1. Who we are
This website and the related services are operated by Ritesh Deepak Sheth, operating under the name My Fund Guide ("My Fund Guide", "we", "us" or "our").
We are an AMFI-registered Mutual Fund Distributor (ARN-0209). In providing mutual fund distribution and investor-service support, we may handle personal data supplied by investors, prospective investors, representatives and other persons who interact with us.
2. Scope of this policy
This policy applies to personal data collected through our website, enquiry forms, communications, investor-service interactions and other channels through which you provide information to My Fund Guide, to the extent we determine the purposes and means of processing.
Mutual fund AMCs, RTAs, KYC Registration Agencies, banks, payment providers, platforms and other regulated entities may separately process your personal data under their own legal obligations and privacy notices. Their processing is not controlled by this policy.
3. Data protection framework and implementation status
India enacted the Digital Personal Data Protection Act, 2023. The Central Government notified the DPDP Rules, 2025 on 13 November 2025 and prescribed a staggered commencement framework. Several substantive provisions of the Act and Rules are scheduled to commence eighteen months after notification, i.e. in May 2027, while specified provisions commenced earlier. We are therefore using this policy as a forward-looking compliance framework and will update it as applicable provisions become operative.
Nothing in this policy removes or limits obligations imposed by SEBI, AMFI, PMLA/KYC requirements, tax law, court or regulatory directions, contractual obligations, or other applicable law.
4. What personal data we may collect
Depending on the service and the legal/regulatory requirement, we may collect only the information reasonably required for the relevant purpose, including:
- Identity and KYC data: name, date of birth, PAN, KYC status, address, nationality/residential status and identity/address information required by applicable KYC processes.
- Contact data: mobile number, email address, correspondence address and communication preferences.
- Financial and investment information: income range, net-worth range where required, investment objectives, risk-related information, folio/account identifiers, transaction information, holdings and goal-planning information.
- Tax and regulatory information: information required for FATCA/CRS, UBO or other statutory/regulatory processes where applicable.
- Service and communication records: enquiries, requests, complaints, service notes, transaction-related communications and consent/preferences records.
- Technical information: IP address, browser/device information, pages viewed, approximate usage information and security logs where collected by our website or security systems.
5. Why we use personal data
We may process personal data for the following purposes, subject to the applicable legal basis and any required consent:
- Responding to enquiries and providing requested services.
- Processing or supporting mutual fund transactions and investor-service requests.
- Completing KYC, AML/CFT, FATCA/CRS, UBO and other regulatory or statutory processes where applicable.
- Maintaining transaction, service, audit and compliance records.
- Communicating about requested services, transactions, operational matters, regulatory changes or important account/service information.
- Conducting internal controls, fraud prevention, information-security monitoring and incident management.
- Improving our website and services using aggregated or appropriately de-identified information where feasible.
- Sending promotional or marketing communications where a valid consent or other permitted basis exists and providing a practical way to withdraw such permission where required.
- Complying with applicable law, legal process, regulatory directions and lawful requests.
6. Consent and your choices
Where processing is based on consent, we aim to obtain consent through a clear affirmative action and to provide information about the purpose of processing in an understandable manner. We do not intend to treat silence or a pre-selected marketing option as affirmative consent where consent is required.
You may withdraw consent where the processing is based on consent. Withdrawal does not invalidate processing already carried out lawfully before withdrawal and may not stop processing that is required or permitted under another applicable legal obligation or lawful purpose.
7. Mutual fund distribution: data sharing and MFD-specific implications
Mutual fund distribution can involve multiple regulated and operational participants. Personal data may therefore need to move between parties to complete KYC, transaction processing, investor servicing, reconciliation, reporting, compliance and record-keeping.
| Data activity | Typical parties | Privacy control |
|---|---|---|
| KYC / identity verification | AMC, RTA, KRA, authorised KYC/verification providers and regulators as applicable | Use for the relevant regulatory/service purpose; restrict unnecessary access and disclosure. |
| Transaction processing | AMC, RTA, banks/payment providers, authorised transaction platforms and other service providers | Share only information reasonably required to execute or service the requested transaction. |
| Compliance / audit | Regulators, statutory authorities, auditors or professional advisers where lawfully required | Disclose only as required or permitted by law and maintain appropriate records. |
| Technology / hosting | Cloud, IT, security, CRM, email or other contracted service providers | Contractual confidentiality, access controls, security safeguards and purpose limitation. |
| Marketing | Only authorised service providers/partners where permitted | No sale of personal data. Use marketing data only on an applicable lawful basis and honour withdrawal/opt-out preferences. |
SEBI has previously directed that digital platforms involved in mutual fund distribution/advice and industry participants holding investor data should respect investor data privacy, including restrictions on sharing investor data between group entities and cross-marketing of group-company products. We will take applicable SEBI/AMFI requirements into account when sharing investor information.
