Quick Forex Limited ("Quick Forex", "we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website, mobile applications, or services.
By using our services, you consent to the practices described in this Policy and agree to comply with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable RBI/FEMA guidelines.
1. Information We Collect
a) Identity & Contact Information
- Full name, date of birth, gender, nationality
- Mobile number, email address, residential address
- PAN, Aadhaar, passport (for KYC compliance per RBI master directions)
b) Transaction Information
- Forex amount, currency, purpose of remittance, beneficiary details
- Bank account details, payment instrument data (tokenised by gateway)
- Travel itinerary, visa, education-loan documents (where applicable)
c) Technical Information
- IP address, browser type, device identifiers
- Pages viewed, click patterns, session duration
- Cookies, pixel tags, similar tracking technologies
2. How We Use Your Information
- To process forex transactions, remittances, and travel-card services
- To verify identity per RBI KYC/AML requirements
- To communicate transaction status, rate alerts, and service updates
- To prevent fraud, money-laundering, and terrorist financing
- To comply with FEMA, PMLA, IT Act, and other applicable laws
- To improve our website, services, and customer support
- To send promotional communications (you can opt out anytime)
3. Sharing of Information
We share your information only with:
- RBI, FIU-IND, Income Tax Department as mandated by law
- Banking partners for fund transfers and remittance settlement
- KYC service providers (CKYC, NSDL e-KYC) for identity verification
- Payment gateways (Razorpay) — payment data is tokenised; we never store card numbers or CVVs
- Communication providers (Amazon Web Services for transactional email and SMS)
- Analytics providers (Google Analytics) — anonymised, IP-truncated
- Law enforcement when legally compelled
We do not sell your personal data to third parties.
4. Cookies & Tracking
We use first-party and third-party cookies to:
- Maintain login sessions and remember preferences
- Measure traffic and conversion (Google Analytics, PostHog)
- Run remarketing campaigns (Google Ads, Facebook Pixel)
You can disable cookies via browser settings; some site features may not work as a result.
5. Data Retention
We retain transaction records for 8 years per RBI master directions and PMLA. KYC documents are retained for 5 years post account closure. Marketing data is retained until you opt out or for 24 months of inactivity, whichever is earlier.
6. Your Rights (DPDP Act)
- Access: Request a copy of your personal data
- Correction: Update inaccurate or outdated information
- Erasure: Request deletion (subject to RBI retention obligations)
- Withdrawal of consent: Opt out of marketing at any time
- Grievance redressal: Lodge a complaint with our Data Protection Officer
To exercise these rights, email support@quickforex.in.
7. Data Security
We implement industry-standard safeguards including:
- TLS 1.3 encryption for data in transit
- AES-256 encryption for sensitive data at rest
- PCI-DSS-compliant payment processing (via PayU or Razorpay)
- Role-based access control with audit logs
- Annual third-party security audits
8. Children's Privacy
Our services are not directed at individuals under 18. We do not knowingly collect data from minors. Student remittances are processed in the parent/guardian's name.
9. International Data Transfers
Where a service provider processes data outside India, we require equivalent protection through contractual and technical safeguards under the DPDP Act.
10. Grievance Officer
Per Section 10 of the DPDP Act, 2023, our Grievance Officer can be reached at:
Email: companysecretary@quickforex.in
Phone: +91 98916 64241
We respond to grievances within 30 days.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified via email and a prominent banner on the website.