Last updated: 19 September 2026
Who we are
This website is operated by Adarsh Sharma, proprietor of 25 Carat Wealth (AMFI-registered Mutual Fund Distributor, ARN-172683) and 25 Carat Ventures, Bareilly, Uttar Pradesh, India ("we", "us"). This policy explains how personal data is collected and handled in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it, and with the record-keeping obligations that apply to mutual fund distribution, insurance intermediation and NPS retirement advisory.
Data we collect
- When you contact us: name, email address, phone number and the contents of your message.
- When you become a client: identity and address proof, PAN, date of birth, bank details, nominee details, financial information needed for goal planning, risk profiling and suitability assessment, and transaction records — collected only with your consent and only to the extent required by law and by the asset management companies, registrars, insurers and PFRDA-regulated entities through which transactions are executed.
- Automatically: basic technical data such as browser type and pages visited, if analytics is enabled (see the Cookie Notice).
Why we use it
- To respond to enquiries and provide the services you ask for.
- To complete KYC, execute transactions and service your investments and policies.
- To meet legal and regulatory obligations under SEBI, AMFI, IRDAI, PFRDA, the Prevention of Money Laundering Act and the Income Tax Act, including record retention for the periods those laws require.
- To send service communications such as statements, reviews and renewal reminders. Marketing communications are sent only with your consent and you may opt out at any time.
Sharing
Personal data is shared only with entities necessary to provide the service — asset management companies, registrar and transfer agents, KYC registration agencies, insurers, the Central Recordkeeping Agency for NPS, and regulated technology providers such as our CRM and email platforms — and with regulators or authorities where the law requires. We do not sell personal data.
Storage and security
Data is stored on access-controlled systems (Zoho and Google Workspace) with role-based permissions and audit logs. Records are retained for as long as the relationship continues and thereafter for the period required by applicable regulations, after which they are deleted or anonymised.
Your rights
You may ask for access to, correction of, or erasure of your personal data, withdraw consent for processing that is not legally mandated, and nominate a person to exercise these rights on your behalf. Write to adarsh@adarshsharma.in. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Children
Data of minors is processed only with verifiable parental or guardian consent, for example when a minor is a nominee or the beneficiary of a policy or investment.
Changes
This policy may be updated from time to time. The date at the top shows the current version.