Privacy Policy (Updated 19th October 2024)

At Bombay OTC ((PRITHVIA BY PRITHVI (OPC) PRIVATE LIMITED)"we," "us," "our"), your privacy is a priority. We are committed to complying with Indian laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This Privacy Policy outlines the personal data we collect, how we handle it, and your rights regarding your data when you use our cryptocurrency liquidation, retail, OTC, and exchange services.

Information We Collect

We collect the following types of personal and sensitive data:

Personal Information: Name, email address, phone number, address, and identity verification documents (such as Aadhaar, PAN, passport, Bank Statement).
Financial Information: Bank account details, wallet addresses, transaction history, and payment information to process cryptocurrency transactions.
Sensitive Personal Data or Information (SPDI): Passwords, financial information (bank account, wallet addresses), biometric data (if collected), and any information for KYC and AML compliance.
Automatically Collected Data: IP addresses, browser details, and activity logs from our website or mobile app.
Cookies and Tracking Data: Information collected via cookies or similar tracking technologies for user behavior analysis and personalized experience.

Legal Basis for Processing

We process your personal data under the following lawful bases as per Indian laws:

Consent: When you provide explicit consent for processing (e.g., registration, KYC verification).
Legal Obligations: To comply with legal requirements, such as KYC and AML laws.
Legitimate Interest: To safeguard our services and prevent fraud or misuse.
Contractual Obligations: To perform a contract or provide services, such as executing a transaction.

Legal Basis for Processing

We process your personal data under the following lawful bases as per Indian laws:

Consent: When you provide explicit consent for processing (e.g., registration, KYC verification).
Legal Obligations: To comply with legal requirements, such as KYC and AML laws.
Legitimate Interest: To safeguard our services and prevent fraud or misuse.
Contractual Obligations: To perform a contract or provide services, such as executing a transaction.

Purpose of Data Collection

We collect and use your data for the following purposes:

To verify your identity and comply with KYC and AML regulations.
To facilitate and process your cryptocurrency transactions on our platform.
To provide and enhance the services we offer, including customer support and security.
To send updates, notifications, and marketing communications (with your consent).
To comply with legal obligations, such as taxation, law enforcement, or regulatory reporting.
To improve our website and services by analyzing usage patterns and user behavior.

Data Sharing and Disclosure
We do not share, sell, or rent your personal information to third parties except as follows:
With Service Providers: We may share your data with third-party vendors who assist us in providing services, such as payment processors or identity verification services.
Legal Compliance: We may disclose information to government authorities or law enforcement agencies as required under the Information Technology Act, 2000, or other applicable laws, such as to comply with court orders, subpoenas, or legal requests.
With Consent: We may share your information with third parties where you have provided explicit consent.

Security of Your Data
We follow Reasonable Security Practices and Procedures in compliance with the IT Rules, 2011, including encryption and secure server technologies, to safeguard your sensitive personal data. However, no security system is foolproof, and we cannot guarantee absolute protection against data breaches or unauthorized access.
Your Rights
Under Indian law, you have the following rights concerning your personal data:
Right to Access: You can request access to the personal information we hold about you.
Right to Correction: You can ask us to update or correct any inaccurate information.
Right to Withdraw Consent: You may withdraw your consent to data processing at any time, subject to contractual or legal obligations.
Right to Data Portability: You may request a copy of your data in a structured format.
Right to Erasure: You may request the deletion of your data, subject to legal and regulatory compliance requirements.
Right to Object: You may object to specific data processing activities, such as marketing communications.
Cookies and Tracking Technologies
We use cookies and similar technologies to track website usage and improve your experience. You can manage your cookie preferences via your browser settings.

Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

Data Transfer
Your information may be transferred or processed outside India for the purposes outlined in this Privacy Policy. We ensure that any such transfer complies with the provisions of the IT Rules, 2011, and relevant regulations.

Grievance Officer
In compliance with Rule 5(9) of the IT Rules, 2011, we have appointed a Grievance Officer to address complaints related to data privacy:
Grievance Officer: Grievance Officer India
Email: prithviabyprithvi@gmail.com
We will strive to resolve any complaints or issues promptly in accordance with applicable laws.

Amendments
We reserve the right to amend this Privacy Policy as required by law or as our business practices evolve. Any changes will be posted on this page with an updated effective date.