Privacy Policy

StrataFin Advisory (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, submit a consultation request, create a client account, or use our client portal and payment services.

By using our website or Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Services.

We may collect the following categories of information, depending on how you interact with us:

• Contact details: name, email address, phone number, and company name (optional) when you submit a consultation request or create an account.
• Consultation information: services selected, areas of interest, and messages you provide through our contact form.
• Account information: login email, password (stored in hashed form), account creation date, and last login time.
• Payment information: transaction references, order IDs, payment status, purchased plans or packages, and coupon usage. Payment card or bank details are processed by our payment partner and are not stored by us.
• Technical information: browser type, device information, IP address, and pages visited, collected automatically to operate and secure the website.
• Communications: emails we send to you (such as login credentials, OTP codes, and consultation notifications) and records related to support or advisory correspondence.

We use personal information for the following purposes:

• To respond to consultation requests and communicate about potential advisory work.
• To create and manage client accounts and provide access to the client portal.
• To process payments for consultations, packages, and subscriptions.
• To deliver services you have purchased, including subscription benefits and included consultations.
• To send transactional emails such as account credentials, one-time passwords, payment confirmations, and consultation updates.
• To administer coupons, pricing, and subscription usage.
• To maintain website security, prevent fraud, and troubleshoot technical issues.
• To comply with legal obligations and enforce our Terms & Conditions.

We process personal information where necessary to perform a contract with you (for example, when you purchase a service or request a consultation), where you have provided consent (such as submitting a form), where processing is necessary for our legitimate interests in operating and improving our Services (provided those interests are not overridden by your rights), or where required by applicable law.

This Policy is intended to align with applicable data protection requirements in India, including the Digital Personal Data Protection Act, 2023, to the extent it applies to our processing activities.

Online payments are processed through authorised payment partners such as Razorpay. When you make a payment, you may be redirected to or interact with their secure checkout flow. We receive confirmation of payment status and transaction references, but we do not store full payment card or banking credentials on our servers.

Your use of payment services is also subject to the privacy policy and terms of the relevant payment provider.

We use essential cookies and session mechanisms to keep you signed in to the client portal and admin areas, and to maintain security during your visit. These are necessary for the website to function and are not used for third-party advertising.

You can control cookies through your browser settings. Disabling essential cookies may limit your ability to use account-based features.

We do not sell your personal information. We may share information only in the following circumstances:

• With service providers who help us operate the website, send email, process payments, or host data — under appropriate confidentiality and security obligations.
• With professional advisers where necessary for legal, compliance, or business purposes.
• When required by law, regulation, court order, or government request.
• To protect the rights, safety, and security of StrataFin Advisory, our clients, or others.

We retain personal information for as long as needed to fulfil the purposes described in this Policy, including to provide Services, maintain business records, resolve disputes, and meet legal or regulatory requirements.

Consultation records, account data, and payment history may be retained for the duration of our relationship and for a reasonable period thereafter unless a longer retention period is required by law.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. These measures include secure password storage, access controls for admin functions, and use of reputable hosting and payment providers.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Subject to applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, where applicable.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Raise a concern or complaint with us regarding our handling of your personal information.

To exercise these rights, please contact us using the details in the Contact section below. We may need to verify your identity before responding.

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised effective date. Continued use of the website after changes are published constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or how your information is handled, please contact us through the consultation form on our website or via the client portal.