Privacy policy | DRoyal Global

01Who this policy covers

This policy applies to droyalglobal.com and to the people who contact us through it.

DRoyal Global is the financial group of the Dhanesh Indore Group, based in Pune. Beneath it sit three pillars, each operating through its own registered entity: investment management, lending, and a members-only credit society. Each entity is responsible for the personal data it handles in the course of its own regulated activity.

Where an entity holds data under a specific regulatory obligation, that obligation takes precedence over this policy. The entities and licences page states which entity does what.

02What we collect

We collect three things, and nothing else on this site.

What	How it reaches us	Why we need it
Your name	You type it into a form or an email	To address you correctly and to know who we are speaking with
Your email address and phone number	You type it into a form or an email	To reply to you
What you write to us	The message field of a form, or the body of an email	To understand what you are asking and to respond usefully

We do not ask for financial information, identity documents or bank details through this website. If a mandate proceeds, those are collected separately under a signed agreement and a regulated onboarding process, with its own disclosures.

We do not run advertising trackers, social media pixels or third party analytics on this site. If that changes, this page changes with it and the cookie banner asks you first.

03Cookies and local storage

This site sets no cookies of its own. It stores one item in your browser's local storage, called droyal-consent-v1, which records the cookie choice you made so that the banner stops asking. That item never leaves your device and contains no personal data.

The cookie policy explains this in full, and you can change your choice at any time from cookie settings.

04How we use what you send

We use it to reply to you, to understand whether we are the right group for what you need, and to keep a record of the conversation so that a colleague picking it up later is not starting from nothing.

We do not use your details to build a profile of you. We do not enrich them with data bought from anyone. We do not use them to train any model.

05The basis on which we hold it

Under India's Digital Personal Data Protection Act 2023, we hold your data on the basis of the consent you give when you choose to contact us. You are giving us that consent for one purpose, which is to respond to you.

We also keep records where a law or a regulator requires it. Where a regulatory retention rule applies, we keep the record for as long as that rule requires, and no longer.

06Who else sees it

People inside the group who need it to answer you. Nobody else, with three exceptions.

Our email and hosting providers, who process it only to deliver the service and under contract
Professional advisers, where we need legal or audit advice on a specific matter
A regulator, a court or a law enforcement authority, where we are legally required to produce it

We do not sell personal data. We do not share it for anyone else's marketing. Where a service provider sits outside India, we transfer data only to countries India permits and only under contract terms that hold them to this policy.

07How long we keep it

An enquiry that goes nowhere is deleted within twenty four months. An enquiry that becomes a relationship is kept for as long as the relationship runs, and then for the period the relevant regulator requires after it ends.

You can ask us to delete sooner. We do, unless a retention rule stops us, in which case we tell you which rule and when it expires.

08What you can ask us to do

The Act gives you these rights, and we honour them whether or not the Act applies to you.

Ask what we hold. We send you a copy of your personal data and tell you who it has been shared with
Correct it. If something is wrong, incomplete or out of date, we fix it
Have it erased. We delete it, unless a legal or regulatory rule requires us to keep it
Withdraw consent. You can withdraw at any time, as easily as you gave it
Nominate someone. You can name a person to exercise these rights for you if you die or become incapable of acting
Complain. To us first, and to the Data Protection Board of India if we do not resolve it

Write to info@droyalglobal.com with the subject "Data request". We acknowledge within seven days and respond within thirty. There is no charge.

09How we protect it

Access is limited to the people who need it. Transport is encrypted. Devices are protected. Providers are chosen on their security posture and held to it by contract.

No system is beyond failure. If a breach affects your personal data, we notify you and the Data Protection Board of India as the Act requires, and we tell you plainly what happened rather than burying it.

10Children

Nothing on this site is directed at anyone under eighteen, and we do not knowingly collect data about children. If you believe we hold data about a child, write to us and we delete it.

11If something goes wrong

Write to info@droyalglobal.com. We acknowledge within seven days and aim to resolve within thirty.

If our answer does not satisfy you, the grievance redressal page sets out the full process. A privacy complaint can also go directly to the Data Protection Board of India.

12Changes to this policy

When we change this page we update the date at the top and describe what changed. Where a change materially affects how we use data you have already given us, we ask you again rather than assuming.