Zomint Privacy Policy
Welcome to Zomint!
The domain name www.zomint.com (hereinafter referred to as “Website”) is owned by Zomint Tech Private Limited (“Zomint Tech”).
1. Introduction
Zomint is a group of companies which include Zomint Tech, a private limited company incorporated under Companies Act, 2013 and Zomint Services Private Limited (“Zomint Services”), a private limited company incorporated under Companies Act, 2013 and includes all present and future affiliates of Zomint Tech or Zomint Services respectively (together “Zomint”, “we”, “our” and “us”). Zomint Services, an AMFI-registered Mutual Fund Distributor, is responsible for processing personal data collected in connection with its mutual fund distribution and related services. Zomint Tech may provide technology and other support services to Zomint Services as a service provider/data processor, subject to applicable law and contractual safeguards.
This Privacy Policy (“Policy”) respects your privacy and is committed to protecting your personal and financial information. This Policy explains how Zomint collects, uses, processes, stores and safeguards your personal data when you access or use our website, applications and related investment services.
Zomint processes personal data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made thereunder, and applicable regulatory requirements governing mutual fund distribution and related services, in each case to the extent applicable and in force from time to time.
We process your personal data for the purposes described in this Policy and in accordance with applicable law. Where consent is required, we will obtain your consent in the manner prescribed under applicable law.
2. Information We Collect
We may collect the following categories of information:
2.1 Personal Identification Information
This may include your full name, date of birth, email address and phone number, Permanent Account Number (PAN), Aadhaar or other KYC documents, and address and identity verification details.
2.2 Financial Information
To provide investment services, we may collect your investment preferences, portfolio details, income range and financial profile, risk appetite and investment goals, and transaction and investment activity data.
2.3 Usage Data
When you interact with our platform, we may automatically collect your IP address, device type and operating system, browser type, and website usage data and interaction logs.
2.4 Communication Data
This may include emails and messages sent to our support team, customer service interactions, and call logs related to services provided by Zomint or account support.
3. Partner Platforms – Investwell
Zomint may use third-party technology and service providers to facilitate its mutual fund distribution and investor servicing operations.
Zomint currently uses the Investwell investment platform operated by Excel Net Solutions Private Limited (“Investwell”) for certain backend investment and operational functions, which may include account setup, mutual fund transaction processing, portfolio tracking, investment reporting and related investor servicing functions.
When you use Zomint's investment features, certain personal and financial information may be processed through Investwell's systems to facilitate the relevant services.
3.1 Data Handling via Investwell
Zomint may provide Investwell with only such personal data as is reasonably necessary for the specific services and purposes for which Investwell has been engaged.
Where Investwell processes personal data on behalf of Zomint Services, such processing will be governed by applicable law and the contractual arrangements between the parties.
Investwell may process personal data for purposes such as:
- facilitating account onboarding;
- processing mutual fund transactions;
- maintaining and displaying portfolio information;
- generating investment reports;
- providing transaction and account-related functionality; and
- providing other technology or operational support services.
Zomint remains responsible for determining the purposes for which personal data is processed in connection with its mutual fund distribution services, to the extent Zomint Services acts as the Data Fiduciary.
4. Purpose of Data Processing
We process personal data only for lawful purposes and in accordance with user consent. Personal data may be used but not be limited for following:
- verify identity and complete KYC requirements
- Understand Investor's requirements
- execute investment transactions
- maintain portfolio records
- communicate important service updates
- comply with regulatory, legal, and compliance requirements
- improve platform performance and user experience
Zomint does not sell, lease, or trade personal data to third parties.
Zomint does not use personal data collected in connection with mutual fund distribution services for unrelated purposes or unrelated group-company businesses except where such processing is permitted under applicable law and, where required, supported by the requisite consent or other lawful basis.
5. Data Security and Protection
Zomint and its service providers implement industry-standard security practices to safeguard personal and financial information.
Encryption: All sensitive information is encrypted during transmission and storage using 256-bit encryption or equivalent security standards.
Access Controls: Access to user data is restricted to authorised personnel who require it for operational purposes and are bound by confidentiality obligations.
Infrastructure Security: Systems are hosted on secure cloud infrastructure with continuous monitoring, firewalls, and intrusion detection mechanisms.
Password Protection: User passwords are stored using secure one-way hashing mechanisms.
Security Audits: Periodic security and compliance audits are conducted to ensure adherence to privacy and cybersecurity standards.
Backup and Recovery: Secure backups and disaster recovery systems are maintained to ensure service continuity.
While we have established and are maintaining reasonable security practices and procedures consistent with industry standards and appropriate for the information we maintain and the nature of our business, we cannot guarantee the complete security of all internet-transmitted data due to its inherent vulnerability.
6. Data Sharing and Legal Compliance
Zomint does not share investor data with its group companies for unrelated businesses or cross-marketing purposes except where such sharing is specifically permitted under applicable law and supported by the requisite consent/other lawful basis.
Personal data may be shared with mutual fund houses, Registrar and Transfer Agents (RTAs), payment processors, financial institutions, and regulatory authorities, only when necessary for business activity and according to the applicable regulations/guidelines.
Zomint remains the data fiduciary, while service providers such as Investwell may act as data processors under applicable data protection laws.
7. Rights of Users
Under the Digital Personal Data Protection Act, 2023, users (“Data Principals”) have certain rights regarding their personal data. These include:
- the right to request access to personal data processed by us
- request correction or updating of inaccurate personal data
- request deletion of personal data subject to regulatory retention requirements
- withdraw consent for data processing where applicable
- seek grievance redressal related to personal data processing
Requests can be submitted by contacting us at support@zomint.com.
8. Data Retention
Personal data will be retained for as long as reasonably necessary for the purposes for which it was collected and/or as required under applicable legal, regulatory, tax, accounting, audit, dispute-resolution and record-retention requirements. Where retention is no longer necessary, Zomint will take reasonable steps to securely delete or anonymise the data, subject to applicable law.
9. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance user experience, analyse website traffic, and improve platform performance. Users may choose to disable cookies through browser settings; however, certain website features may not function properly without them.
10. External Links
Our website or applications may contain links to third-party websites or services. Zomint is not responsible for the privacy practices, policies, or content of such third-party platforms. Users are encouraged to review the privacy policies of any external websites they visit.
11. How We Use Your Contact Information
When you provide your contact details to Zomint, we may use them to communicate with you regarding our services. This may include contacting you through WhatsApp, phone calls, SMS, email, push notifications, or other available contact channels.
We may use your contact information to send consultation updates, appointment reminders, portfolio review updates, service-related information, educational content, customer support messages, offers, promotions, and other relevant communications from Zomint.
You may opt out of promotional communications at any time by using the unsubscribe option provided in the communication or by contacting Zomint. Please note that even if you opt out of promotional messages, we may still send important service-related communications where required to provide our services, manage your consultation, or comply with applicable obligations.
12. Contact and Grievance Redressal
For questions, concerns, or requests related to this Privacy Policy or the processing of personal data, please contact us:
Email: support@zomint.com
Contact: +91 7696442264
We will make reasonable efforts to address all requests within a reasonable timeframe.
13. Changes to This Policy
Zomint may update this Privacy Policy periodically to reflect regulatory changes, operational updates, or improvements to our services. Any revised policy will be posted on our website with the updated effective date. Continued use of our services after such changes constitutes acceptance of the updated Privacy Policy. Please check this page periodically for updates, as this Policy may be revised to reflect changes in our practices or applicable laws.