1. Who We Are

Boffin Financial Solutions Private Limited (referred to as "Boffin," "we," "us," or "our") is a financial services company incorporated under the Companies Act, 2013, in India. We operate the website www.boffinsolutions.com (the "Website") and provide financial services and solutions to clients globally, including within India.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information obtained from visitors to our Website, users of our services, and individuals who interact with us through any channel, including our WhatsApp support chat and contact forms.

For the purposes of applicable data protection laws — including India's Digital Personal Data Protection Act, 2023 (DPDP Act), the General Data Protection Regulation (GDPR) for visitors from the European Economic Area (EEA), and equivalent laws in other jurisdictions — Boffin Financial Solutions Private Limited is the Data Fiduciary / Data Controller.

2. Information We Collect

We collect the following categories of personal information:

a) Information You Provide Directly

• Contact Form Data: Full name, email address, phone number, company name (if applicable), country of residence, and the content of your message or enquiry when you submit our website contact form.
• WhatsApp Communication: Your WhatsApp phone number, display name, and the content of messages exchanged through our WhatsApp chat feature for customer support.
• Email Correspondence: Any information you share when you email us at contact@boffinsolutions.com.

b) Information Collected Automatically

• Usage Data: Pages visited, time spent on each page, click patterns, scroll depth, and navigation paths within the Website.
• Device & Technical Data: IP address, browser type and version, operating system, screen resolution, device type (desktop, mobile, tablet), and referring URL.
• Location Data: Approximate geographic location derived from your IP address (country and city level). We do not collect precise GPS location.
• Cookie & Tracking Data: Information collected through cookies, pixels, and similar technologies as described in Section 9 below.

3. How We Collect Information

We collect information through the following means:

• Contact Form: When you voluntarily submit enquiries or service requests via the contact form on our Website.
• WhatsApp Click-to-Chat: When you initiate a conversation using the WhatsApp button on our Website, connecting you with our support team via WhatsApp Business.
• Google Analytics: Automatically collects anonymised usage and behavioural data about how visitors interact with our Website.
• Browser Cookies & Session Data: Collected automatically when you visit our Website. See our Cookies section for more details.
• Direct Email Communication: When you contact us via email.

4. Purpose & Use of Your Information

We use the information we collect for the following purposes:

• Responding to Enquiries: To process and respond to contact form submissions, email queries, and WhatsApp messages in a timely and effective manner.
• Service Delivery: To provide, manage, and improve the financial services we offer to you.
• Customer Support: To assist you with queries, complaints, or support requests through our WhatsApp Business channel.
• Website Analytics: To understand how visitors use our Website, identify popular content, measure performance, and enhance user experience using Google Analytics data.
• Marketing & Communications: To send you relevant service updates, newsletters, or promotional materials, but only where we have your explicit consent or a legitimate interest to do so.
• Legal & Compliance Obligations: To comply with applicable laws, regulations, court orders, and governmental requests in India and other applicable jurisdictions.
• Security & Fraud Prevention: To protect our Website, services, and users from fraudulent, abusive, or unauthorised activity.
• Business Improvement: To conduct internal analytics, research, and service improvement initiatives based on aggregated, anonymised data.

We will not use your personal data for purposes other than those listed above without informing you and, where required by law, obtaining your consent.

5. Legal Basis for Processing

Depending on your jurisdiction, we rely on the following legal bases to process your personal data:

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating our website and delivering services (e.g., web hosting, email delivery, analytics). These parties are contractually bound to handle your data securely and only for the purposes we specify.
• Google LLC: Through Google Analytics (see Section 7) for website performance analysis. Google processes data in accordance with its own Privacy Policy.
• Meta Platforms (WhatsApp): When you use the click-to-chat WhatsApp button, your interaction is subject to WhatsApp's privacy policy and Meta's data practices.
• Legal Authorities: When required by law, court order, or regulatory authority in India or any other jurisdiction where we operate, including the Ministry of Electronics and Information Technology (MeitY), SEBI, RBI, or equivalent international bodies.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred. We will notify you of any such change via a prominent notice on our Website.
• With Your Consent: Any other sharing will only occur with your explicit consent.

7. Google Analytics

Our Website uses Google Analytics, a web analytics service provided by Google LLC ("Google"), to help us understand how visitors interact with our Website. Google Analytics uses cookies to collect information such as how often users visit the Website, what pages they visit, and what other websites they used prior to visiting ours.

We use this information to compile reports and improve our Website. Google Analytics collects only the IP address assigned to you on the date you visit our Website, rather than your name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information.

Google's ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.

You can prevent Google Analytics from recognising you on return visits by disabling cookies in your browser, or by installing the Google Analytics Opt-out Browser Add-on. We have enabled IP anonymisation in Google Analytics to reduce the precision of your location data.

8. WhatsApp Click-to-Chat Feature

Our Website includes a Click-to-Chat WhatsApp button that allows you to initiate a direct conversation with our customer support team through WhatsApp Business. This feature is designed to provide faster, more convenient communication.

