Privacy Policy

1Information Collection & Scope

Golden Circle Enterprises ("Company", "We", "Us", or "Our") collects personal information necessary to deliver child savings schemes, digital passbook ledgers, and promoter referral programs. By registering or using our application, you explicitly consent to the collection and processing of the following data:

• Personal Identifiers: Full legal name, primary mobile number, email address, nominee full name and relationship.
• Digital KYC Records: Aadhaar number, PAN card details, current address proof, selfie photograph, and identity verification documents.
• Financial & Transaction Data: Bank account numbers, IFSC codes, UPI handles, payment transaction reference IDs (GPay, PhonePe, Paytm, Omniware gateway orders), passbook entry audit hashes.
• Technical & System Logs: IP address, device identifier, browser type, and timestamps of account sign-ins.

2Purpose & Legal Basis of Processing

We process customer data strictly under the legal framework of the Digital Personal Data Protection Act 2023 (DPDP Act) and Section 43A of the Information Technology Act 2000 for the following purposes:

• Verifying member identity and preventing fraudulent or duplicate registrations.
• Maintaining immutable double-entry ledger passbooks and calculating scheme maturity values.
• Processing membership activation and monthly installment collections via PCI-DSS compliant Omniware payment gateways.
• Disbursing promoter referral commissions and processing gold coupon redemptions at partner outlets.
• Sending transaction confirmation receipts, passbook statements, and account security notifications.

3Data Protection & Cryptographic Security

We employ enterprise-grade security standards to safeguard customer data against unauthorized access, loss, or alteration:

• Cryptographic Passbook Audit: Passbook transactions and ledger entries are hashed using SHA-256 cryptographic checksums to ensure tamper-proof record integrity.
• Password Protection: Passwords are encrypted using salted bcrypt hashing. Raw user passwords are never stored in plain text.
• Server & Transit Security: All data in transit is encrypted using 256-Bit SSL/TLS technology. Database records are maintained in secure MongoDB Atlas clusters.
• Server-Side Sensitive Data Masking: Sensitive identifiers like Aadhaar and PAN are masked on server response payloads (e.g. XXXX-XXXX-1964) to prevent client-side data exposure.

4Data Sharing & Disclosure Policy

Golden Circle Enterprises adheres to a strict zero-spam data policy. We NEVER sell, trade, or rent customer personal information to third-party marketing companies. Data is disclosed only in the following limited circumstances:

• Payment Gateway Partners: With authorized PCI-DSS compliant payment gateways (Omniware / bank settlement partners) solely to execute payments and verify transaction status.
• Jewellery Outlet Partners: With authorized partner jewellery showrooms solely to verify coupon redemption eligibility upon customer presentation of passbook code.
• Legal & Regulatory Compliance: When mandated by court orders, government law enforcement agencies, or regulatory authorities under statutory Indian laws.

5Customer Rights & Grievance Redressal

Under the Digital Personal Data Protection Act 2023, members have the right to request access to their registered personal data, request correction of inaccurate profile details, or file grievances regarding data handling.