. You may request earlier deletion where not prevented by legal or regulatory obligations.
7. How We Protect Your Data
- All data transmitted via our website is encrypted using HTTPS/TLS
- GHL CRM data is stored on secured cloud infrastructure with access controls
- Access to client data is restricted to authorised team members only, on a need-to-know basis
- KYC documents are stored in compliance with SEBI-prescribed data security standards
- We do not store payment card details on our systems
- In the event of a data breach that affects your rights, we will notify you as required by the DPDP Act 2023
8. Cookies & Tracking
Our website uses the following types of cookies and tracking technologies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Website functionality, session management, form security | No — required for site to function |
| Analytics | Website usage measurement (page views, traffic sources) | Yes — via browser settings |
| Marketing / Meta Pixel | Ad performance measurement, custom audience creation | Yes — see Section 9 |
| GHL / CRM | Form tracking, lead attribution, session identification | Partial |
You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality. By continuing to use our website, you consent to our use of strictly necessary cookies.
9. Meta (Facebook/Instagram) Advertising
ExpertsBazaar runs advertising campaigns on Facebook and Instagram via Meta Platforms. As part of this:
- Meta Pixel is installed on our website. It tracks actions such as page visits, form submissions, and enquiries to measure ad effectiveness.
- Meta may receive your IP address, browser type, and pages visited when you visit expertsbazaar.com.
- If you have a Facebook/Instagram account, Meta may match this data with your profile to serve you relevant ads.
- We use Custom Audiences to show ads to people who have visited our website or submitted enquiry forms.
- We use Lookalike Audiences based on our existing audience data to reach similar users.
- All our Meta advertisements comply with SEBI advertising guidelines — no guaranteed return claims, no misleading performance data.
- All Meta ads identify ExpertsBazaar as the advertiser and include required SEBI registration disclosures.
To opt out of Meta’s use of your data for ad targeting, visit Facebook Ad Preferences or use the Digital Advertising Alliance opt-out. For more information, see Meta’s Data Policy.
10. Your Rights Under DPDP Act 2023
Under India’s Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights as a Data Principal:
To exercise any of these rights, email [email protected] with the subject line "DPDP Rights Request" and details of your request. We will respond within 30 days. Note that certain rights may be limited where we are required to retain data under SEBI regulations.
11. Children’s Data
Our services are intended for adults aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, please contact [email protected] and we will delete it promptly.
Under the DPDP Act 2023, processing of children’s data requires verifiable parental consent. We do not process children’s data.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory obligations. When we make material changes, we will:
- Update the “Last updated” date at the top of this page
- Notify active clients via email where the change materially affects them
- Display a notice on our website for significant changes
Your continued use of our website or services after the effective date constitutes acceptance of the updated policy.
13. Contact & Grievance
For any privacy-related queries, data rights requests, or complaints:
- Email: [email protected] — subject line: “Privacy / DPDP Request”
- Branch Office: C-24, 4th Floor, Signature Global Park-2, Sector-36, Sohna, Gurugram – 122103, Haryana
- Registered Office: Flat No. 202, Dall Mill Road, Uttam Nagar West, New Delhi – 110059
- Response time: We aim to respond to all privacy requests within 30 days
- DPDP Grievance: If unsatisfied with our response, you may approach the Data Protection Board of India once operational under the DPDP Act 2023