Privacy Policy

Last updated: 29 July 2026

This Privacy Policy describes how Manan Dua, operating through manandua.in ("we", "us", "our"), collects, uses, stores, and protects personal information provided by visitors and clients ("you") through this website. By using this website or submitting your information, you agree to the practices described in this policy.

This policy is aligned with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

1. Information We Collect

Information you provide directly

• Full name, email address, and phone number submitted through the contact form, newsletter signup, or onboarding questionnaire
• Financial information shared through the onboarding questionnaire — your stated goals, monthly investable surplus, investment experience, horizon, and risk comfort
• Any correspondence you send us by email or through the website

This website uses Google Analytics to understand how visitors use it, such as which pages are viewed and how people arrive at the site. This tracking is off by default and only activates if you click "Accept" on the cookie banner shown on your first visit. If you click "Decline," or simply close the banner without choosing, no analytics tracking occurs. Google Analytics may set cookies and collect information such as your approximate location, device and browser type, and pages visited. This data is processed by Google in accordance with Google's own privacy policy. You can withdraw consent at any time by clearing your browser's stored data for this site.

2. How We Use Your Information

• To respond to your enquiries and schedule consultations
• To send the "Meridian" newsletter, if you've subscribed
• To prepare for a financial discovery call based on what you've shared in the onboarding questionnaire
• To comply with applicable legal and regulatory obligations under AMFI, SEBI, and IRDAI
• To maintain records as required by law

We will never sell, rent, or trade your personal information to any third party for marketing purposes.

3. Legal Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent — when you submit a form, subscribe to the newsletter, or contact us, you provide explicit consent for us to process your data for the stated purpose
• Legitimate interests — responding to enquiries, maintaining records, and improving our services
• Legal obligation — maintaining records required under AMFI, SEBI, IRDAI, and income tax regulations

4. Data Sharing

We do not sell or share your personal information with third parties except in the following limited circumstances:

• Service providers — Formspree, a third-party form-handling service that delivers form submissions to our inbox, and any email delivery platform used to send the newsletter. These providers process data on our behalf under their own privacy and security practices.
• Regulatory requirements — AMFI, SEBI, IRDAI, or other regulators, if we are legally required to disclose information

This website's fonts are served via Google Fonts and icons via a third-party CDN (Tabler Icons); these services may log standard technical information such as IP address and browser type as part of normal web delivery.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Client financial records are retained for a minimum of five years, as required under AMFI regulations. Newsletter subscriber data is retained until you unsubscribe.

6. Your Rights

Under the DPDPA 2023 and applicable Indian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for processing, where consent was the legal basis
• Request deletion of your personal data, subject to legal retention obligations
• Nominate a person to exercise these rights on your behalf

To exercise any of these rights, write to us at contact@manandua.in. We will respond within 30 days.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we encourage you to use secure networks when submitting personal information.

8. Third-Party Links

This website may contain links to external websites, including social media platforms. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before sharing any personal information.

9. Children's Privacy

This website and the services described on it are intended for adults seeking financial services and are not directed at, or intended for use by, individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.