This Privacy Policy explains how FirstFold Capital Pvt. Ltd. (the "Data Fiduciary," "we," "us") collects, uses, and protects personal data in compliance with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
(This notice is available in English and other Scheduled Indian Languages on request. Contact the Grievance Officer below to request a translated copy.)
1. What personal data we collect, and why
We collect only the personal data necessary to respond to inquiries and, where applicable, provide our advisory services. We do not sell personal data.
Identity and contact data (name, business email, phone number, company name). Purpose: to respond to inquiries submitted through this Site and to communicate regarding potential advisory engagements.
Engagement-related data (shared directly by clients once an advisory relationship begins, such as company financials or transaction details, where applicable). Purpose: to provide the advisory services set out in the relevant engagement letter. This data is collected directly from clients, not through this Site, and is governed additionally by the terms of the specific engagement.
Usage data (IP address, browser type, pages visited). Purpose: to maintain Site security and understand general usage of the Site.
2. How we share your data
We share personal data only with third parties necessary to operate this Site or, where applicable, deliver advisory services, such as:
- Website hosting and analytics providers
- Legal and compliance advisors
- Where relevant to a specific client engagement, counterparties or service providers named and agreed to as part of that engagement
We require all such parties to handle personal data in a manner consistent with the DPDP Act and this Policy.
3. Data retention
We retain personal data only as long as necessary for the purpose it was collected, or as required under applicable Indian law (including financial and corporate record-keeping requirements, which may require retention of engagement-related records for several years). Data collected solely through general inquiries on this Site that does not lead to an engagement is retained only as long as reasonably necessary to respond to that inquiry, after which it is deleted.
4. Your rights as a data principal
Under the DPDP Act, 2023, you have the right to:
- Access: request a summary of the personal data we hold about you.
- Correction and erasure: request correction of inaccurate data, or deletion of your data, subject to our legal retention obligations.
- Withdraw consent: withdraw consent for the processing of your data at any time. This will not affect the lawfulness of processing carried out before withdrawal.
- Nominate: nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
- Grievance redressal: raise a grievance regarding how your data has been handled, as set out below.
To exercise any of these rights, contact our Grievance Officer using the details below.
5. Grievance redressal
If you have concerns about how your personal data is handled, or wish to exercise any of the rights above, contact:
Email: hello@firstfoldcapital.com
We will acknowledge and aim to resolve grievances within the timelines required under the DPDP Rules, 2025 (currently 90 days). If you are not satisfied with our resolution, you may escalate your complaint to the Data Protection Board of India.