When you click the WhatsApp button, you will be redirected to the WhatsApp application or web interface. By initiating a conversation, you are sharing your WhatsApp number and any messages with us through Meta's (WhatsApp's) platform.

Please note:

• Communications via WhatsApp are subject to WhatsApp's Privacy Policy and Terms of Service.
• We use WhatsApp Business for customer support purposes only. We will not use your WhatsApp number to send unsolicited marketing messages.
• Conversations may be stored internally for customer service quality and record-keeping purposes.
• WhatsApp messages are end-to-end encrypted by default, providing an additional layer of security for your communications.

9. Cookies & Tracking Technologies

Our Website uses cookies and similar technologies to improve functionality, personalise your experience, and analyse traffic. A cookie is a small data file stored on your browser or device when you visit a website.

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Website to function. They cannot be switched off in our systems. These include session management and security cookies.
• Analytics Cookies (Google Analytics): Help us understand how visitors engage with the Website by collecting information anonymously. These can be disabled via your browser settings or the Google Analytics opt-out tool.
• Functionality Cookies: Remember your preferences (such as language or region) to improve your experience on subsequent visits.
• Marketing / Targeting Cookies: Used to deliver relevant content or measure campaign effectiveness. These are only activated with your consent.

Managing Cookies:

You can control and/or delete cookies as you wish using your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect certain functionality of the Website. For more details, visit www.aboutcookies.org or www.allaboutcookies.org.

10. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Contact Form Data: Retained for up to 3 years from the date of submission to facilitate follow-ups and ongoing business relationships, unless you request deletion earlier.
• WhatsApp Communication Logs: Retained for up to 1 year for customer service quality and compliance purposes.
• Google Analytics Data: Retained for 26 months as per default Google Analytics settings. Aggregated, anonymised data may be retained indefinitely for statistical purposes.
• Email Correspondence: Retained in accordance with our internal email retention policy, typically 5 years for business communications.
• Legal & Compliance Records: Retained as required by applicable Indian laws (e.g., Companies Act, IT Act) and relevant international regulations.

After the applicable retention period, your data will be securely deleted or anonymised so it can no longer be associated with you.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our security measures include:

• SSL/TLS encryption for all data transmitted to and from our Website (HTTPS).
• Access controls and role-based permissions limiting access to personal data to authorised personnel only.
• Regular security assessments and vulnerability testing of our Website and infrastructure.
• Secure, password-protected systems and encrypted data storage.
• Staff training on data protection and privacy best practices.

However, please note that no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable law.

12. International Data Transfers

As Boffin Financial Solutions provides services globally, your personal information may be transferred to, stored, and processed in countries outside India, including countries within the European Economic Area (EEA), the United States, or other jurisdictions where our service providers operate.

We ensure that any international transfer of personal data is carried out in compliance with applicable data protection laws, including India's DPDP Act and GDPR, using appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EEA data transfers.
• Transfers only to countries deemed adequate by relevant data protection authorities.
• Binding contractual obligations on receiving parties to protect your data.

By using our Website and providing your personal information, you consent to such transfers in accordance with this Privacy Policy.

13. Your Rights & Choices

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to applicable legal obligations.
• Right to Restrict Processing: Request limitation of how we process your personal data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format to transfer to another service provider.
• Right to Object: Object to processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: Withdraw your consent at any time for processing activities based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: File a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact us using the details in Section 18 below. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

14. Rights of India Residents (DPDP Act, 2023)

If you are a resident of India, your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) include:

• Right to Information: Know what personal data is being processed about you, the purpose of such processing, and the identities of any third parties with whom it has been shared.
• Right to Correction and Erasure: Request correction of inaccurate personal data or erasure of personal data that is no longer necessary or where consent has been withdrawn.
• Right of Grievance Redressal: Raise grievances with us. We will acknowledge and resolve your grievance within the timelines prescribed under the DPDP Act.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Lodge a Complaint: Approach the Data Protection Board of India if your grievance is not redressed satisfactorily by us.

Our Grievance Officer for the purposes of the DPDP Act and the Information Technology Act, 2000 can be reached at:
Email: contact@boffinsolutions.com
Phone: (+91) 512-3171269

15. Children's Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal information from a person under 18 without appropriate consent, we will take prompt steps to delete such information.

Under India's DPDP Act, 2023, processing of personal data of children (below 18 years of age) requires verifiable parental consent. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at contact@boffinsolutions.com.

16. Third-Party Links

Our Website may contain links to third-party websites, tools, or services that are not operated or controlled by Boffin Financial Solutions Private Limited. These include, but are not limited to, social media platforms, financial portals, and external resource sites.

This Privacy Policy applies solely to our Website. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We strongly advise you to review the Privacy Policy of any third-party website you visit via links on our Website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our Website's homepage or other appropriate locations.
• Send an email notification to users where we hold your email address, where required by law.

Your continued use of our Website following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: