PRIVACY POLICY KFin Technologies Ltd Last Updated: October 12, 2026 Introduction KFIN TECHNOLOGIES LTD. is a leading Registrar and Transfer Agent (RTA) in the financial sector, dedicated to delivering exceptional investor services. Our mission is to drive client success by delivering innovative solutions and outstanding service that exceed expectations. At KFIN TECHNOLOGIES LTD, we are deeply committed to protecting the privacy and security of the information you entrust to us. This Privacy Notice outlines how we collect, store, use, share, protect and manage your Personal Data/ Personal Identifiable Information (PII) when you engage with our website-www.kfintech.com.At KFIN TECHNOLOGIES LTD, we understand that your personal information is more than just data, it’s a matter of trust. As a leading fund administrator specializing in investor servicing, we are committed to protecting the privacy and security of your personal information with the utmost care and transparency.This Privacy Notice is designed to provide you with a clear understanding of how we collect, store, use, protect, share and manage your Personal Data/ Personally Identifiable Information (PII) when you interact with our website, applications and services. We are committed to protecting and responsibly managing the personal information you share with us. KFIN Technologies Ltd., its subsidiaries and its branches herein referred as ‘KFintech,’ ‘We,’ ‘Our’ or ‘Us’ Is committed to respect your privacy and Choices. This ‘Privacy Statement’ highlights our privacy practices regarding you are the Personal Data/ Personal Identifiable Information (PII) that we collect and process in compliance to Applicable data Privacy regulations Objective At KFintech, we understand that your personal information is more than just data, it’s a matter of trust. This Privacy Notice is designed to provide you with a clear understanding of our privacy practices regarding personal information that we collect and process about you through various sources. Although the primary focus of this statement is on the personal information that we collect and we process through our websites, that link to this Privacy Statement , which include www.kfintech.com, www.kfintechmfs.com ….and their sub domains such as …etc. (Collectively referred to as ‘KFintech Websites’. Our adherence to the below-mentioned principles and commitment to protecting and responsibly managing the personal information you share with us remains across the organization. Depending on the purposes of processing and your relationship with us as a data subject, we may provide additional customized Privacy Statements as applicable. Scope and Applicability The scope of this ‘Privacy Statement’ covers the Personal Information collected, how we use or process such data, who are the recipients of such data and your associated rights under the applicable Privacy Laws and regulations including how to exercise them. The Applicability of this Privacy Statement is global, however certain additional information may be relevant to you depending on the country where you reside. Such additional terms based on countries or regions are called out in region specific statements below. 1. Personal Information We Collect and Process KFintech collects your personal information to provide you services and comply with legal requirements. We gather personal information you provide through the below modes: Website and Mobile Applications: Data submitted by yourself through our website forms or applications on our portals, or by contacting / emailing our official contacts, when you register or update an online account, submit forms, or interact with our digital platforms. Business Transactions: When you engage in transactions through mutual fund companies, brokers, distributors, or our service centres, including subscription, redemption, or share transfer or issuer related transactions. Inquiries and Communications: When you contact us via phone, email, website, or post to make inquiries, provide feedback, or submit complaints. Data shared by you requesting for Demo. Job Applications: Personal data submitted by you when you apply for a position through our website or other recruitment channels, including your resume, cover letter, and related details. Cookies and Tracking Technologies: Our website may use cookies to collect usage data, such as IP address, browser type, and visit times, to enhance your experience. We may collect the following categories of personal information: Information collected as part of your visit and usage of our Website such as IP address, demographics, your computer’s Operating system, device information, browser type and information collected via cookies or similar tracking technologies. As a website visitor who merely browses our websites (including hosted content) without submitting additional content, this is the most relevant paragraph for applicable data processing. Personal details like Name, phone number, email address, Company name, Title (or similar professional data set), resume, experience details etc. Queries, comments, or feedback submitted by you including any correspondence you have made with us. Login Credentials such as Username, password when you register for any applicable services. Audio Visual information such as photographs or images, video recordings (if recorded) when attending any of our Events, Webinars etc. Preferences related to marketing emails, subscription details (in relation to events we organize) Additionally, we may collect certain data points based on categories