Execute Regulatory Compliance

APTA Advisors LLP (“we,” “our,” or “us”) operates as a corporate finance advisory firm in India. We act as a Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023. We are dedicated to protecting the privacy of our clients, prospective issuers, investors, and website users (“Data Principals”).
‍
‍

Identify Data Collected

To execute mid-market M&A and private equity or venture capital fund-raising mandates, we process the following categories of Digital Personal Data:

• Identity Details: PAN, Aadhaar, Passport, and DIN (Director Identification Number).
• Corporate Information: Shareholding patterns, beneficial ownership details, and board resolutions.
• Financial Records: Audited financial statements, tax filings, bank statements, and valuations.
• Due Diligence Data: Promoter background checks, litigation history, and regulatory compliance track records.

Processes and Purpose of Processing

We process personal data strictly on the grounds of explicit consent or legitimate uses under the DPDP Act, for these specific purposes:

• Mandate Execution: Conducting financial modeling, preparing Information Memorandums (IM), and managing virtual data rooms (VDR).
• Regulatory Compliance: Performing Know-Your-Customer (KYC) verification and Anti-Money Laundering (AML) screening under RBI and FIU-IND guidelines.
• Investor Matching: Sharing redacted business profiles with prospective institutional investors or strategic buyers.

Govern Data Sharing

We do not sell, trade, or rent personal data. We disclose information to external parties only under strict confidentiality agreements:

• Transaction Counterparties: Screened institutional investors, venture capital funds, and prospective M&A buyers.
• Professional Advisors: External legal counsels, statutory auditors, and specialized due diligence agencies.
• Regulatory Authorities: Statutory disclosures required by SEBI, the Reserve Bank of India (RBI), or the Ministry of Corporate Affairs (MCA).

Protect Principal Rights

Under the DPDP Act, Indian Data Principals hold specific statutory rights. You can exercise these rights by contacting our Data Protection Officer:

• Right to Access: Request a summary of your personal data being processed.
• Right to Correction: Correct, complete, or update any inaccurate personal information.
• Right to Erasure: Request the deletion of data once the mandate or statutory retention period ends.
• Right to Grievance: File a formal complaint regarding data handling practices.

Secure Data Retention

• We use institutional-grade cloud repositories with advanced encryption to store financial records.
• Data is retained for a minimum of 5 years post-transaction to comply with Indian anti-money laundering laws.

Contact Grievance Officer

In accordance with the DPDP Act, 2023, please direct privacy queries or grievances to our designated officer:

• Attention: Harikrishnan, Director
• Email: hari@apta-advisors.com
• Office Address: [Insert Indian Registered Office Address]