This Privacy Policy outlines the manner in which Spark Loom Private Limited, operating the platform MyEquityLab, collects, processes, stores, uses, discloses, and protects personal data of users who access or use its website, mobile interfaces, research reports, analytical tools, and related services (“Services”). By accessing or using the Services, you acknowledge and agree to the terms of this Privacy Policy and consent to the processing of your personal data in accordance with applicable Indian laws including, without limitation, the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, the SEBI Research Analyst Regulations, and any other applicable regulatory guidelines. If you do not agree with the terms of this Privacy Policy, you are advised not to use or access the Services.

MyEquityLab collects personal information that you voluntarily provide during registration, subscription, KYC verification, communication, or use of platform features. Such information may include your name, email address, mobile number, date of birth, address, PAN, masked Aadhaar details, and any documents or information necessary for compliance with SEBI and KYC Registration Agency (“KRA”) norms. Additionally, for regulatory and verification purposes, MyEquityLab may collect records or information from KRAs, payment intermediaries, or statutory authorities. While using the Services, certain technical and usage-related information is automatically collected, including your IP address, device and browser details, access logs, session duration, interaction data, cookies, analytics data, and system diagnostic information. Payment-related information is processed exclusively by CCAvenue, our authorized payment gateway, in accordance with its own terms and privacy standards; MyEquityLab does not store, retain, or access sensitive payment data such as credit card numbers, CVV, UPI IDs, or net banking credentials.

MyEquityLab processes personal data strictly for lawful purposes including user account creation, identity verification, regulatory compliance, service delivery, communication, platform security, analytics, fraud prevention, and customer support. User information may also be used to comply with SEBI-mandated obligations, AML requirements, statutory reporting, or legal directives issued by regulatory or governmental authorities. MyEquityLab may use analytics and tracking tools to monitor platform performance, enhance user experience, and maintain operational integrity. Communication with users may include essential service updates, changes to policies, compliance-related notices, or regulatory information; promotional communication shall be sent only with the user’s explicit consent and may be withdrawn at any time.

MyEquityLab may share personal data strictly on a need-to-know basis with third-party service providers, KRAs, regulatory bodies, auditors, legal advisors, technical partners, or governmental authorities whenever required by law or necessary for service continuity. All such third parties are bound by confidentiality obligations and may process data only to the extent required for delivering their services. MyEquityLab does not sell, rent, trade, or disclose personal data to unrelated third parties for commercial gain. Disclosure may occur if mandated by law, required for the protection of rights, prevention of fraud, enforcement of Terms & Conditions, or compliance with judicial, regulatory, or investigative processes.

MyEquityLab implements industry-standard technical and organizational security measures designed to protect personal data against unauthorized access, alteration, destruction, loss, disclosure, or misuse. Such measures include encryption, secure servers, access controls, periodic audits, masked Aadhaar handling, and adherence to data minimization principles. However, the user acknowledges that no digital platform or transmission method can guarantee absolute security, and the use of the Services is undertaken at the user’s own risk.

Personal data shall be retained only for the duration necessary to fulfill lawful purposes, regulatory obligations, and statutory retention requirements. KYC and regulatory records may be retained for the period prescribed under SEBI, KRA, and AML guidelines. Upon expiry of the mandatory retention period, personal data shall be securely archived or erased, unless required for legal proceedings or legitimate business interests permitted under applicable law.

Under the Digital Personal Data Protection Act, 2023, users have the right to request access to their personal data, seek correction of inaccurate or outdated information, withdraw consent for non-essential processing, request erasure of personal data no longer required by law, and raise grievances regarding data handling. Requests shall be processed in accordance with applicable legal and regulatory requirements; however, data necessary for SEBI compliance, AML directives, KYC retention, or statutory obligations cannot be deleted until the legally mandated period has elapsed. Users may contact the designated Grievance Officer for exercising their rights or lodging complaints regarding data processing.

MyEquityLab uses cookies, tags, and similar tracking technologies to streamline website functioning, analyze usage patterns, improve performance, and personalize the browsing experience. Users may disable cookies through their browser settings; however, certain functions or features of the platform may not operate properly if cookies are disabled. The website may include links to third-party websites, for which MyEquityLab assumes no responsibility regarding data practices, privacy controls, or content. Users are encouraged to review the privacy policies of such third-party sites before use.

The Services are not intended for individuals below 18 years of age, and MyEquityLab does not knowingly collect personal information from minors. Access to the platform from jurisdictions where the use of such Services is restricted or unlawful, including the United States, Canada, and the European Union, is strictly prohibited. Users accessing the website from outside India do so at their own discretion and shall be solely responsible for compliance with applicable local laws.

MyEquityLab reserves the right to modify, update, or revise this Privacy Policy at any time without prior notice. Changes shall be effective upon posting on the website, and continued use of the Services following such modifications shall constitute deemed acceptance of the updated Policy. Users are encouraged to review the Privacy Policy periodically.

For all privacy-related concerns, including access requests, corrections, complaints, or clarifications, users may contact the designated Grievance Officer at Spark Loom Private Limited, First Floor, Building No. 55/1823A, K P Vallon Road, Kadavanthara, Ernakulam, Kerala – 682020, or via email at support@myequitylab.com. All grievances shall be addressed within timelines prescribed under the DPDPA and applicable regulatory guidelines.