of data subject and their relationship with us, as detailed out in our additional Privacy Statements for relevant categories of data subjects at the end of this Statement. KFIN TECHNOLOGIES LTD. collects personal information to provide our services and comply with legal requirements. We gather information you provide through: Website and Mobile Applications: When you register or update an online account, submit forms, or interact with our digital platforms. Business Transactions: When you engage in transactions through mutual fund companies, brokers, distributors, or our service centres, including subscription, redemption, or share transfer or issuer related transactions Inquiries and Communications: When you contact us via phone, email, website, or post to make inquiries, provide feedback, or submit complaints. Job Applications: When you apply for a position through our website or other recruitment channels, including your resume, cover letter, and related details. Cookies and Tracking Technologies: Our website may use cookies to collect usage data, such as IP address, browser type, and visit times, to enhance your experience. The types of information collected include: Name, address, date of birth, phone, and email. Bank account details, PAN, and investment records. KYC documents like Aadhaar or PAN. Transaction details and communication records. Employment-related information, such as name, qualifications, work experience, and references. 2. Use of personal Information We may use your information for the following purposes: Service Delivery: Facilitate mutual fund transactions, such as subscriptions, redemptions, and share transfers, and to manage your account with us. Create login credentials wherever required. Regulatory Compliance: Meet obligations under applicable laws, including Know Your Customer (KYC) requirements, Securities and Exchange Board of India (SEBI) regulations, and tax laws, ensuring accurate record-keeping and reporting. Customer Support: Respond to your inquiries, feedback, or complaints and provide personalized assistance through our website, mobile applications, or other communication channels, identify you once you register on our website and to offer curated content tailored to your preference. Enable Marketing and Sales related communications and related purposes, to invite you for events, seminars and equivalent organized by us and related purposes such as promotions and publications on social media. Recruitment: Evaluate job applications, communicate with candidates, and manage the recruitment process when you apply for a position with us. Service Improvement: Analyse which parts of websites are frequently analysed and feedback to enhance our website, mobile applications, and service offerings, ensuring a seamless user experience. Security and Fraud Prevention: To detect and prevent fraudulent activities, spam, or unauthorized access, protecting your data and our systems. Website Performance: Monitor website usage through anonymized data, such as IP addresses and browser information, to optimize functionality and ensure security. Provide better usability, troubleshooting and site maintenance. Legal Basis for Processing: We process your information based on the below legal basis of processing: With your consent, where required (For e.g., registering and inviting you for events organized for us, or for sharing our marketing related communications, newsletters, or cookies). Where we process personal data based on your consent, your consent is revocable at any time. For performance of Contract to which you are a party or to take steps at your request prior to entering a contract, for example: to access applications or when you engage with us for receiving our services and offerings like RTA services, or when managing the data of our employees for ensuring the performance of their employment contract. Comply with legal obligations on us, such as compliance with applicable laws and protecting our legal rights, seeking remedies, and defending against claims. For the purposes of Legitimate interests pursued by us or a third party e.g., when we need to understand your usage of our website, for improving services or preventing fraud, provided these do not override your rights. We ensure that all processing activities adhere to the principles of data minimization and purpose limitation under the DPDP Act, 2023 using your data only for the purposes specified and with appropriate safeguards in place. If you chose not to provide your personal information that is mandatory to process your request, we may not be able to fulfil the relevant purpose of processing, including provision of any services to you if applicable. KFIN TECHNOLOGIES LTD. processes your personal information to deliver our services, comply with legal and regulatory requirements, and enhance our operations, in accordance with the Digital Personal Data Protection Act (DPDPA) 2023. Processing includes collecting, storing, using, sharing, and disposing of your data. We handle your information for the following purposes: Service Delivery: To facilitate mutual fund transactions, such as subscriptions, redemptions, and share transfers, and to manage your account with us. Regulatory Compliance: To meet obligations under applicable laws, including Know Your Customer (KYC) requirements, Securities and Exchange Board of India (SEBI) regulations, and tax laws, ensuring accurate record-keeping and reporting. Customer Support: To respond to your inquiries, feedback, or complaints and provide personalized assistance