Privacy Policy

Rehbar Fin Services Pvt Ltd (“Rehbar”, “we”, “us”, “our”) is a company incorporated in India with its registered office at 1/1, The Presidency, #1, 4/1, St Marks Rd, Shanthala Nagar, Ashok Nagar, Bengaluru, Karnataka 560001. We offer Shariah-compliant investment and business funding services.

This Privacy Policy explains how we handle personal data when you visit rehbar.co.in, submit an enquiry or application, or otherwise engage with our services. It applies to our website and to the services described on it.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Rehbar is the Data Fiduciary in respect of the personal data described here, and you are the Data Principal.

We collect only the data we need to respond to you, assess an application, meet our legal obligations, and operate our website.

Information you give us:

• Identity and contact details — name, email address, phone number, and postal address.
• Business details — company or entity name, sector, stage, turnover, funding requirement, and supporting documents you choose to share with a funding application.
• Investor details — investment amount, preferences, and risk profile information you provide when expressing interest in an investment opportunity.
• Verification and compliance records — KYC documents and identifiers required under the Prevention of Money Laundering Act, 2002 and applicable regulatory guidance, collected only when you proceed to onboarding.
• Correspondence — the contents of emails, forms, calls, and messages you send us.

Information we collect automatically:

• Technical data — IP address, browser type and version, device type, operating system, and referring page.
• Usage data — pages visited, time spent, and interactions with the site, collected in aggregate to understand what is useful.

We do not knowingly collect data from children, and our services are not directed at persons under 18 years of age.

We use personal data for the following purposes:

• To respond to your enquiry and provide the information or service you asked for.
• To assess a funding application or investment interest, including due diligence and internal credit and risk review.
• To perform a contract with you, or to take steps at your request before entering into one.
• To meet legal and regulatory obligations, including KYC, anti-money-laundering, tax, audit, and record-keeping requirements.
• To operate, secure, and improve our website and services, and to detect and prevent fraud or misuse.
• To send you service communications about an application or account you hold with us.
• To send you marketing communications about our products and services, where you have consented — you can withdraw that consent at any time.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you without human review.

We process personal data on the basis of your consent, given at the point you submit a form or otherwise share your details with us, and for the legitimate uses permitted under the DPDP Act — including where you have voluntarily provided data for a specified purpose, and where processing is necessary to comply with a legal obligation or an order of a court or regulator in India.

Where processing rests on consent, you may withdraw that consent at any time by writing to info@rehbar.co.in. Withdrawal does not affect processing carried out before withdrawal, and we may need to retain certain records to meet legal obligations.

We share personal data only where it is necessary, and only with parties bound to protect it:

• Service providers — hosting, database, email, analytics, and IT support providers who process data on our instructions under contract.
• Professional advisers — auditors, legal counsel, accountants, and Shariah advisers, where relevant to a transaction or obligation.
• Counterparties to a transaction — where you are an investor or investee, the information necessary to structure and administer the arrangement you have entered into.
• Regulators and authorities — where disclosure is required by law, regulation, court order, or a lawful request from a government agency in India.

Our infrastructure providers may store or process data outside India. Where that happens, we transfer data only to jurisdictions permitted under applicable Indian law, and we require appropriate contractual safeguards.

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as required by law. Records relating to financial transactions and KYC are retained for the periods prescribed under applicable regulations, typically a minimum of five years from the end of the relationship or the date of the transaction, whichever is later. Enquiry data that does not lead to a relationship is deleted or anonymised once it is no longer useful.

We apply reasonable security safeguards — access controls, encryption in transit, restricted internal access on a need-to-know basis, and vendor due diligence — to protect data against unauthorised access, disclosure, alteration, or loss. No system is perfectly secure, but in the event of a personal data breach we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct or update data that is inaccurate, incomplete, or out of date.
• Erase personal data that is no longer needed for the purpose it was collected for, where we are not required to retain it.
• Withdraw consent you previously gave, without affecting processing already carried out.
• Nominate another individual to exercise your rights in the event of death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, write to info@rehbar.co.in with enough detail for us to identify you and your request. We will respond within the timelines set out under applicable law.

Admin sign-in uses essential session cookies. Your theme preference is stored locally in your browser. When enabled, Vercel Web Analytics measures aggregate site use without analytics cookies; Speed Insights measures page performance.

When configured, Sentry receives error diagnostics. Form bodies, request credentials, URL query parameters and visitor identity are removed from error reports. We do not send enquiry fields as analytics event properties.

You can block or delete cookies through your browser settings. Blocking essential cookies may affect how parts of the site work.

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version is always available on this page, with the last-updated date shown at the top. Where a change is material, we will take reasonable steps to notify you.

If you have a concern about how your personal data is handled, you may contact our Grievance Officer:

• Email — info@rehbar.co.in
• Phone — +91 97385 50055
• Post — Grievance Officer, Rehbar Fin Services Pvt Ltd, 1/1, The Presidency, #1, 4/1, St Marks Rd, Shanthala Nagar, Ashok Nagar, Bengaluru, Karnataka 560001

We will acknowledge your complaint and work to resolve it within the timelines prescribed under applicable law.