Zomint Privacy Policy
Effective Date: March 2025
1. Introduction
Zomint Tech Private Limited (“Zomint”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal and financial information. This Privacy Policy explains how we collect, use, process, store, and safeguard your personal data when you access or use our website, applications, and related investment services.
Zomint processes personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other regulatory requirements applicable to financial service providers.
By accessing or using our services, you consent to the collection and processing of your personal data as described in this Privacy Policy.
2. Information We Collect
We may collect the following categories of information:
2.1 Personal Identification Information
This may include your full name, date of birth, email address and phone number, Permanent Account Number (PAN), Aadhaar or other KYC documents, and address and identity verification details.
2.2 Financial Information
To provide investment services, we may collect your investment preferences, portfolio details, income range and financial profile, risk appetite and investment goals, and transaction and investment activity data.
2.3 Usage Data
When you interact with our platform, we may automatically collect your IP address, device type and operating system, browser type, and website usage data and interaction logs.
2.4 Communication Data
This may include emails and messages sent to our support team, customer service interactions, and call logs related to advisory or account support.
3. Partner Platform: Investwell
Zomint partners with Excel Net Solutions Private Limited, which operates the Investwell investment platform, to manage backend investment operations including account setup, mutual fund transactions, portfolio tracking, investment reporting, and related services.
When you access Zomint's investment features, certain personal and financial data may be processed through Investwell's systems in order to facilitate these services.
3.1 Data Handling via Investwell
Zomint shares only the minimum information necessary to deliver investment services. Investwell acts as a data processor under Zomint's instructions. Both Zomint and Investwell follow strict confidentiality, regulatory compliance, and information security standards. Users remain the owners of their personal data, while Zomint and Investwell act as custodians for the purpose of delivering services.
4. Purpose of Data Processing
We process personal data only for lawful purposes and in accordance with user consent. Personal data may be used to:
- verify identity and complete KYC requirements
- execute investment transactions
- maintain portfolio records
- provide personalised investment insights and recommendations
- communicate important service updates
- comply with regulatory, legal, and compliance requirements
- improve platform performance and user experience
Zomint does not sell, lease, or trade personal data to third parties.
5. Data Security and Protection
Zomint and Investwell implement industry-standard security practices to safeguard personal and financial information.
Encryption: All sensitive information is encrypted during transmission and storage using 256-bit encryption or equivalent security standards.
Access Controls: Access to user data is restricted to authorised personnel who require it for operational purposes and are bound by confidentiality obligations.
Infrastructure Security: Systems are hosted on secure cloud infrastructure with continuous monitoring, firewalls, and intrusion detection mechanisms.
Password Protection: User passwords are stored using secure one-way hashing mechanisms.
Security Audits: Periodic security and compliance audits are conducted to ensure adherence to privacy and cybersecurity standards.
Backup and Recovery: Secure backups and disaster recovery systems are maintained to ensure service continuity.
While we take reasonable measures to protect personal data, no digital platform can guarantee absolute security. Users are encouraged to maintain the confidentiality of their login credentials.
6. Data Sharing and Legal Compliance
Personal data may be shared with mutual fund houses, Registrar and Transfer Agents (RTAs), payment processors, financial institutions, and regulatory authorities, only when necessary.
Such sharing is limited to what is required for executing investment transactions, regulatory compliance, and fraud prevention and risk management.
Zomint remains the data fiduciary, while service providers such as Investwell may act as data processors under applicable data protection laws.
7. Rights of Users
Under the Digital Personal Data Protection Act, 2023, users (“Data Principals”) have certain rights regarding their personal data. These include:
- the right to request access to personal data processed by us
- request correction or updating of inaccurate personal data
- request deletion of personal data subject to regulatory retention requirements
- withdraw consent for data processing where applicable
- seek grievance redressal related to personal data processing
Requests can be submitted by contacting us at support@zomint.com.
8. Data Retention
Zomint retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including compliance with legal, regulatory, accounting, or operational requirements. Where retention is no longer required, personal data will be securely deleted or anonymised.
9. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance user experience, analyse website traffic, and improve platform performance. Users may choose to disable cookies through browser settings; however, certain website features may not function properly without them.
10. External Links
Our website or applications may contain links to third-party websites or services. Zomint is not responsible for the privacy practices, policies, or content of such third-party platforms. Users are encouraged to review the privacy policies of any external websites they visit.
11. Changes to This Policy
Zomint may update this Privacy Policy periodically to reflect regulatory changes, operational updates, or improvements to our services. Any revised policy will be posted on our website with the updated effective date. Continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.
12. How We Use Your Contact Information
When you provide your contact details to Zomint, we may use them to communicate with you regarding our services. This may include contacting you through WhatsApp, phone calls, SMS, email, push notifications, or other available contact channels.
We may use your contact information to send consultation updates, appointment reminders, portfolio review updates, service-related information, educational content, customer support messages, offers, promotions, and other relevant communications from Zomint.
You may opt out of promotional communications at any time by using the unsubscribe option provided in the communication or by contacting Zomint. Please note that even if you opt out of promotional messages, we may still send important service-related communications where required to provide our services, manage your consultation, or comply with applicable obligations.
13. Contact and Grievance Redressal
For questions, concerns, or requests related to this Privacy Policy or the processing of personal data, please contact us:
Email: support@zomint.com
Contact: +91 7696442264
We will make reasonable efforts to address all requests within a reasonable timeframe.