PRIVACY POLICY

Last Updated: 20 / 01 / 2026

1. Introduction

R R Sen & Bros Pvt Ltd (“Company”, “we”, “us”) is an Authorised Dealer Category–II (AD-II) duly authorised by the Reserve Bank of India (RBI) under Section 10 of the Foreign Exchange Management Act, 1999 (FEMA) to undertake permissible foreign exchange transactions, including outward remittances for non-trade current account transactions.

This Privacy Policy describes how we collect, use, store, share, and protect personal data of customers in accordance with:

1. FEMA, 1999
2. RBI Master Direction – Know Your Customer (KYC), as amended
3. RBI circular dated 20 August 2025 on third-party online remittance platforms
4. RBI IT & Cyber Security Guidelines
5. Information Technology Act, 2000 and rules thereunder
6. Digital Personal Data Protection Act, 2023 (DPDP Act), to the extent applicable

2. Applicability

This Policy applies to all customers who use:

1. Our website or physical branches
2. Our digital systems
3. Any integrated third-party online portal / software / mobile application used solely for facilitation of remittance initiation

3. Information We Collect

We collect only such data as is necessary for regulatory compliance and execution of foreign exchange transactions.

1. Personal Information

1. Name, date of birth, nationality
2. Residential address, email address, mobile number

• PAN, Passport, visa details (as applicable)

1. Residential status (Resident / Non-Resident)
   1. KYC & Regulatory Information

1. Identity and address proof documents
2. Purpose-specific documents (education invoices, medical bills, declarations, etc.)

• Source of funds / income declarations

1. Technical & Usage Data

1. IP address, device identifiers
2. System logs and timestamps (for security and audit)

1. Transaction Information
2. Remittance amount, currency, purpose
3. Exchange rate applied

• Beneficiary bank details

1. Transaction reference numbers and audit logs

4. Purpose of Data Processing

Customer data is processed strictly for:

1. Compliance with FEMA, RBI and AML/CFT regulations
2. Execution and settlement of outward remittances
3. Identity verification and fraud prevention
4. Statutory reporting to RBI, FIU-IND, or other authorities
5. Customer communication and grievance redressal

Data is not used for marketing or profiling without explicit consent.

5. Data Storage & Localization
6. All customer data is stored on servers located in India, in accordance with RBI instructions.
7. Where technical processing outside India is unavoidable, data shall be returned to India within 24 hours, with appropriate security and audit controls.
8. Third-party technology providers are not permitted to store or retain customer data independently.
9. Data Sharing & Disclosure

Customer data may be shared only on a need-to-know basis with:

Data is never sold or shared for commercial exploitation.

7. Data Retention

Data is retained for the period required under:

1. FEMA & RBI guidelines
2. Prevention of Money Laundering Act (PMLA)
3. Income-tax and other applicable laws

After expiry of statutory retention, data is securely destroyed or anonymised.

8. Information Security Measures

We maintain robust safeguards including:

1. Role-based access control
2. Encryption of data at rest and in transit
3. Secure authentication mechanisms
4. Audit trails and system logs
5. Periodic IT and cyber-security reviews

9. Customer Rights

Subject to applicable laws, customers may:

1. Request access to their personal data
2. Seek correction of inaccurate data
3. Withdraw consent where processing is consent-based
4. Request deletion of data (subject to regulatory retention requirements)

10. Contact – Data Privacy

Data Protection / Privacy Officer

R R Sen & Bros Pvt Ltd

Email: - info@rrsbforex.com

Phone: - 9875959402

11. Policy Updates

This Policy may be updated from time to time to reflect regulatory changes. Updated versions will be published on our website.