Privacy Policy

1. Who We Are

FXPertise Solutions Pvt. Ltd. is a foreign exchange and travel-services company authorised by the Reserve Bank of India (RBI License No. KAN-FFMC-0416-2024), operating the website https://fxpertise.in and related services.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our website, customer portal, and the services we offer, including foreign currency exchange, buying and selling foreign currency, international money transfer / send money abroad, prepaid travel forex cards, travel insurance, international SIM card / eSIM services, forex-as-a-service for businesses, our currency converter and forex rate information, and customer enquiries and callback requests.

This Privacy Policy does not apply to the practices of companies that FXPertise does not own or control, or to individuals not employed or managed by FXPertise.

3. Information We Collect

Depending on the services you use and the applicable legal or regulatory requirements, FXPertise may collect the following categories of information.

3.1 Information You Provide Directly

• Full name, email address, and mobile number
• Residential / address information
• Date of birth, where required
• Customer support, enquiry, and callback-request information
• Account / login information, where applicable

3.2 KYC and Identity Information

For services that require identity verification — such as currency exchange, international money transfer, and forex cards — we may collect PAN details, passport details, identity documents, address proof, and other KYC information as required under applicable RBI, FEMA, and AML regulations.

3.3 Financial and Transaction Information

This may include transaction information, currency and exchange information, forex card information, beneficiary information (for remittances), bank/ account-related information where required, and travel-insurance-related and international SIM/eSIM-related information relevant to the service booked.

3.4 Payment Information

Payments on our website are processed through banks, payment gateways, or other authorised payment service providers. We do not store complete card numbers, CVV, OTPs, or banking passwords on our servers. Where payment processing is handled by a third party, that third party may process payment information under its own privacy policy and terms. We may retain a payment/transaction reference (such as a transaction ID) to reconcile and verify your order.

3.5 Documents and Files Uploaded by Customers

FXPertise may require you to upload documents depending on the service — for example, PAN card, passport, address proof, travel tickets, or visa documents. These uploaded documents may be used for identity verification, KYC, transaction verification, payment verification, regulatory compliance, fraud prevention, processing your order, and meeting other legal requirements.

4. Information Collected Automatically & Cookies

When you visit our website, we and our service providers may automatically collect certain information, including your IP address, browser information, device information, and website usage information.

4.1 Cookies and Similar Technologies

Our website uses Google Tag Manager, which may in turn load analytics technologies such as Google Analytics, to help us understand how visitors use our website. Cookies and similar technologies may be used for website functionality, session management, security, remembering your preferences, analytics, performance measurement, and improving the overall user experience. We do not use advertising or marketing-tracking cookies beyond what is described above.

5. How We Use Personal Information

Personal information may be used to:

• Create and manage your customer account
• Process orders and forex transactions
• Process international remittances
• Provide forex cards, travel insurance, and international SIM/eSIM services
• Perform KYC and verify transactions
• Process payments
• Communicate with you and provide customer support
• Send transactional notifications (e.g. order and payment status)
• Prevent fraud and maintain the security of our services
• Improve website functionality
• Resolve disputes
• Meet accounting, tax, and record-keeping requirements
• Comply with applicable laws and regulations

5.1 KYC, Regulatory and Legal Compliance

Because FXPertise provides foreign exchange and international money transfer services, certain information may be required for customer identification, KYC verification, foreign exchange transaction processing, international remittances, beneficiary verification, and to meet AML, FEMA, RBI, and other applicable legal or regulatory obligations.

5.2 Fraud Prevention and Security

We use personal information to help detect, prevent, and respond to fraud, unauthorised transactions, and security incidents. We do not disclose the internal details of our fraud-prevention or security mechanisms.

6. How We Share Personal Information

We share information only where reasonably necessary for providing the requested service, fulfilling a legal or regulatory obligation, protecting our rights, preventing fraud, or maintaining the security of our services. We do not sell personal information, and we do not share it beyond what is described below.

