Rovian – Privacy Policy
Effective / Last updated: October 13, 2026
This Privacy Policy explains how Rovian collects, uses, discloses, and protects the personal data of visitors to myrovian.in and users of our loan, investment, insurance, and taxation advisory services, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the DPDP Rules, 2025.
1. Introduction & Scope
Rovian (“Rovian”, “we”, “our”, or “us”) is a sole proprietorship concern, based in Ludhiana, operating a finance, loan, investment, and insurance advisory and distribution practice through the website myrovian.in (the “Website”) and offering services including personal, business, home, auto, and professional loans; mutual fund distribution (AMFI-registered, ARN-202365), fixed deposits, recurring deposits, PMS, AIF, and corporate bonds; health and life insurance; and taxation and business advisory referral services (together, the “Services”).
This Policy applies to Personal Data of visitors to the Website, prospective and existing clients, and any individual who shares data with us for availing the Services, whether collected online (forms, chatbot, WhatsApp Business) or offline (in person, phone, email).
Where Rovian refers a client’s data to a bank, NBFC, insurer, Asset Management Company (AMC), or other financial institution to process an application, Rovian acts as a facilitator; the receiving institution independently acts as a Data Fiduciary for its own processing of that data under its own privacy policy.
2. Definitions
- Personal Data – any data about an individual who is identifiable by or in relation to such data.
- Data Principal – the individual to whom the Personal Data relates (e.g., a Website visitor or client).
- Data Fiduciary – the entity that determines the purpose and means of processing Personal Data; Rovian is the Data Fiduciary for data it collects directly.
- Processing – any operation on Personal Data, including collection, storage, use, sharing, and erasure.
- Consent – free, specific, informed, unconditional, and unambiguous agreement, given through clear affirmative action, to the processing of Personal Data.
- Consent Manager – a registered entity through which a Data Principal may manage consent; Rovian does not currently route consent through a Consent Manager.
3. Personal Data We Collect
| Category | Examples |
|---|---|
| Identity & contact data | Name, mobile number, email, address, date of birth |
| Identity documents (KYC) | PAN, Aadhaar (as permitted by RBI/SEBI/IRDAI KYC norms), passport, voter ID |
| Financial data | Income details, bank statements, CIBIL/credit score, existing loan or investment details |
| Application-specific data | Loan/insurance application forms, employment details, property documents, investment risk profile |
| Communication data | Messages via WhatsApp Business, email, phone call records, enquiry/contact form submissions |
| Review data | Your name, star rating and review text, if you submit a review. These are shown on our Reviews page. The review form does not ask for your email. |
| Website usage data | IP address, browser type, pages visited, cookies (see Section 11) |
We collect Personal Data directly from you (forms, calls, WhatsApp, email, in-person meetings) and, where relevant, from credit bureaus or partner institutions with your consent to process an application.
4. Purpose of Processing
We process Personal Data only for specified, lawful purposes for which you have given consent, including to:
- Assess eligibility and process applications for loans, mutual funds, insurance, PMS, AIF, fixed/recurring deposits, and corporate bonds
- Complete KYC and comply with RBI, SEBI, IRDAI, and AMFI regulatory requirements
- Communicate with you about your application, policy, or investment status
- Provide taxation, GST, and business advisory services you request
- Respond to enquiries made via the Website, WhatsApp Business, or phone
- Improve the Website and measure its performance (cookies/analytics)
- Send service updates and, where you have separately opted in, promotional communication
- Comply with legal, audit, and regulatory obligations
5. Consent
We seek your consent before, or at the time of, collecting Personal Data, through a clear notice stating what data is collected, for what purpose, and with whom it may be shared. Consent is taken via explicit action – submitting a form, replying “yes”/confirming on WhatsApp, or signing physical/digital application forms – and is never bundled with unrelated purposes.
Where processing is necessary for a purpose specified under Section 7 of the DPDP Act (e.g., compliance with a court order, or a purpose for which you have voluntarily provided data and not indicated objection), consent may not be separately required; we will rely on such grounds only to the extent permitted by law.
You may withdraw consent at any time by writing to our Grievance Officer (Section 12). Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to continue providing a Service that depends on that data.
