Privacy Policy

1. Introduction

INRBIZ PVT LTD ("INRBIZ", "INR GIFT", "we", "us" or "our") respects the privacy of individuals who visit the INR GIFT Website, submit enquiries, interact with our digital properties or use our Services.

This Privacy Policy explains how personal data may be collected, used, disclosed, retained and protected.

2. Organisation Details

Brand: INR GIFT
Legal Entity: INRBIZ PVT LTD
Privacy contact: support@inrgift.com

Address: 904 White Orchid, Near Shell Petrol Pump, Adajan, Surat, Gujarat 395009, India
Email: support@inrgift.com
Phone: +91 9909012681

If a separate privacy or grievance contact is designated in the future, this Policy should be updated.

3. Scope

This Policy applies to personal data collected through the INR GIFT Website, contact forms, enquiry forms, onboarding/account interfaces where applicable, communications, cookies and similar technologies, digital campaigns and other online interactions where this Policy is presented.

Separate privacy notices may apply to specific products, client accounts, employment applications or third-party services.

4. Personal Data We May Collect

The categories depend on the service and interaction.

5. How We Collect Data

Personal data may be collected:

• directly from you;
• through forms;
• during onboarding;
• through communications;
• automatically through cookies or similar technologies;
• through service providers;
• from lawful public sources;
• from identity or compliance providers where applicable; and
• from other lawful sources necessary for the relevant service.

6. Purposes for Processing

Depending on the service and applicable law, INR GIFT may process personal data to:

• respond to enquiries;
• provide requested information;
• create and manage accounts;
• complete onboarding;
• verify identity;
• conduct KYC/AML/CFT and sanctions checks where applicable;
• prevent fraud and abuse;
• provide platform or financial services;
• process transactions;
• provide customer support;
• communicate service information;
• improve the Website and user experience;
• maintain security;
• troubleshoot systems;
• comply with legal and regulatory obligations;
• respond to lawful requests;
• maintain records;
• enforce agreements; and
• send marketing communications where legally permitted.

7. Applicable Indian Data-Protection Framework

India's Digital Personal Data Protection Act, 2023 establishes a framework for processing digital personal data and includes obligations for Data Fiduciaries and rights/duties relating to Data Principals.

The Digital Personal Data Protection Rules, 2025 were notified by the Ministry of Electronics and Information Technology on 14 November 2025. The final implementation of the Website's privacy practices should be checked against the Rules and their notified commencement timeline.

INRBIZ should maintain privacy notices and processing practices consistent with the law applicable to the actual service and data processing activity.

8. Consent and Other Lawful Processing

Where consent is required, INR GIFT will seek it through a clear notice or interface.

Consent requests should be understandable and specific to the relevant purpose.

Where processing is required for a contract, legal obligation, security, fraud prevention or another lawful purpose, the applicable basis should be documented rather than incorrectly described as consent.

9. Withdrawal of Consent

Where processing is based on consent, users may withdraw consent through the mechanism provided by INR GIFT.

Withdrawal does not necessarily affect processing that was lawful before withdrawal.

Certain data may need to be retained where required by law, regulation, contract, security, dispute resolution or other applicable requirements.

10. Cookies

The Website may use cookies and similar technologies for:

• essential Website functions;
• preferences;
• security;
• performance;
• analytics; and
• marketing where actually implemented and legally permitted.

The final production Website should maintain an accurate cookie inventory. Do not publish a list of cookies or vendors that are not actually deployed.

11. Analytics

If analytics tools are deployed, they may collect information about pages viewed, interactions, browser/device characteristics, approximate location and referral source.

The final Policy should identify material analytics providers actually used by the Website.

12. Service Providers

INRBIZ may use service providers for:

• website hosting;
• cloud infrastructure;
• identity verification;
• KYC/AML checks;
• customer support;
• email delivery;
• analytics;
• cybersecurity;
• payment processing;
• technology infrastructure;
• document management; and
• other operational functions.

Vendors should receive only data appropriate to their role and be subject to applicable legal, contractual and security controls.

13. Disclosure of Personal Data

Where lawful and appropriate, personal data may be disclosed to:

• service providers;
• technology vendors;
• financial institutions;
• brokers, exchanges, custodians or counterparties where applicable;
• KYC/AML and identity providers;
• professional advisers;
• auditors;
• insurers;
• regulators;
• government authorities;
• law-enforcement agencies;
• courts or tribunals; and
• other persons where disclosure is legally required or authorised.

14. International Data Transfers

Because INR GIFT is focused on global markets, certain service providers, counterparties or infrastructure may be located outside India.

Where personal data is transferred internationally, INRBIZ will follow applicable legal requirements and implement appropriate safeguards required for the relevant processing activity.

INRBIZ does not claim that all data is stored exclusively in India unless this is verified and operationally true.

15. Data Retention

Personal data will be retained for as long as reasonably necessary for the relevant purpose, subject to:

• legal requirements;
• regulatory obligations;
• tax/accounting requirements;
• contractual obligations;
• dispute resolution;
• fraud prevention;
• security;
• business records; and
• applicable limitation periods.

Actual retention periods should be maintained in an internal retention schedule and updated as systems change.

16. Security

INRBIZ will maintain appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Measures may include access controls, authentication, encryption where appropriate, logging, monitoring, secure development, vendor controls, backups and incident response.

INRBIZ should not claim a particular security certification unless it actually holds that certification.

17. Personal Data Breaches

Where a security incident affects personal data, INR GIFT will follow the incident-response, notification and regulatory requirements applicable to the incident and the relevant law.

18. Children's Data

The Website and Services are not intended to be used in violation of applicable age restrictions.

Where a service has a minimum legal age or other eligibility requirement, INR GIFT will apply the relevant requirement.

19. Privacy Rights

Subject to applicable law, individuals may have rights relating to personal data, which may include rights to obtain information about processing, access information, request correction, request deletion where applicable, withdraw consent where applicable, obtain grievance information and raise complaints.

The precise rights and procedures depend on applicable law and the relevant processing activity.

20. Exercising Privacy Requests

Requests can be submitted to:

Address: 904 White Orchid, Near Shell Petrol Pump, Adajan, Surat, Gujarat 395009, India
Email: support@inrgift.com
Phone: +91 9909012681

21. Grievance Redressal

For privacy-related concerns:

• Privacy/Grievance Contact: INRBIZ PVT LTD
• Email: support@inrgift.com
• Phone: +91 9909012681
• Address: 904 White Orchid, Near Shell Petrol Pump, Adajan, Surat, Gujarat 395009, India

Where a separate statutory grievance officer is required, INRBIZ should designate and publish the relevant details.

22. Marketing Communications

Where legally permitted, INR GIFT may send information about products, services, events, updates or other communications.

Promotional communications should provide an appropriate opt-out mechanism where required.

Service-related communications necessary to operate an account or provide a requested service may continue where legally permitted.

23. Third-Party Websites

The Website may link to third-party websites. Third parties operate independently and have their own privacy practices.

INRBIZ is not responsible for third-party privacy policies or practices except to the extent required by applicable law.

24. Changes to This Privacy Policy

INRBIZ may update this Policy from time to time.

The current version will be posted on the Website with the updated date.

Material changes will be communicated through an appropriate mechanism where required.

25. Contact

INRBIZ PVT LTD — INR GIFT

904 White Orchid, Near Shell Petrol Pump, Adajan, Surat, Gujarat 395009, India

Address: 904 White Orchid, Near Shell Petrol Pump, Adajan, Surat, Gujarat 395009, India
Email: support@inrgift.com
Phone: +91 9909012681