Rockstud Capital LLP ("Rockstud Capital," "we," "our," or "us"), a SEBI-registered Alternative Investment Fund (Category I – Angel Fund & II) is committed to protecting your privacy under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. This policy outlines how we, as a Data Fiduciary, process digital personal data of Data Principals in compliance with applicable laws, including the Information Technology Act, 2000.
We collect only necessary digital personal data, such as name, email, phone, KYC details, financial information for investments, IP address, and usage data via cookies, adhering to data minimisation and purpose limitation principles under the DPDP Act.
We process personal data only for specified lawful purposes with free, specific, informed, unconditional, and unambiguous consent, or for certain legitimate uses like regulatory compliance and investor services. Consent notices are clear, in plain language (English or Eighth Schedule languages), detailing data, purposes (e.g., providing investment insights, processing queries), rights, and withdrawal options.
Data Principals can access a summary of their data and processing, correct/update/erase it (subject to legal retention), withdraw consent easily, nominate representatives, and seek grievance redressal via our designated contact within 90 days. We respond to requests promptly and publish contact details for our Data Protection Officer (if applicable as Significant Data Fiduciary).
We implement reasonable technical and organisational safeguards (e.g., encryption, access controls, logging retained for 1 year) to prevent breaches, complying with Section 8(5) of the DPDP Act. In case of a breach, we notify affected Data Principals without delay and the Data Protection Board within 72 hours, detailing impacts and remedies.
We do not sell data. Sharing occurs contractually with Data Processors (e.g., service providers) for service delivery, or as required by law/SEBI/RBI to regulators. Cross-border transfers follow Central Government notifications under Section 16.
Cookies enhance experience; manage via browser settings. Data is erased post-purpose or consent withdrawal (unless legally required), with notices 48 hours prior for specified classes.
Verifiable parental/guardian consent is obtained for processing children's data (under 18), with no tracking or targeted advertising.
We update this policy periodically, posting changes with effective dates. Contact our grievance officer at complianceofficer@rockstudcap.com or via website for queries.