6. Disclosure & Sharing of Data
We share Personal Data only as needed to deliver the Services or as required by law, with:
- Banks, NBFCs, and housing finance companies, to process loan applications — Rovian acts as a DSA (Direct Selling Agent) for these lenders, and depending on your requirement we may approach more than one bank/NBFC to find you a suitable offer
- Insurance companies, for policy issuance and claims — Rovian acts as a POSP (Point of Sale Person) for these insurers, and we may similarly approach more than one insurer for a suitable quote
- Asset Management Companies (AMCs), RTAs (e.g., CAMS/KFintech), and depositories, for mutual fund and demat transactions
- Credit bureaus (e.g., CIBIL), for credit assessment
- Regulators and authorities – RBI, SEBI, IRDAI, AMFI, Income Tax Department, GST authorities, or the Data Protection Board of India – where legally required
- Service providers who support our operations (e.g., IT hosting, WhatsApp Business), bound by confidentiality obligations
We do not sell Personal Data, and we do not share it for third-party advertising.
7. Data Retention & Erasure
We retain Personal Data only as long as necessary for the purpose it was collected, or as required under applicable law (e.g., RBI/SEBI/IRDAI record-keeping norms, Income Tax Act, GST law), typically:
- Application and KYC records: retained for the regulatory record-keeping period applicable to the relevant product, generally up to 8 years after the relationship ends
- Enquiry/contact form data with no further engagement: erased within a reasonable period, generally 12 months
- Financial/tax advisory records: retained as required under the Income Tax Act, 1961 and applicable statutes
Once the purpose is served and retention is no longer required by law, we erase or anonymise the data, unless you have asked us to continue retaining it.
8. Data Security
We implement reasonable security safeguards appropriate to the sensitivity of the data we hold, including:
- Restricted, role-based access to client files and financial documents
- Password-protected systems and secure storage for digital records
- Secure handling of physical KYC documents, with controlled access and disposal
- Staff awareness of confidentiality obligations
In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act and Rules.
9. Your Rights as a Data Principal
Subject to the DPDP Act and Rules, you have the right to:
- Access a summary of the Personal Data we hold about you and the processing activities undertaken
- Correction & completion of inaccurate or incomplete Personal Data, and updation of data that is no longer necessary
- Erasure of Personal Data that is no longer required for the purpose it was collected, unless retention is required by law
- Grievance redressal – raise a complaint about our handling of your data (Section 12)
- Nominate another individual to exercise these rights in the event of your death or incapacity
- Withdraw consent previously given, at any time
We will respond to verifiable requests within the timelines prescribed under the DPDP Rules, 2025.
Click here to Withdraw consent or ask for deletion
10. Children’s Data
Our Services are intended for individuals who are 18 years of age or older and are not directed at children. We do not knowingly collect or process the Personal Data of a child (an individual below 18 years) without verifiable consent of their parent or lawful guardian, in line with Section 9 of the DPDP Act. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
11. Cookies & Tracking Technologies
We use strictly necessary cookies to operate the Website, and optional analytics cookies (e.g., to measure traffic) only with your consent via our cookie banner. You can change your cookie choice at any time through the cookie settings on the Website. We do not use cookies for third-party behavioural advertising.
Our review form uses Google reCAPTCHA to block spam. When the form loads, Google may receive technical details such as your IP address and browser information. Google’s own privacy policy applies to that data.
12. Grievance Officer
In accordance with Section 8(9) of the DPDP Act, the following Grievance Officer handles data protection complaints and queries from Data Principals:
| Name | Rovian |
| contact.rovian@gmail.com | |
| Phone | (+91) 7696341399 |
| Address | SCO-13 Basement, Madhok Complex, Opp Silver Arc Mall, Ludhiana – Punjab – 141001 |
| Response timeline | Within the statutory timelines prescribed by the DPDP Rules, 2025 |
If you are not satisfied with our response, you may approach the Data Protection Board of India under the procedure prescribed by the DPDP Act and Rules.
13. Changes to This Policy
We may update this Policy periodically to reflect changes in our practices or applicable law. The updated Policy will be posted on this page with a revised “Last updated” date. For material changes, we will provide additional notice (e.g., a Website banner) before the change takes effect.