Apex Financial — DPDPA Privacy Notice (English)

Apex Financial Services Ltd — Privacy Notice

1. Data Fiduciary

Apex Financial Services Ltd, a company registered in India ("Apex", "we", "us").

2. What we collect

Under the Digital Personal Data Protection Act, 2023 (DPDPA), we process the following categories of personal data:

• Identity data — full name, date of birth, PAN, Aadhaar, passport


• Contact data — email address, phone number, mailing address


• Financial data — bank account, transaction history, credit-scoring signals


• Technical data — IP address, device identifiers, browser type, session cookies

3. Lawful basis

• Service delivery — Section 7(a), performance of contract


• Legal obligations — Section 7(b), KYC / AML regulatory requirements


• Employment — Section 7(c), where you are an employee or contractor


• Marketing & personalisation — Section 6, with your explicit consent

4. Retention

Financial records are retained for 10 years under the Prevention of Money Laundering Act. Marketing preferences are retained until you withdraw consent. Inactive accounts are purged after 7 years.

5. Your rights as a Data Principal

Under DPDPA Sections 11–14, you have the right to:

• Access your personal data held by Apex


• Correct inaccurate or incomplete data


• Erase data no longer necessary for the purpose collected


• Nominate a legal heir to exercise your rights


• Grieve — file a complaint through our grievance portal


• Withdraw consent at any time

Exercise any of these through our [Rights Portal](https://app.foctta.com/public/rights-portal) or by emailing dpo@apex.co.

6. Children (DPDPA Section 9)

For data principals under 18, we require verifiable parental consent and do not undertake tracking, behavioural monitoring, or targeted advertising. Guardians may file rights requests on behalf of their minor through the Rights Portal.

7. Data Protection Officer

Our designated Data Protection Officer is Sonal Shah (dpo@apex.co), appointed under DPDPA Section 10.

8. Grievance & appeals

If unsatisfied with our response, you may escalate to the Data Protection Board of India at https://www.meity.gov.in/data-protection-framework.

Last updated: April 2026