Last updated 2 October 2026. This policy explains how 360 Degree Finance ("we") handles personal data. It is written to meet India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the EU and UK General Data Protection Regulation (GDPR) for visitors in those regions, and the California Consumer Privacy Act as amended by the CPRA (CCPA).
Who is responsible
360 Degree Finance, 615, Suchita Business Park, Nr. Patel Chowk, Ghatkopar East, Mumbai 400077, is the Data Fiduciary (data controller). Grievance Officer: Dhaval, Founder, dhaval@360degreefinance.in, +91 97571 11292.
What we collect
- Enquiry details you give us: name, mobile number, email, the service you are interested in and your message.
- Client information when you engage us: KYC documents such as PAN and address proof, and the income, investment, insurance, tax and loan details needed to provide the service.
- Technical data: basic server logs (IP address, browser type, pages requested) kept for security. This website does not use advertising, analytics or cross-site tracking cookies.
Why we use it and the legal basis
- Responding to your enquiry: your consent, and steps at your request before a contract.
- Providing the services you engage us for: performance of a contract.
- Legal duties such as KYC, anti-money-laundering checks under the Prevention of Money Laundering Act, 2002, and record keeping required by regulators: legal obligation.
- Keeping the website secure: legitimate interests.
- Sending updates, only if you opted in: consent, which you can withdraw at any time as easily as you gave it.
Who we share it with
Only as needed to carry out your request: fund houses, registrars and transfer agents, insurers, banks and NBFCs, and tax portals; our IT, hosting and email providers under confidentiality terms; associate brands only with your consent; and authorities where the law requires. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
Enquiries that do not become an engagement are deleted within 24 months. Client records are kept for the period required by law and regulation, then securely deleted.
Your rights
- Under the DPDP Act: information about the processing of your data, correction, completion, updating and erasure, grievance redressal, nominating another person to exercise your rights, and withdrawing consent.
- Under the GDPR: access, rectification, erasure, restriction, data portability, objection, withdrawing consent, and complaining to your local supervisory authority.
- Under the CCPA: to know, delete and correct personal information, to opt out of sale or sharing (we do neither), to limit use of sensitive personal information, and not to be discriminated against for using these rights.
To make a request, email info@360degreefinance.in with the subject "Privacy request". We will verify your identity and respond within the time allowed by law, generally within 30 days. If you are not satisfied, you may approach the Data Protection Board of India or your local data protection authority.
Transfers, security, breaches and children
Data is stored and processed in India. Where EU or UK residents' data is transferred, we use safeguards such as standard contractual clauses. We use access controls, encryption in transit and staff confidentiality obligations. If a personal data breach occurs, we will inform affected persons and the authorities as the law requires. Our services are not directed at anyone under 18; we process a child's data only with verifiable consent of a parent or lawful guardian.