through our website, mobile applications, or other communication channels. Recruitment: To evaluate job applications, communicate with candidates, and manage the recruitment process when you apply for a position with us. Service Improvement: To analyse usage patterns and feedback to enhance our website, mobile applications, and service offerings, ensuring a seamless user experience. Security and Fraud Prevention: To detect and prevent fraudulent activities, spam, or unauthorized access, protecting your data and our systems. Website Performance: To monitor website usage through anonymized data, such as IP addresses and browser information, to optimize functionality and ensure security. Legal Basis for Processing: We process your information based on: Your explicit consent, where required (e.g., for newsletters or cookies). Contractual necessity to provide RTA services or process job applications. Legal obligations, such as compliance with SEBI or DPDP Act requirements. Legitimate interests, such as improving services or preventing fraud, provided these do not override your rights. We ensure that all processing activities adhere to the principles of data minimization and purpose limitation under the DPDP Act, 2023 using your data only for the purposes specified and with appropriate safeguards in place. 3. How & with whom We Share Your Information We may share your personal information within KFintech, its branches or its subsidiaries, authorized business partners/service providers/ third party agents or auditors / government authorities wherever applicable. Your Information may be shared only when necessary to provide our services, comply with legal obligations, or support our operations. We manage your data responsibly as follows: No Selling of Personal Data: We do not sell your personal information to third parties for their direct marketing purposes. Third-Party Service Providers: We may share your information with trusted and authorized parties such as distributors, brokers, brokers, sub-brokers, banks, custodians, depositories, or service providers, who assist us in delivering our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify. Legal and Regulatory Compliance: We may disclose your information to regulators (e.g., Securities and Exchange Board of India, Data Protection Board of India (DPB), government bodies, law enforcement agencies, or auditors (internal & external) when required by applicable laws, including but not limited to the Digital Personal Data Protection Act (DPDPA) 2023, Information Technology Act, or other sectoral regulations. KFIN TECHNOLOGIES LTD. shares your personal information only when necessary to provide our services, comply with legal obligations, or support our operations. We handle your data responsibly as follows: No Selling of Personal Data: We do not sell your personal information to third parties. Third-Party Service Providers: We may share your information with trusted service providers, such as regulators, distributors, brokers, brokers, sub-brokers, banks, custodians, depositories, or service providers, who assist us in delivering our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify. Legal and Regulatory Compliance: We may disclose your information to regulators (e.g., Securities and Exchange Board of India), Data Protection Board of India (DPB), government bodies, law enforcement agencies, or auditors (internal & external) when required by applicable laws, including the Digital Personal Data Protection Act (DPDPA) 2023, Information Technology Act, or other sectoral regulations. All data sharing is conducted in compliance with applicable laws, ensuring your information is protected and used only for authorized purposes. 4. Information Security We maintain reasonable security practices and procedures including encryption, secure on-premises servers, and strict access controls, to protect your data from unauthorized access, alteration, or disclosure. As an ISO 27001:2022 certified organization, our security framework is designed to ensure data integrity, confidentiality, and availability while adhering to industry best practices and regulatory requirements. KFIN TECHNOLOGIES LTD stores your personal information securely to ensure its confidentiality, integrity, and availability, in compliance with the Digital Personal Data Protection Act (DPDPA) 2023 and other applicable regulations. Our storage practices include: Secure Storage Systems: We store your data on encrypted servers and databases protected by industry-standard security protocols. On-Premises Data Servers: We maintain secure, on-premises data servers located in controlled facilities, protected by advanced physical and digital security measures to safeguard your information. Access Controls: Access to your personal information is restricted to authorized personnel only, who are trained in data protection practices and require access to perform their duties. Data Backup and Recovery: We maintain secure backups of your data to ensure its availability and protect against data loss, with recovery processes in place to address potential incidents. Retention Periods: We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy notice, comply with legal obligations (such as Securities and Exchange Board of India record-keeping requirements), or resolve disputes. Data no longer needed is securely deleted or anonymized. Third-Party Storage Providers: If we use third-party cloud or storage providers, they are carefully vetted and contractually obligated to comply with stringent security and