Consent Management

Purpose

This policy governs how R R Sen & Bros Pvt Ltd obtains, records, manages, and honours customer consent for the processing of personal data, in compliance with RBI guidelines applicable to Authorised Dealers, FEMA and AML requirements, and the Digital Personal Data Protection Act, 2023.

Principles of Consent

All consent obtained from our customers is:

• Free, specific, informed, and unambiguous
• Obtained through a clear affirmative action
• Documented with a time-stamped audit trail
• Revocable, except where retention is required for statutory compliance

When Consent is Required

Depending on the activity, consent may be mandatory, optional, or not required at all:

• Processing data for a remittance transaction — Mandatory
• Sharing data with a third-party technology platform — Mandatory
• Marketing communications — Optional
• Regulatory reporting — Not required, as this is a legal obligation

Mode of Consent Collection

We collect consent through one or more of the following modes:

• Digital checkboxes that are not pre-ticked
• OTP or other electronic confirmation
• Signed physical or electronic forms

Withdrawal of Consent

Customers may withdraw previously given consent at any time by contacting us. Please note that withdrawing consent that is mandatory for a transaction may mean we are unable to process or continue that transaction, as required under FEMA and RBI norms.

Right to Access & Correction

Customers may request details of the personal data we hold about them, copies of documents they have submitted, or correction of any inaccurate data. Such requests are addressed within 5 working days, subject to verification of identity.

Right to Restrict or Erase Data

Requests to restrict or delete personal data will be honoured only where no regulatory, legal, or audit obligation requires us to continue holding it, and where any mandatory retention period has expired.

Consent Record Maintenance

All records of consent are preserved for the period required under applicable law and RBI instructions, and are made available for audit or regulatory review when required.

Contact — Consent & Data Rights

R R Sen & Bros Private Limited Data Privacy Officer: Debasis Das Phone: +91-8420199610 Email: it@rrsbforex.com

Governing Law

This policy is governed by, and shall be interpreted in accordance with, the laws of India.