Depending on the service you use, we may share relevant information with:

• Banks and authorised financial institutions — to process currency exchange and remittance transactions.
• Payment service providers — our website uses Cashfree as a payment gateway to process online payments.
• Forex / remittance partners — to complete currency exchange and international money-transfer orders.
• Insurance partners — to provide travel insurance policies you purchase through us.
• International SIM/eSIM providers — our international SIM/eSIM service is fulfilled through our partner Prune, to whom relevant order and travel details (such as destination country and SIM plan selected) are shared to place and activate your SIM/eSIM order.
• Technology and service providers — including cloud hosting, database, and email-delivery providers that support our website and communications infrastructure.
• Government and regulatory authorities — including RBI and other applicable regulators, where required by law.
• Law enforcement authorities and professional advisers — where necessary to comply with a legal obligation or protect our rights.

7. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, misuse, alteration, disclosure or destruction. These include access controls, authentication, secure transmission, encryption where applicable, restricted access to personal information, monitoring, secure infrastructure, data protection procedures, and incident-response processes. No method of transmission or storage is completely secure, and while we work to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide our services, complete transactions, offer customer support, meet accounting and legal/regulatory obligations (including KYC and AML requirements), prevent fraud, resolve disputes, and maintain records as required. Certain information may need to be retained for longer periods where required by applicable law or regulation.

9. International / Cross-Border Data Processing

Because FXPertise provides international services, some of our service providers or transaction partners (for example, remittance, insurance, or SIM/eSIM partners) may process information outside India in order to fulfil your order. Any such processing is carried out in accordance with applicable law and applicable safeguards.

10. Your Privacy Rights

Subject to applicable law, you may:

• Request access to the personal information we hold about you
• Request correction or updating of inaccurate information
• Request deletion / erasure of your personal information, where legally permitted
• Withdraw consent where processing is based on your consent
• Raise privacy grievances with us
• Exercise any other rights available to you under applicable data protection law

Please note that some requests may be limited by legal, regulatory, KYC, AML, accounting, or transaction-retention requirements — for example, we may need to retain certain KYC or transaction records even after a deletion request, where required by law.

10.1 Consent

We obtain your consent through registration, forms, order flows, checkboxes, document uploads, and other interactions on our website. Withdrawal of consent may not affect processing that is required by law or necessary to complete a regulated service or transaction you have already initiated.

To exercise any of the rights above, please contact us using the details in the Grievance / Privacy Contact section below.

11. Marketing and Communications

We may send you transactional communications, order updates, service notifications, and customer-support communications relevant to your use of our services. Where we send any marketing communications, we will provide you with a reasonable method to opt out of receiving them.

12. Cookies Management

Most browsers allow you to control cookies through their settings, including viewing, deleting, or blocking cookies. Please note that disabling certain cookies may affect the functionality of our website.

13. Third-Party Websites and Services

Our website may contain links to third-party websites or services (for example, our payment gateway, insurance partners, or social media pages) that are not operated by us. This Privacy Policy does not apply to those third-party sites, and we encourage you to review their respective privacy policies before providing any personal information. If you choose to contact us via WhatsApp, that communication is also subject to WhatsApp's own privacy policy and terms.

14. Children's Privacy

Our services involve regulated financial products such as foreign exchange, international money transfer, and travel insurance, and are intended for use by individuals who are legally eligible to use such services. We do not knowingly collect personal information from individuals who are not legally eligible to use the relevant financial or regulated services offered on our website.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. We encourage you to review this page periodically.

FXPertise processes personal information in accordance with applicable laws and regulatory requirements, including the Digital Personal Data Protection Act, 2023, and applicable rules, RBI requirements, FEMA requirements, and AML/KYC obligations relevant to the services we provide.

16. Grievance / Privacy Contact

If you have any questions, concerns, or grievances regarding this Privacy Policy or how your personal information is processed, please contact us using the details below.

17. Contact Us

For any other queries about our services, please visit our Contact Us page, or reach out using the details above.