8. Service providers and processors
We may use trusted third-party service providers for hosting, email, CRM, cybersecurity, analytics, document processing, communications, transaction support or other operational functions. Where they process personal data on our behalf, we will seek appropriate contractual, technical and organisational safeguards and limit processing to authorised purposes.
Some mutual fund, KYC, banking and platform providers may process data under their own regulatory or contractual responsibilities. Their own privacy terms may also apply.
9. Security safeguards
We aim to maintain reasonable technical and organisational safeguards appropriate to the nature and risk of the personal data, including where appropriate:
- Access controls based on role and business need.
- Secure authentication and credential-management practices.
- Encryption/TLS for applicable data transmission.
- Secure storage and controlled backups.
- Logging, monitoring and review of relevant systems.
- Malware, vulnerability and endpoint protections where appropriate.
- Confidentiality obligations for personnel and relevant service providers.
- Incident-response procedures and escalation for suspected personal-data breaches.
- Periodic review of access, retention and security controls.
No internet transmission or storage system can be guaranteed to be completely secure. We will respond to security incidents in accordance with applicable law and regulatory requirements.
10. Personal data breach response
If we become aware of a personal-data breach, we will assess, contain, investigate, document and escalate the incident and make notifications to affected persons, the Data Protection Board of India and/or other authorities where required by applicable law or rules.
11. Data retention and deletion
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, for legitimate business needs, and/or to satisfy applicable legal, regulatory, tax, audit, dispute-resolution, KYC/AML and record-retention requirements.
Where you request erasure, we will assess the request against applicable retention and legal obligations. Information that must be retained by law may not be deleted until the applicable obligation ends.
12. Your rights under applicable data-protection law
Subject to the applicable provisions, conditions and commencement dates of the DPDP Act and Rules, you may have rights including access to information about your personal data, correction/update, erasure where permitted, withdrawal of consent where processing is consent-based, grievance redressal and nomination of another person to exercise rights in the event of death or incapacity, as provided by law.
Requests should contain enough information for us to verify the requester and identify the relevant records. We may need to retain or process certain information to comply with legal or regulatory obligations.
13. Grievance redressal
For privacy requests, complaints or concerns, please contact the Privacy & Grievance Contact below. We will acknowledge and handle the request through our applicable internal process and within timelines prescribed by applicable law.
Privacy & Grievance Contact: Ritesh Deepak Sheth
Phone: +91 99304 44099
Email: ritesh@myfundguide.com
The title "Data Protection Officer" is not used here unless and until My Fund Guide is required to appoint or formally designates such an officer under applicable law.
14. Cookies, website analytics and similar technologies
The website may use essential technologies needed for operation, security and functionality. Optional analytics technologies may be used to understand website usage and improve the site, subject to applicable law and user choices.
We will not intentionally activate optional Google Analytics tracking before the user accepts analytics cookies/technologies through the consent control on this website. You can change your choice by clearing the site's consent setting or contacting us.
15. Google Analytics
If analytics consent is provided, the site may use Google Analytics to collect website-usage information such as pages visited, approximate interaction data, device/browser information and related analytics signals. Analytics data is used to understand website performance and improve the service. Google may process information under its own terms and policies.
16. Children's data
Our services are not intended to knowingly collect personal data from children except where permitted and handled in accordance with applicable law and where a lawful basis and appropriate consent/authorisation are required.
17. External links
Our website may link to AMC, RTA, AMFI, SEBI, KYC, banking and other third-party websites. We do not control their privacy practices. Please review the privacy notice of the relevant third party before submitting personal data to it.
18. Cross-border processing
Some technology or service providers may process information outside India. Any such processing will be subject to applicable law, contractual safeguards and any restrictions or requirements notified by the Government of India or applicable regulators.
19. No sale or unauthorised commercialisation of personal data
My Fund Guide does not intend to sell personal data. We will not knowingly disclose investor personal data for unrelated commercial exploitation. Data may nevertheless be shared where necessary to provide a requested service, fulfil a transaction, operate technology, comply with a contractual arrangement, or satisfy a legal/regulatory requirement.
20. Changes to this Privacy Policy
We may update this policy to reflect changes in law, regulations, technology, business practices or services. The latest version will be published on this page with its effective/updated date.
21. Regulatory and reference framework
- Digital Personal Data Protection Act, 2023.
- Digital Personal Data Protection Rules, 2025 and applicable commencement notifications.
- Applicable SEBI regulations, circulars, master circulars and directions.
- Applicable AMFI guidelines, circulars and distributor requirements.
- Applicable KYC, AML/CFT, tax, audit, record-retention and other statutory obligations.
22. This site is operated by Ritesh Deepak Sheth proprietor of
My Fund Guide https://myfundguide.com
23. Contact
Ritesh Deepak Sheth
My Fund Guide
AMFI Registered Mutual Fund Distributor (ARN-0209)
Phone: +91 99304 44099
Email: ritesh@myfundguide.com