confidentiality standards. We continuously monitor and update our storage practices to protect your data and ensure compliance with applicable laws 5. Data Retention and Disposal KFintech will not retain your personal information for a period more than necessary to fulfil the purposes outlined in this Privacy statement unless a longer retention period is required by law or for related legitimate business purposes such as comply with legal and regulatory requirements mandated by the Securities and Exchange Board of India (SEBI), PFRDA or tax authorities. Personal information that is no longer needed to be retained as per legal and business requirements will be disposed in a secure manner. We continuously review our retention policy and practices to ensure they align with legal obligations and your rights as a data principal. KFIN TECHNOLOGIES LTD. is committed to protecting your personal information from unauthorized access, use, alteration, disclosure, or destruction. As an ISO 27001 certified organization, we implement robust technical and organizational measures to ensure the confidentiality and security of your data, including: Encryption: We use encryption technologies to secure data during transmission and storage. Secure Infrastructure: Our servers, files, and facilities are protected with advanced security controls. Access Restrictions: Only authorized personnel with a legitimate need to access your data are granted permission, and their access is strictly monitored. Regular Audits: We conduct periodic security audits and assessments to identify and address potential vulnerabilities. Third-Party Oversight: We require our trusted third-party service providers, such as IT vendors to adhere to stringent security standards to safeguard your information. 6. International Data Transfers KFintech may transfer your personal information to countries outside your country of residence to KFintech group companies or third parties including to countries which have data protection standards from those which apply in your country or region of residence. Our service providers are located globally; however, the primary locations are India, Bahrain, Malaysia etc. We shall take reasonable and appropriate steps in line with applicable laws while executing such transfer. For residents of India, Compliance with DPDP Act: Any international data transfer will comply with DPDP Act 2023 requirements, including ensuring that the recipient country or entity provides an adequate level of data protection or is subject to standard contractual clauses approved by the Data Protection Board of India. Safeguards: We implement robust safeguards, such as encryption and Data transfer agreements, to protect your data during transfer and ensure it is managed in accordance with Indian data protection laws. Transparency: We will inform you if your data is to be transferred internationally, specifying the purpose and the safeguards in place, unless such transfer is necessary to fulfil legal or contractual obligations. Limited Scope: International transfers, if any, are limited to what is necessary for providing our services or complying with regulatory requirements. KFIN TECHNOLOGIES LTD adheres to the principles of data minimization and storage limitation under the Digital Personal Data Protection Act (DPDPA) 2023. We retain and dispose of your personal information responsibly as follows: Retention Period: We retain your personal information only for as long as necessary to provide our services, fulfil contractual obligations with our clients (AMCs), communicate with you, or comply with legal and regulatory requirements, such as those mandated by the Securities and Exchange Board of India (SEBI) or tax authorities. For example, we may retain transaction or KYC data as required to support investor services or meet record-keeping obligations. Right to Deletion: In compliance with the DPDP Act 2023, we honour your right to request deletion of your personal data, subject to any legal exemptions. We have established procedures to process such requests within the required timeframes and notify you accordingly. Secure Disposal: When your personal information is no longer needed, we securely delete or anonymize it using dedicated erasure processes to prevent unauthorized access or recovery. Storage Practices: Data is stored securely on our on-premises and cloud data servers, which are protected by encryption and access controls, ensuring compliance with applicable laws. We continuously review our retention policy and practices to ensure they align with legal obligations and your rights as a data principal. 7. Your Data Principal Rights KFintech Is committed to upholding your rights as a data principal/subject under the applicable Privacy regulations, for example: Digital Personal Data Protection Act (DPDPA) 2023 for Indian residents. These rights empower you to control your personal information. Your rights as a data principal may differ based on your applicable jurisdictions. Subject to the laws of your country, you may have certain rights as a data subject including but not limited to Right to Access, Right to Correction, Right to Deletion, Right to Withdraw Consent (this will not affect the lawfulness of prior processing before your withdrawal), Right to Nominate( You can nominate another individual to exercise your rights on your behalf in the event of your death or incapacity), Right to Grievance Redressal (You can raise concerns or complaints about our data practices, and we will address them promptly). How to Exercise Your Rights: