Privacy Policy & Data Protection

1. Regulatory Scope & Commitment

Trustlink Investor Services Private Limited ("Trustlink", "we", "us") operates as a SEBI Category I Registrar and Share Transfer Agent (RTA). We are committed to safeguarding the personally identifiable information (PII), financial records, and demat folio disclosures of investors, security holders, and corporate issuers in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and SEBI Cybersecurity & Cyber Resilience Frameworks.

2. Collection of Personal & Securities Data

In performing statutory RTA functions, we collect and process data provided directly by investors or received from depositories (NSDL and CDSL) and corporate issuers, including:

• Permanent Account Number (PAN), Aadhaar masking, and CKYC identifiers.
• Bank account details, IFSC code, and NECS mandate authorizations.
• DP ID, Client ID, folio numbers, and shareholding balances.
• Signatures, specimen cards, indemnity bonds, and Form ISR submission documents.

3. Purpose of Processing & Use of Data

Collected information is processed strictly for regulatory and statutory purposes, including:

• Processing physical share dematerialization, rematerialization, and transfer requests.
• Executing dividend payouts, corporate action distributions, and tax withholding (TDS).
• Maintaining statutory registers of members under Section 88 of the Companies Act, 2013.
• Fulfilling SEBI audit logging, SCORES 2.0 grievance resolution, and statutory reporting.

4. Data Storage, Encryption & AWS Presigned Vault

All client documents and KYC records uploaded through our web application are encrypted in transit using TLS 1.3 (HSTS enforced) and at rest via AES-256 bit encryption in secure AWS S3 vault buckets. Presigned temporary storage tokens ensure unauthorized access is strictly prevented.

5. Grievance & Data Protection Officer Contact

For data protection inquiries or to request verification of registered KYC records, contact our designated Compliance Officer: