Privacy Policy

Welcome to Private CFO Club, operated by Gigafactry Innovations Pvt Ltd. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.privatecfo.com and use our services.

Private CFO Club provides comprehensive financial advisory services, including personal financial planning, business CFO services, tax planning, investment advisory, and related financial consultation services. We understand that financial information is highly sensitive and personal, and we take our responsibility to protect your privacy seriously.

This Privacy Policy applies to all users of our website and services, including visitors, consultation clients, newsletter subscribers, and business clients. By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We are committed to transparency about our data practices and will provide clear information about how your personal information is handled. This policy describes our practices regarding the collection, use, and disclosure of information through our website and services, and it applies regardless of how you access or use our services.

We collect various types of information to provide and improve our services:

• Contact Information: Name, email address, phone number, mailing address
• Demographics: Age, gender, occupation, industry, income range
• Financial Information: Investment goals, risk tolerance, financial objectives, current financial situation
• Professional Information: Business details, company size, industry type, revenue information
• Consultation Details: Specific financial needs, questions, and requirements during consultations
• Payment Information: Billing details for paid services (processed securely through third-party payment processors)

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click-through rates, search queries
• Location Information: General geographic location based on IP address
• Cookies and Tracking Technologies: Session data, preferences, and website functionality

• Social Media: If you connect through social media platforms, we may receive profile information
• Referral Sources: Information from partners or referral sources about how you found our services
• Public Records: Publicly available business information for business clients
• Service Providers: Data from payment processors, analytics providers, and other service providers

We use your information for legitimate business purposes including:

• Providing personalized financial advice and consultation services
• Conducting financial analysis and preparing recommendations
• Creating customized financial plans and strategies
• Delivering ongoing support and follow-up services
• Processing payments and managing billing

• Responding to your inquiries and consultation requests
• Sending appointment confirmations and reminders
• Providing updates about your financial plans or recommendations
• Sending newsletters and educational content (with your consent)
• Notifying you about service changes or policy updates

• Improving our services and developing new offerings
• Conducting market research and analysis
• Training our staff and quality assurance
• Compliance with legal and regulatory requirements
• Fraud prevention and security measures

• Personalizing your experience on our website
• Analyzing website usage and user behavior
• Sending promotional materials about our services (with your consent)
• Measuring the effectiveness of our marketing campaigns
• Understanding market trends and customer preferences

We process your personal information based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal information for specific purposes, such as marketing communications or newsletter subscriptions.
• Contract Performance: Where processing is necessary for the performance of a contract with you, such as providing financial advisory services or consultation.
• Legitimate Interests: Where we have legitimate business interests that are not overridden by your privacy rights, such as improving our services, fraud prevention, and business analytics.
• Legal Compliance: Where we need to process your information to comply with legal obligations, such as tax reporting, regulatory requirements, or court orders.
• Vital Interests: In rare circumstances, where processing is necessary to protect your vital interests or those of another person.

We will always ensure that our processing is fair, lawful, and transparent, and we will not process your information in ways that are incompatible with the purposes for which it was collected.

We may share your information in the following circumstances:

• Payment processors for handling transactions
• Cloud hosting providers for data storage and website functionality
• Email service providers for communications
• Analytics providers for website and service improvement
• Customer support platforms

• Compliance with court orders, subpoenas, or legal processes
• Regulatory reporting requirements
• Tax reporting obligations
• Law enforcement requests where legally required

• In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity, subject to the same privacy protections.

• Protect our legal rights and interests
• Enforce our terms of service or other agreements
• Prevent fraud or other illegal activities
• Protect the safety and security of our users and the public

• We may share your information with other parties when you have given explicit consent for such sharing.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

We implement comprehensive security measures to protect your personal information:

• Encryption of sensitive data both in transit and at rest using industry-standard protocols
• Secure Socket Layer (SSL) technology for all data transmissions
• Regular security audits and vulnerability assessments
• Firewalls and intrusion detection systems
• Secure backup systems with regular testing

• Employee training on data protection and privacy principles
• Access controls limiting employee access to personal information on a need-to-know basis
• Background checks for employees with access to sensitive information
• Regular review and updating of security policies and procedures
• Incident response plans for potential data breaches

• Secure facilities with controlled access
• Locked storage for physical documents containing personal information
• Secure disposal procedures for documents and electronic media

• Careful vetting of service providers and their security practices
• Contractual requirements for service providers to maintain appropriate security measures
• Regular assessment of third-party security practices

While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly if we become aware of any security breach affecting your personal information.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Consultation records: 7 years after the end of our service relationship
• Financial planning documents: 7 years as required by financial regulations
• Tax-related information: 7 years as required by tax authorities
• Marketing communications: Until you unsubscribe or object to processing
• Website analytics data: 26 months from collection

• Legal and regulatory requirements in the financial services industry
• The nature and sensitivity of the information
• Potential risks from unauthorized use or disclosure
• Whether we can achieve our purposes through other means
• Your requests for deletion or modification

• Overwriting electronic data multiple times
• Physical destruction of paper documents
• Removing all identifying information from any retained records

• We may retain information longer than normal retention periods when required by legal holds, litigation, investigations, or regulatory inquiries.

You may request information about our retention practices for your specific data by contacting us using the information provided in this policy.