For exercising your rights, we may need to request certain information from you for verifying your identity and confirming that you are authorized to exercise the rights and access information. You can exercise your rights by contacting us at: privacy@kfintech.com. KFIN TECHNOLOGIES LTD. is committed to protecting your personal information in accordance with the Digital Personal Data Protection Act (DPDPA) 2023. In the unlikely event of an incident or breach that compromises or is likely to compromise the confidentiality, integrity or availability of your personal data, we will take the following actions: Prompt Notification: We will notify you and the Data Protection Board of India as soon as practicable, within the timeframes mandated by the DPDP Act, 2023 typically within 72 hours of becoming aware of the breach, unless it is unlikely to result in significant harm. Details Provided: The notification will include the nature of the breach, the categories of personal data affected, potential consequences, and the measures we are taking to mitigate the impact and prevent future incidents. Contact Channels: We will communicate the breach via email, our website, or other appropriate channels, ensuring you are informed promptly and can take necessary steps to protect your interests. Mitigation Measures: We will implement immediate actions to contain and address the breach, such as isolating affected systems, enhancing security protocols, and cooperating with regulatory authorities. 8. Children’s Privacy KFintech’s websites, its associated products services and hosted contents are not intended for the use by children. We do not knowingly collect personal information of children without verifiable parental consent. If KFintech learns that a child has submitted personally identifiable information online without verifiable parental consent, we will take all reasonable measures to delete the information from our database and not to use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by Law). If you become aware of any personal information collected from children, please email us at privacy@kfintech.com. KFIN TECHNOLOGIES LTD. primarily stores and processes your personal information on secure, on-premises data servers located in India, in compliance with the Digital Personal Data Protection Act (DPDPA) 2023 and other sectoral laws. In cases where your personal data may need to be transferred outside India, such as for processing by third-party service providers or to support our services, we ensure the following: Compliance with DPDP Act: Any international data transfer will comply with DPDP Act 2023 requirements, including ensuring that the recipient country or entity provides an adequate level of data protection or is subject to standard contractual clauses approved by the Data Protection Board of India. Safeguards: We implement robust safeguards, such as encryption and contractual agreements, to protect your data during transfer and ensure it is handled in accordance with Indian data protection laws. Transparency: We will inform you if your data is to be transferred internationally, specifying the purpose and the safeguards in place, unless such transfer is necessary to fulfil legal or contractual obligations. Limited Scope: International transfers, if any, are limited to what is necessary for providing our services or complying with regulatory requirements. 9. Linked Websites Our privacy practices regarding the processing of personal information we collect and store about you through our Web portals and Mobile applications will be as per the privacy policy of those portals. When KFintech provides links to third party websites or services, we are not responsible for the privacy practices, notices, or contents of such third-party websites. KFIN TECHNOLOGIES LTD. is committed to upholding your rights as a data principal under the Digital Personal Data Protection Act (DPDPA) 2023. These rights empower you to control your personal information. Below are the rights you are entitled to and how you can exercise them: Right to Access: You can request confirmation of whether we process your personal data and obtain details about the data we hold, including its categories, purposes, and recipients. Right to Correction: You can request correction of inaccurate, incomplete, or outdated personal data to ensure its accuracy. Right to Deletion: You can request the deletion of your personal data, subject to legal or regulatory exemptions, such as SEBI record-keeping requirements. Right to Withdraw Consent: If we process your data based on your consent, you can withdraw it at any time, without affecting the lawfulness of prior processing. Right to Nominate: You can nominate another individual to exercise your rights on your behalf in the event of your death or incapacity. Right to Grievance Redressal: You can raise concerns or complaints about our data practices, and we will address them promptly. How to Exercise Your Rights To exercise any of these rights, please contact our Data Protection Officer at: privacy@kfintech.com. Certain information from you may be requested to verify your identity and ensure that you have the proper authorisation to access the information or exercise any of your rights. 