This Privacy Policy describes how Au Trust Gold, a unit of Chandra Kanti Jewellers, and its affiliates (collectively “Au Trust Gold”, “we”, “our”, “us”) collect, use, share, protect or otherwise process your information/personal data through our website www.autrustgold.com, including the related mobile site and mobile application (hereinafter referred to as the “Platform”). Please note that you may be able to browse certain sections of the Platform without registering with us. We do not offer any product/service under this Platform outside India, and your personal data will primarily be stored and processed in India. By visiting this Platform, providing your information or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use and the applicable service/product terms and conditions, and agree to be governed by the laws of India, including but not limited to the laws applicable to data protection and privacy. If you do not agree, please do not use or access our Platform.
We collect your personal data when you use our Platform or services, or otherwise interact with us during the course of our relationship, and related information provided from time to time. Some of the information that we may collect includes, but is not limited to, personal data/information provided to us during sign-up/registration or while using our Platform, such as your name, date of birth, address, telephone/mobile number, email ID, and/or any such information shared as proof of identity or address. Some sensitive personal data may be collected with your consent, such as your bank account details, PAN, Aadhaar-linked verification data obtained through government consent flows (we store only the last four digits of Aadhaar, never the full number), or payment instrument information — all of the above being in accordance with applicable law(s).
You always have the option to not provide information, by choosing not to use a particular service or feature on the Platform. We may track your behaviour, preferences, and other information that you choose to provide on our Platform; this information is compiled and analysed on an aggregated basis. We will also collect information related to your transactions on the Platform and on third-party business partner platforms (such as payment gateways). When such a third-party business partner collects your personal data directly from you, you will be governed by their privacy policies. We shall not be responsible for a third-party business partner’s privacy practices or the content of their privacy policies, and we request you to read their privacy policies prior to disclosing any information.
Stay safe: if you receive an email or a call from a person or association claiming to be Au Trust Gold seeking any personal data like your debit/credit card PIN, net-banking or mobile-banking password, UPI PIN or OTP, never provide such information. We will never ask for them. If you have already revealed such information, report it immediately to an appropriate law-enforcement agency.
We use personal data to provide the services you request — buying, selling, systematic investment plans (SIP), gifting, leasing, borrowing against gold, and physical redemption. To the extent we use your personal data to market to you, we will provide you the ability to opt out of such uses. We use your personal data to fulfil orders and settle payouts; verify your identity (KYC) as required by law; enhance customer experience; resolve disputes; troubleshoot problems; inform you about online and offline offers, products, services and updates; customise your experience; detect and protect us against error, fraud and other criminal activity; enforce our terms and conditions; conduct marketing research, analysis and surveys; and as otherwise described to you at the time of collection of information. You understand that your access to these products/services may be affected in the event permission is not provided to us.
We may share your personal data internally within our group entities and affiliates to provide you access to the services and products offered by them; these entities may market to you as a result of such sharing unless you explicitly opt out. We may disclose personal data to third parties such as payment gateways and payment aggregators, banks, KYC/identity-verification providers, vault custodians and trustees, logistics and insurance partners for physical delivery, lending partners (where you avail a loan), and communication service providers. These disclosures may be required for us to provide you access to our services, to comply with our legal obligations (including under the Prevention of Money Laundering Act), to enforce our user agreement, to facilitate our marketing and advertising activities, and to prevent, detect, mitigate and investigate fraudulent or illegal activities related to our services.
We may disclose personal and sensitive personal data to government agencies or other authorised law-enforcement agencies if required to do so by law, or in the good-faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders or other legal process. We may disclose personal data to law-enforcement offices, third-party rights owners, or others in the good-faith belief that such disclosure is reasonably necessary to enforce our Terms of Use or this Privacy Policy; respond to claims that content violates the rights of a third party; or protect the rights, property or personal safety of our users or the general public. We do not sell your personal data.
To protect your personal data from unauthorised access or disclosure, loss or misuse, we adopt reasonable security practices and procedures — including encryption of the connection (HTTPS), encryption of sensitive fields such as bank account and identity numbers at rest, and access controls with audit trails. Once your information is in our possession, or whenever you access your account information, we adhere to our security guidelines to protect it against unauthorised access. However, the transmission of information over the internet is not completely secure for reasons beyond our control; by using the Platform, you accept the inherent security implications of data transmission over the internet, which cannot always be guaranteed as completely secure. You are responsible for protecting your login credentials, PIN and one-time passwords for your account.
You may request deletion of your account by writing to us at the contact information provided below or through in-app support. Because your account holds monetary value, we will first ask you to settle open positions (sell or withdraw your gold balance, and close any pending payout, redemption, lease or loan); account closure is then processed, normally within 7 business days. In the event of any pending grievance, claim, shipment or unsettled service, we may refuse or delay deletion of the account. Once the account is deleted, you will lose access to it. We retain your personal data for no longer than it is required for the purpose for which it was collected, or as required under applicable law — KYC and transaction records are retained for at least five years as required under the Prevention of Money Laundering Act. We may retain data if we believe it is necessary to prevent fraud or future abuse, or for other legitimate purposes, and may continue to retain your data in anonymised form for analytical and research purposes.
You may access, rectify and update your personal data directly through the functionalities provided on the Platform (profile, KYC and bank sections), or by writing to us at the contact information below.
By visiting our Platform or by providing your information, you consent to the collection, use, storage, disclosure and other processing of your information on the Platform in accordance with this Privacy Policy. If you disclose to us any personal data relating to other people (for example, a gift recipient or a nominee), you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy. You, while providing your personal data over the Platform or any partner platforms or establishments, consent to us (including our affiliates, lending partners, technology partners, marketing channels, business partners and other third parties) contacting you through SMS, WhatsApp or other instant-messaging apps, calls and/or e-mail for the purposes specified in this Privacy Policy.
You have the option to withdraw consent already provided by writing to the Grievance Officer at the contact information provided below. Please mention “Withdrawal of consent for processing personal data” in the subject line of your communication. We may verify such requests before acting on your request. Please note that withdrawal of consent will not be retrospective and will be in accordance with the Terms of Use, this Privacy Policy and applicable laws. In the event you withdraw consent given to us under this Privacy Policy, we reserve the right to restrict or deny the provision of our services for which we consider such information to be necessary.
Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our information practices. We may alert/notify you about significant changes to the Privacy Policy in the manner required under applicable laws.
We aim to acknowledge grievances within 48 hours and resolve them within 30 days.