You have several rights regarding your personal information:

• Right to Access: You can request a copy of the personal information we hold about you, including details about how it's being processed.
• Right to Rectification: You can ask us to correct any inaccurate or incomplete personal information.
• Right to Erasure: You can request deletion of your personal information in certain circumstances, such as when it's no longer necessary for the original purpose.
• Right to Restrict Processing: You can ask us to limit how we use your information in certain situations.
• Right to Data Portability: You can request a copy of your information in a commonly used format to transfer to another service provider.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.
• Right to Lodge a Complaint: You can file a complaint with relevant data protection authorities if you believe your rights have been violated.

To exercise any of these rights, contact us at info@privatecfo.com or using the contact information provided below. We will respond to your request within 30 days and may require verification of your identity.

Please note that some rights may be limited by legal requirements or the need to provide ongoing services to you.

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

• HTTP Cookies: Small text files stored on your device
• Local Storage: Browser-based storage for website functionality
• Web Beacons: Small graphic images used to track email opens and website usage
• Google Analytics: For website analytics and performance measurement
• Social Media Pixels: For tracking social media campaign effectiveness

• Block all cookies (may affect website functionality)
• Delete existing cookies
• Set preferences for specific websites
• Receive notifications when cookies are set

• Some of our business partners may set cookies through our website. We don't control these cookies and recommend reviewing their privacy policies.

Currently, our website doesn't respond to Do Not Track signals, but you can use browser settings and other tools to limit tracking.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Our website and services may include links to third-party websites and integrate with external services:

• Financial news and research websites
• Regulatory and government websites
• Partner service providers
• Social media platforms
• Payment processing services

• Payment processors (Stripe, PayPal, etc.)
• Email marketing platforms
• Customer support systems
• Analytics and tracking services
• Cloud storage and hosting providers

• We are not responsible for the privacy practices of third-party websites
• Third-party sites have their own privacy policies and terms of service
• We encourage you to review privacy policies before providing information to third parties
• Our privacy policy doesn't apply to information collected by third parties

• When we share data with service providers, we:
• Enter into data processing agreements
• Require appropriate security measures
• Limit data use to specified purposes
• Regularly review their practices

You can choose not to use third-party services or click on external links. Some third-party integrations may be necessary for service functionality, which we'll clearly communicate.

As we operate primarily in India, most of your personal information is processed within India. However, some data may be transferred internationally:

• Use of cloud services with global infrastructure
• Service providers located in other countries
• Backup and disaster recovery systems
• Business operations requiring international access

• United States (for cloud services and analytics)
• European Union (for certain service providers)
• Other countries where our service providers operate

• Adequacy decisions by relevant authorities
• Standard contractual clauses approved by data protection authorities
• Binding corporate rules for multinational service providers
• Certification schemes and codes of conduct
• Specific safeguards for sensitive financial data

• Know when your data is transferred internationally
• Understand the safeguards in place
• Request information about specific transfers
• Object to transfers in certain circumstances

We ensure that all international transfers comply with applicable data protection laws and provide adequate protection for your personal information.

Our services are designed for adults and we do not knowingly collect personal information from children:

• Our services are intended for individuals 18 years and older
• We do not knowingly collect information from children under 18
• Users must confirm they are of legal age to enter into agreements

• If we become aware that we have collected information from a child:
• We will delete the information promptly
• We will not use the information for any purpose
• Parents can request removal of their child's information

• While we may provide general financial education content that could be viewed by minors:
• No personal information collection is required to view educational content
• We don't track or profile users under 18
• Educational content is designed to be appropriate for all ages

• When providing family financial planning services:
• We collect information about family members only when necessary for financial planning
• Information about minor children is collected with parental consent
• We limit collection to what's necessary for financial planning purposes

If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws:

• Significant changes will be announced prominently on our website
• Email notifications to registered users for material changes
• Updated "Last Modified" date at the top of this policy
• Option to review previous versions upon request

• Updates to reflect new services or features
• Changes in legal requirements or regulations
• Improvements to data security measures
• Clarifications based on user feedback
• Changes in third-party service providers

• Continued use of our services after changes constitutes acceptance
• For material changes, we may seek explicit consent
• You can withdraw consent and discontinue services if you disagree with changes

• We encourage you to:
• Review this policy periodically
• Check the "Last Updated" date
• Contact us with questions about changes
• Understand how changes may affect your information

• We maintain records of previous policy versions and can provide them upon request for your review.

For any privacy-related questions, concerns, or requests, you can contact us:

• Email: info@privatecfo.com
• Phone: +91-7084646376
• Address: B-80, SECTOR-65, NOIDA, UP-201301

• Email: privacy@privatecfo.com

• General inquiries: Within 48 hours
• Privacy rights requests: Within 30 days
• Urgent security matters: Within 24 hours
• Complex requests may require additional time with notification

• Clear description of your privacy concern or request
• Proof of identity for security purposes
• Specific information you're requesting or changes you want made
• Preferred method of response

• If you're not satisfied with our response:
• Contact our Data Protection Officer
• Escalate to senior management
• File a complaint with relevant regulatory authorities
• Seek legal advice if necessary

We are committed to resolving privacy concerns promptly and transparently.