Privacy Policy
RM Club LLP ("we", "us", "the LLP") respects your privacy. This policy explains what personal data we collect from members, prospective members and visitors ("you"), why we collect it, how we protect it, and the rights you have. It is written to align with India's Digital Personal Data Protection Act, 2023 and the rules made under it, and the Information Technology Act, 2000.
1. Who is responsible for your data
RM Club LLP (LLPIN [llpin]), [registered address, ranchi, jharkhand, india], is the Data Fiduciary for personal data collected through this website and our onboarding process.
2. Data we collect
- Contact details — name, mobile number, email address and city, provided by you or during onboarding.
- Identity verification (KYC) data — government ID document images, document details, a selfie or short liveness video, a proof-of-address document (such as a utility bill, bank statement or rent agreement) with the address and issue date read from it, and the result of the verification check.
- Membership records — membership details, contributions and payouts recorded under your agreement with the LLP, and our correspondence with you.
- Technical data — IP address, device and browser type, and basic usage logs when you visit our website, used for security.
We do not ask for your banking passwords, UPI PIN, card PIN or OTPs, and you should never share them with anyone.
3. Why we use it
- To verify your identity and prevent fraud, impersonation and misuse of the club.
- To set up, manage and communicate about your membership.
- To meet our legal, tax, accounting and regulatory obligations.
- To respond to your questions and complaints.
We process your data on the basis of your consent, which you give when you complete onboarding and KYC, and where otherwise permitted by law (for example, to comply with a legal obligation). We do not sell your personal data.
4. Identity verification through Didit
We use Didit (didit.me), a specialist identity-verification provider, to carry out KYC. When you open your personal verification link, your ID document, selfie, liveness check and proof-of-address document are collected and checked by Didit on our behalf as a Data Processor, only for verification. Didit may process this data on secure servers outside India. We receive the verification result and keep the KYC record in Didit's secured system rather than on our own website server.
5. Who we share data with
- Service providers who work for us under confidentiality — identity verification (Didit), website hosting (Hostinger), and communication tools.
- Professional advisers such as auditors, chartered accountants and lawyers, where needed.
- Government, regulatory or law-enforcement authorities when the law requires it.
6. How long we keep it
We keep personal data only as long as needed for the purposes above, or longer where a law requires us to (for example, tax and accounting records). When it is no longer needed, we delete it or make it anonymous. If your consent is withdrawn and no legal reason requires us to keep the data, we will erase it within a reasonable time.
7. How we protect it
We use encrypted connections (HTTPS), access controls, restricted administrator access, and reputable providers with recognised security practices. No system is completely secure, but if a personal data breach occurs that affects you, we will inform you and the Data Protection Board of India as required by law.
8. Your rights
- Get a summary of the personal data we hold about you and how it is used.
- Ask us to correct, complete or update inaccurate data.
- Ask us to erase data that is no longer needed, subject to legal retention requirements.
- Withdraw your consent at any time. Withdrawal does not affect processing already done, and may mean we can no longer continue your membership.
- Nominate another person to exercise your rights in case of your death or incapacity.
- Raise a grievance with us, and if not resolved, complain to the Data Protection Board of India.
9. Children
Membership is only for adults aged 18 and above. We do not knowingly collect personal data from children.
10. Grievance Officer
Email: [grievance email] · Phone: [phone]
Address: [registered address, ranchi, jharkhand, india]
We aim to acknowledge complaints within 48 hours and resolve them within 30 days.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with its effective date, and we will inform members of significant changes.