Privacy policy

This policy explains how RRBP Advisors and its group entities, including RRBP Global Advisors IFSC LLP (IFSCA Reg. No. IFSCA/TAS/2025-26/0045), handle personal data collected through this website and in the course of an engagement. We process personal data in line with the Digital Personal Data Protection Act, 2023 and, where applicable to a client group, the data protection rules of the jurisdictions in which those entities operate.

What we collect

• Information you give us: name, organisation, email address, mobile number and the content of your enquiry, submitted through the contact or careers form or by email, phone or WhatsApp.
• Career applications: name, contact details, last employer, years of experience and any CV you send.
• Engagement information: during a client engagement, the documents and data required to deliver the service and to meet our own KYC, AML and statutory record-keeping obligations.
• Technical information: standard server log data such as IP address, browser type and pages visited, collected by our hosting provider for security and performance.

Why we use it

• To respond to your enquiry and to scope a possible engagement
• To deliver services under an engagement letter
• To meet KYC, AML/CFT and client due-diligence requirements
• To comply with statutory retention, audit and regulatory inspection obligations
• To assess career applications
• To send regulatory updates, where you have asked to receive them

Cookies and analytics

This website uses your browser’s local storage for a single purpose — to remember that you have accepted the disclaimer notice, so it is not shown on every page. That value stays in your browser, is not transmitted to us, and can be cleared at any time through your browser settings. If analytics are enabled on this site in future, this policy will be updated to say what is collected and how to opt out.

Who we share it with

We do not sell personal data. We disclose it only:

• to our group entities, where the engagement spans more than one jurisdiction
• to regulators, authorities and filing portals, where a filing or a lawful request requires it — for example IFSCA, the SEZ authorities, the MCA, the tax authorities or FIU-IND
• to service providers who host our systems or support delivery, under confidentiality terms
• where disclosure is required by law, a court, or a regulatory direction

Cross-border transfer

Where an engagement involves a group company in the United States, the United Kingdom, Australia, the UAE or elsewhere, personal data may be transferred to that jurisdiction for the purpose of delivering the service. We apply confidentiality and security terms to those transfers.

How long we keep it

Enquiry data that does not become an engagement is retained for up to two years. Engagement records are retained for the period required by the applicable statute, professional standard or regulatory direction — which in several cases is eight years or longer — and are then securely destroyed.

How we protect it

Access is restricted on a need-to-know basis. We use secure data rooms, encrypted transfer, VPN access and digital signature controls, and our staff are bound by professional confidentiality obligations under the applicable professional codes of conduct.

Your rights

• Ask what personal data we hold about you and why
• Ask us to correct or complete inaccurate data
• Ask us to erase data we are no longer required to keep
• Withdraw consent to receive regulatory updates, at any time
• Nominate another person to exercise these rights on your behalf
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved

Requests that conflict with a statutory retention or regulatory obligation cannot be actioned until that obligation ends; we will tell you if that is the case.

Contact

For any data protection question, correction or grievance, write to cs@rrbp.in, or to RRBP Advisors, 34, 4th Floor, Shree Krishna Centre, Mithakhali Circle, Navrangpura, Ahmedabad, Gujarat 380009, India. We acknowledge data protection requests within seven business days.

Last updated: September 2026