Privacy Policy & Data Security

This Privacy Policy outlines how HM Wealth (referred to as "we", "our", or "the Firm"), an AMFI-registered Mutual Fund Distributor holding ARN-341412, handles, processes, and safeguards any personal and financial information shared by users and investors across this website and our related distribution services.

We are committed to ensuring that your privacy remains protected at all times. Should we request any personally identifiable information, it will only be used in strict accordance with this Privacy Policy, the AMFI Code of Conduct for Mutual Fund Distributors, regulations framed by the Securities and Exchange Board of India (SEBI), and the Digital Personal Data Protection Act, 2023 (DPDP Act).

We recognize that our relationship with investors is built upon absolute trust, professional integrity, and strict confidentiality.

Reasonable technical, administrative, and physical security measures have been implemented to safeguard the security, confidentiality, and integrity of your information, including industry-standard encryption, firewalls, and stringent access controls in accordance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Limitation: While we employ industry-standard safeguards to protect your personal data, we shall not be held liable for any security breach or unauthorized disclosure resulting from circumstances beyond our reasonable control (force majeure, malicious third-party attacks, hardware failure) or where disclosure is mandatory under applicable Indian laws, statutory regulations, or competent judicial orders.

To fulfill statutory distributor obligations, conduct Know-Your-Customer (KYC) onboarding, and service your mutual fund and insurance requirements, we may collect the following categories of information:

• Name & Contact Details: Full legal name, residential address, telephone/mobile number, and active email address.
• Personal Identifiers & Statutory KYC Data: Date of birth, Permanent Account Number (PAN), and masked Aadhaar (processed strictly through SEBI-registered KYC Registration Agencies or UIDAI-compliant offline verification in accordance with PMLA and SEBI KYC Master Circulars).
• Demographic & Financial Information: Gender, occupation, gross annual income bracket, tax residency status (FATCA / CRS declarations), bank account details (account number, IFSC, cancelled cheque for dividend and redemption payouts), and nominee particulars.
• Technical & Operational Information: IP address, device telemetry, browser type, and non-sensitive inputs entered into our financial calculators for your convenience.

Your information is processed strictly for legitimate investment facilitation, operational servicing, and statutory compliance purposes:

• KYC Registration & Verification: To fulfill Know-Your-Customer (KYC) registration and identity verification as mandated by SEBI, AMFI, and SEBI-registered KRAs (CAMS KRA, KFin KRA, CVL, NDML, DOTEX).
• Transaction Processing: To facilitate client-authorized purchase, SIP registration, redemption, switch, or transfer orders with SEBI-registered Asset Management Companies (AMCs) and recognized stock exchange platforms (BSE StAR MF, NSE NMF II).
• Statutory Compliance & Record Maintenance: To maintain internal audit records, transaction logs, and perform regulatory checks as required under SEBI regulations and the Prevention of Money Laundering Act, 2002 (PMLA).
• Service Enhancement: To enhance our digital calculators, improve platform responsiveness, and tailor client support.
• Operational & Investment Updates: To periodically send important transactional confirmations, Consolidated Account Statements (CAS), portfolio health-check summaries, and regulatory circulars.
• Market Research & Direct Communication: To communicate regarding user-initiated inquiries via phone, email, or WhatsApp.

We are deeply committed to ensuring that your data remains secure at all times. Our multi-layered security architecture includes:

Restricted Access: Access to personal information is strictly restricted to authorized personnel who require the data to perform statutory servicing and are bound by formal non-disclosure agreements.

Strict Non-Disclosure Guarantee: We do not sell, distribute, trade, or lease personal information to third parties under any circumstances.

Personal and financial data is shared exclusively when required by law or necessary for processing user-authorized transactions, limited strictly to:

• Mutual Fund AMCs & RTAs: CAMS, KFintech, and respective Asset Management Companies for folio creation, unit allotment, and statement generation.
• Exchange Platforms: BSE StAR MF, NSE NMF II, and verified payment aggregators solely for executing financial transactions initiated by you.
• Insurance Partners: Licensed insurance companies for underwriting and issuing solicited insurance policies.
• Statutory & Law Enforcement Bodies: SEBI, AMFI, the Income Tax Department, FIU-IND, or judicial courts where mandatory under applicable Indian statutes.

Our website may contain links to external portals for investor convenience, informational reference, or transaction routing (e.g., AMC websites, CAMS, KFintech, MF Central, SEBI, and AMFI).

However, once you use these links to leave our website, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting such external sites.

Such external sites are not governed by this Privacy Policy. You should exercise caution and inspect the privacy policy applicable to the website in question.

In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), our website implements a transparent, consent-first cookie framework:

• Strictly Necessary Cookies: Essential for secure session navigation, form validation (CSRF defense), and recording your cookie consent preferences. These cannot be disabled.
• Analytics & Performance Cookies: Measure aggregate website metrics and page performance via Google Analytics 4 (with IP anonymization). These scripts are strictly blocked until you grant affirmative consent.
• Functional Cookies: Enable personalized features such as remembering your custom SIP and lumpsum financial calculator inputs across sessions.
• Marketing & Attribution Cookies: Assess the reach of educational outreach campaigns. We never use cookies for invasive ad profiling.

Under the Digital Personal Data Protection Act, 2023 and SEBI regulations, you are endowed with defined rights regarding your personal information:

• Right to Access: You may request a summary of personal information we process and details of third parties with whom data has been shared.
• Right to Rectification: You may request the update, completion, or correction of inaccurate personal or banking records.
• Right to Erasure: You may request deletion of non-statutory personal data, subject to mandatory retention periods prescribed under SEBI/PMLA laws.
• Right to Grievance Redressal: You have the right to register concerns with our designated Grievance Officer, with escalation access to SEBI SCORES.
• Right to Nominate: You may designate an individual who shall, in the event of death or incapacity, exercise your data rights.

As an AMFI-registered Mutual Fund Distributor, HM Wealth is bound by statutory record retention rules enacted by SEBI and the Prevention of Money Laundering (Maintenance of Records) Rules, 2005.

Client transaction records, folio statements, KYC identity proofs, and mandate registrations must be securely preserved for a mandatory minimum duration of 5 (five) years following the cessation or termination of the distributor-client relationship.

Upon expiry of the statutory retention period, physical records are securely destroyed and digital records are purged or anonymized using cryptographic data wiping standards.

If you have any questions regarding this Privacy Policy, wish to exercise your data principal rights, or have a grievance concerning data handling, please contact our designated officer:

If your grievance is not resolved satisfactorily within 30 days, you may escalate the matter via the SEBI SCORES portal (scores.sebi.gov.in) or the AMFI Grievance Cell.

This Privacy Policy may be updated periodically to reflect changes in our operational procedures, technological infrastructure, or statutory regulations issued by SEBI, AMFI, or the Government of India.

Users are encouraged to review this page periodically to stay informed of any changes. Any modifications to this Privacy Policy will be posted directly on this page with an updated revision date.

Continued use of this website following the posting of updates constitutes your unconditional acknowledgment and acceptance of the revised terms.