ValueXPA privacy policy describing how we collect, use, and protect personal and business information across our website, diagnostic engagements, and managed services.
FinnAcer Technologies LLP (operating the ValueXPA brand, referred to as We, Us, or Our) is a limited liability partnership incorporated in India engaged in the business of providing financial consultancy services and solutions to clients and users. Services are rendered either through the website at valuexpa.com or through mobile applications made available from time to time (collectively, the Platform). This Privacy Policy forms part of the Platform terms and conditions and covers our practices for collecting and processing Personal Information. We are committed to maintaining the confidentiality, integrity, and security of your Personal Information. This Privacy Policy is applicable to the Platform alone and does not apply to the websites of business partners, corporate affiliates, or other third parties even where their websites are linked to the site. We recommend reviewing the privacy statements of any other parties with whom you interact.
This Privacy Policy is intended to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data (the General Data Protection Regulation or GDPR), with respect to the Platform resulting in collection and processing of Personal Information of users in the EU and EEA. For users in the United States, this policy aligns with the California Consumer Privacy Act (CCPA) where applicable. For users in India, this policy is published in accordance with the provisions of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
When you access the Platform we collect, store, and retain certain potential information for provision of Services. This includes personal details such as name, date of birth, age, and gender; contact details such as residential address, contact number, and email address; transaction-related information such as payments, purchases, responses to offers, and downloads or use of Applications; information provided when you contact us for help; login ID and password; user details provided at registration or thereafter; information you enter into our system when using the Application, Services, or products such as questions, discussion contributions, and survey responses; usage details such as time, frequency, duration, and pattern of use, features used, storage consumed; any proof-of-identification documents and data or reports from credit information companies; and any data required for Know Your Customer (KYC) compliances. SPDI Rules additionally classify passwords, financial information, biometric information, information received under lawful contract, visitor registration details, and call data records as sensitive personal data or information.
We may collect information either actively (when you submit it through forms, registration, or engagement workflows) or passively (gathered as you navigate the Platform without active input). Passive collection uses Internet Protocol addresses, cookies, Internet tags (single-pixel GIFs and similar), and navigational data (log files, server logs, and clickstream data). IP addresses are used to diagnose server problems, report aggregate information, and improve the site. Cookies (both session and persistent) help the site remember your preferences and improve navigation. Internet tags indicate page-open frequency and information consulted. Navigational data is used for system management, content improvement, market research, and communication to visitors. You can set your browser to reject cookies; however, not all aspects of the site may remain available if you do so.
By providing your Personal Information (including any subsequent changes) or accessing the site, you consent to collection, storage, use, and disclosure by us for the purposes and persons outlined in this Privacy Policy. Collection of sensitive personal data or information under SPDI Rules requires your express consent, which you provide by affirming assent to this Privacy Policy. Our Services may be unavailable if such consent is not provided or if you withhold Personal Information; in such cases we will not be liable for the denial of Services on account of inadequate Personal Information. We process Personal Information on the legal basis of consent, contract necessity, compliance with applicable laws, or protection of the vital interests of any individual, as the case may be.
When you sign up for our Services you opt in to receive emails, text messages, and WhatsApp messages from us. You have the right to access, correct, delete, or transfer your Personal Information that we hold, including registration details. You can log in to manage your email preferences and follow the unsubscribe instructions in commercial email messages. On request, we will delete the Personal Information provided in connection with the Services, retaining only information required for purposes authorised under this Privacy Policy or as required by law. Upon deletion, copies of your Personal Information may still remain viewable in cached and archived pages.
We retain Personal Information for as long as needed or permitted in light of the purposes for which it was obtained and consistent with applicable law. The criteria for determining retention duration include the length of time we have an ongoing relationship with you and provide Services; any legal obligation to which we are subject (for example, statutory record-keeping requirements for transactions); and our legitimate interests including litigation or regulatory investigations. After the applicable retention period, we either delete the Personal Information or de-identify it so that it is anonymous and not attributable to your identity.
If you are a resident of the European Union (EU) or European Economic Area (EEA), you have specific data protection rights covered by GDPR. You have the right to access, update, or delete the information we hold about you; the right of rectification if information is inaccurate or incomplete; the right to object to our processing of your Personal Information; the right of restriction on our processing; the right to data portability (a copy of your Personal Information in structured, machine-readable, commonly-used format); and the right to withdraw consent at any time where we rely on your consent to process your Personal Information. To exercise these rights, email info at valuexpa dot com. We may ask you to verify identity before responding. You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Information.
Personal Information collected from you will, at all times during retention, be maintained by us (including employees, representatives, partners) in strict confidence. We implement managerial, technical, operational, and physical security control measures commensurate with the information being collected and the nature of our business. We do not undertake liability for unauthorised use of your account or password — notify us immediately at info at valuexpa dot com if you suspect any unauthorised use. We may share your Personal Information with third parties (service providers, vendors) for the purposes of rendering Services to you, and by agreeing to this Privacy Policy you consent to such sharing. For any questions, queries, feedback, comments, or concerns about any of the terms of this Privacy Policy, contact our representative through e-mail at info at valuexpa dot com, or by mail to 44A, 9th Street, A. Teresa Nagar, Chennai 600091, India. Your use of the Platform is also subject to the terms contained in our Terms and Conditions.