GDPR Compliance & Your Data Rights

NovaRock Advisory is committed to protecting your personal data and respecting your privacy rights. This GDPR statement explains your rights under the General Data Protection Regulation (GDPR) and how we handle your information in compliance with both international and Indian data protection standards.

1. Your GDPR Rights

1.1 Right to Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a clear, structured format within 30 days.

1.2 Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request corrections. We will update your information promptly upon verification.

1.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to legal and regulatory requirements. We will comply unless we have legitimate grounds to retain the information.

1.4 Right to Restrict Processing

You can request that we limit how we use your personal data while you verify its accuracy or challenge our processing activities.

1.5 Right to Data Portability

You can request your personal data in a machine-readable format and have it transferred to another service provider where technically feasible.

1.6 Right to Object

You can object to our processing of your data for direct marketing purposes or where we process your data based on legitimate interests.

1.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

2. How We Protect Your Data

2.1 Encryption and Security

All data transmitted through our website is encrypted using SSL/TLS protocols. Personal information is stored securely with industry-standard security measures.

2.2 Access Control

Only authorized personnel have access to your personal data, and only for legitimate business purposes. All employees are bound by confidentiality obligations.

2.3 Data Minimization

We collect only the minimum data necessary to provide our services and meet regulatory obligations. We do not sell or rent your personal data.

2.4 Data Retention

We retain personal data only as long as necessary for the purposes stated in our Privacy Policy or as required by law. Financial records are kept in line with SEBI and other regulatory requirements.

3. How to Exercise Your Rights

To exercise any of your GDPR rights, you can contact us using the details below:

• Email: care@novarockadvisory.com
• Phone: +91 9468365162
• Online: Submit a contact form

We will respond to your request within 30 days. If we need additional time, we will inform you and explain the reason for the delay.

4. International Data Transfers

NovaRock Advisory primarily operates within India. If we need to transfer your personal data outside India or the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Your explicit consent where required
• Transfers necessary for contract performance or legal obligations

5. Right to Lodge a Complaint

If you believe we have not handled your personal data properly or have breached your privacy rights, you have the right to lodge a complaint with a supervisory authority. In India, you can contact the Ministry of Electronics and Information Technology (MeitY). For EU residents, you can contact your local data protection authority.

6. Relationship with Our Privacy Policy

This GDPR statement should be read together with our full Privacy Policy, which explains in detail how we collect, use, and protect your personal data.