10. Incident Management We maintain comprehensive incident response procedures to swiftly identify, evaluate, and address any potential personal data breaches. Our systematic approach ensures immediate containment, thorough investigation, and prompt remedial action to safeguard your information. We are committed to transparent communication with regulatory authorities and affected individuals within statutory timelines, keeping you informed throughout the resolution process while implementing measures to prevent recurrence. Our employees receive regular training on these procedures and clearly understand their responsibilities in incident reporting. Usage: We use cookies to enhance your experience on our website. Cookies help us understand how you use our site, remember your preferences, and improve our services. Control: You can control cookies through your browser settings. You have the option to block or delete cookies, but this may affect the functionality of our website. To know more about our cookie policy please click here 11. Cookies Usage: We use cookies to enhance your experience on our website. Cookies help us understand how you use our site, remember your preferences, and improve our services. Control: You can control cookies through your browser settings. You have the option to block or delete cookies, but this may affect the functionality of our website. Know more about our cookie policy please click here. KFIN TECHNOLOGIES LTD. is committed to addressing your concerns about our data practices promptly and transparently, in compliance with the Digital Personal Data Protection Act (DPDPA) 2023. If you have any complaints or queries regarding the handling of your personal information, please contact our Data Protection Officer: Address: [Insert Address] Email: privacy@kfintech.com 12. How to contact us If you have any queries, grievances, or complaints regarding our privacy practices or managing of your personal information, please contact our Data Protection Office at: Contact Person: Shailaja V Address: Data Privacy Office, 301, The Centrium, 3rd Floor, 57, Lal Bahadur Shastri Road, Nav Pada, Kurla (West), Mumbai – 400 070, Maharashtra, India Email: Privacy@Kfintech.com KFIN TECHNOLOGIES LTD. may update this Privacy Notice periodically to reflect changes in our data practices, legal requirements, or operational needs, in compliance with the Digital Personal Data Protection Act (DPDPA) 2023. When we make changes, we will: Post the updated Privacy Notice on our website with the effective date clearly indicated. Notify you of significant changes through our website, email, or other communication channels, as appropriate. We encourage you to review this Privacy Notice regularly to stay informed about how we collect, use, share, store and protect your personal information. Your continued use of our website, mobile applications, or services after the updated notice is posted constitutes your acceptance of the revised terms. This Privacy Notice does not create any contractual or legal rights beyond those provided under applicable laws. 13. Changes to This Privacy Notice KFintech is committed to protect the privacy of its website users. We may change the data privacy practices and update this Privacy statement as on when the need arises. When we make changes, we will: Post the updated Privacy Notice on our website with the effective date clearly indicated. Notify you of significant changes through our website, email, or other communication channels, as appropriate. We encourage you to review this Privacy Notice regularly to stay informed about how we collect, use, share, store and protect your personal information. Your continued use of our website, mobile applications, or services after the updated notice is posted constitutes your acceptance of the revised terms. This Privacy Notice does not create any contractual or legal rights beyond those provided under applicable laws. Privacy statements for other categories of data subjects: 1. Candidates and Interns Detailed Privacy notice will be provided when one applies for a job, internship in KFintech through careers page available on KFintech Website. Categories of Personal Information that we process: Candidate Name, Mobile, Email Id, DOB, (only year), resume, Educational Details, Industry, Functional Area, Address, Fresher Status, Experience, Notice Period, Skills, Aadhaar. Use of Personal Information: Assess candidate’s suitability towards job requirement as part of recruitment or internship selection process and associated processes including background verification by our authorized vendor. Conduct various employer related activities if you are selected to join the organization and to enable us to ensure that we are compliant with any applicable labour and or other relevant laws. Legal basis of Processing: We process your personal information when it is necessary for performance of Contract to which you are a party or to take steps at your request prior to entering a contract or based on your consent as per applicable laws. Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement. 2. Employees and Alumni Detailed Privacy notice will be provided at the time of onboarding. For our Alumni, detailed privacy notice is available here: Categories of Personal Information that we process: Employee Name, Contact details,Father’s Name, Date of Birth, Country of Birth, Age, Gender, Marital Status, Personal Email ID, Hobbies,Dependant details, Current & Permanent Address, Emergency Contact Name, Contact Relationship, Mobile Number, Office Contact Number, Landline Number, Email ID, Contact Address, Educational qualifications, Employment related details, background check details, national identification details (for selected countries), Bank Details, Nomination Details, Aadhar, PAN, Visa Details, Salary Details, Life Cycle Details, Document details official details, Salary and Compensation, Claims and financial details like tax, benefits like medical insurance details, performance and development records, digital access and IT related information including information we obtain from monitoring the use of our official systems, network (as permitted by law), travel records, leave and attendance details, emergency contact number etc. Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country. Use of Personal Information: Onboard you as an employee, to provide employment related services and benefits and to comply with any applicable labor/ employment/ other laws. As an alumni/ ex-employee, to contact you, to communicate about and enable you to participate in alumni related activities, help you with employment related details etc. Legal basis of Processing: We process your information based on the below legal basis of processing: With your consent, where required. For performance of Employment Contract Comply with legal obligations. For the purposes of Legitimate interests pursued by us or a third party Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement. 3. Shareholders Detailed Privacy notice will be provided at the time onboarding. Categories of Personal Information that we process: Personal identification details- Full Name, Date of birth, Gender, Email ID, Mobile number, contact details, Residential address, Photograph, Bank details,Guardian details, Nominee details, Signature specimen, DP ID, Client ID, Folio details, Aadhar, PAN, Demat account, Residential status, Legal status, FATCA declarations, , Estimated income , Transaction history, Dividend and interest payment record, Tax status, TDS details, etc. Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country. Use of Personal Information: Contact you. Process your requests and share updates about the company. For purpose of administering tax deductions on source for dividends paid out by KFintech to its shareholders Legal basis of Processing: We process your information to comply with legal obligations arising out of applicable regulations. Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement. 4. Investors Detailed Privacy notice will be provided at the time onboarding. Categories of Personal Information that we process: Personal identification details- Full Name, Email ID, Contact details, Bank details,Nominee details, , Folio/ Fund details, DP ID, Folio details, PAN, Demat account, Residential status, Date of birth, Gender, Aadhaar, Passport number (for NRIs/foreign investors), Photograph, Signature specimen, Residential address, Mailing address (if different), Investment type (SIP/lump sum), Mutual fund scheme details, Transaction history (purchase/redemption/switch), Dividend payout/reinvestment preference, Tax status (Resident/Non-resident), TDS details, FATCA declarations, KYC status, Occupation, Guardian details (if nominee is a minor), Address proof, Mode of holding (single/joint/anyone or survivor), Joint holder details (name, PAN, relationship) etc. Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country. Use of Personal Information: Contact you. Process your requests and share updates about the company. Legal basis of Processing: We process your information based on the below legal basis of processing: With your consent, where required. Comply with legal obligations. For the purposes of Legitimate interests pursued by us or authorized third party Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement. 5. Visitors Detailed Privacy notice will also be displayed at the visitor’s entrance areas in KFintech’s offices. Categories of Personal Information that we process: Visitor Full name, contact details,Time of entry, Time of exit, Organization name (if visiting on behalf of a company), organization,Asset details (if any), national identification details (for selected countries), Purpose and Date of Visit, Photograph and CCTV images and videos, IT related information including information we obtain from monitoring the use of our official systems and network (as permitted by law). Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country. Use of Personal Information: Allow you access to KFintech premises. Allow you to use Wi-Fi/KFintech official systems/ network. Legal basis of Processing: We process your information based on the purposes of Legitimate interests pursued by us or based on your consent wherever required, as per applicable laws and regulations. Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement. 6. Vendors Categories of Personal Information that we process: Vendor Full name, Designation/role, Contact details, email id, Company name, Business address, organization,PAN and tax related details, financial details, GSTIN (Goods and Services Tax Identification Number), Bank details, Signature specimen, Vendor code or ID (Broker), ARN code, Compliance documents, Contract/agreement details, TIN/VAT number (if applicable). Personal or sensitive information collected may differ based on the business requirement of the entity and legal requirement of a country. Use of Personal Information: For vendor empanelment Purchase Order and invoice creation. For communication purpose For demos & submission of proposals Legal basis of Processing: We process your information for performance of contract where you are a part or based on your consent wherever required as per applicable laws and regulations. Data recipients / accessible to: Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation. For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.