Privacy Policy

1. Who this applies to

This policy explains how T7 Securities Pvt Ltd handles personal information about you, across this website and across the conversations we have with you. It covers the website at www.t7trade.com (the “Site”), our email and telephone conversations, our messages on messaging applications, our exchanges on social media, the community channels we operate, and the onboarding and support work we do for customers who came to us.

T7 Securities Pvt Ltd is an exchange-approved Authorised Person of Raise Securities Private Limited, trading as Dhan, registered with NSE, BSE and MCX for account opening on the broker's behalf. We introduce customers to Dhan, guide them through opening an account, and help with the platform afterwards. We do not hold client funds or securities, we do not execute orders, and we do not give investment advice.

Dhan provides the brokerage, trading, demat and related account services, and it runs its own privacy policy for that. That policy governs Dhan's own processing of your information.

That does not put everything connected with a Dhan customer outside our responsibility. Where we handle your information ourselves - because you gave it to us, because we fetched it, because we acted on it - this policy applies to that handling, and our responsibility for it does not transfer to the broker.

We are a data fiduciary for the processing we carry out ourselves: we decide why personal data is processed here and how. This policy is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and it also describes the obligations that apply to us today under the Information Technology Act, 2000. Section 10 explains which regime applies when.

2. How you can reach us, and what you may send

You can talk to us without opening an account. You do not need to submit an account-opening application, and you do not need to complete a consent form, before we answer an ordinary question.

If you choose to contact us, you may give us your name, phone number, email address and the details of your enquiry. We use those details to respond, and to provide the assistance you asked for. Responding to an ordinary enquiry does not require a separate consent form from you.

Giving us your contact details is not blanket permission for us to use them for anything else. It means we may answer you and help you with what you asked. It does not by itself authorise unrelated marketing, and we will not send you unsolicited promotions on the back of it. Nor is it permission for us to collect anything sensitive beyond what the assistance you asked for actually requires. If you would like product updates or offers, ask us separately and we will record that as a distinct request.

Where it is necessary to carry out onboarding or support work you have asked for, we may share relevant details with Dhan - for example, that a customer who introduced themselves through us needs assistance with an account application. We will tell you when we do this, and we will take any consent the law requires for it.

Please use our private official channels for personal enquiries. If you post your phone number, email address, account references or other personal details in a public channel, we will not collect or reuse them for unrelated purposes, and we will ask you to move the conversation somewhere private. For anything that concerns your account, use a private official channel, and keep sensitive details out of public posts.

3. Enquiries, account opening and credentials

There are three different situations, and what we may hold differs between them.

3.1 Ordinary enquiries

You may give us your contact details and the information relevant to your enquiry through any of our official communication channels. We use it to answer you and to provide the assistance you asked for. We will not treat it as permission for unrelated marketing, or for collecting information you have not asked us to collect.

3.2 Online account opening

Upload your KYC documents directly through Dhan's authorised onboarding portal. We will guide you to it and explain what it needs. We assist with the process; Dhan performs the verification and the account approval. We do not verify or approve accounts ourselves, and nothing on this Site should be read as saying that we do.

3.3 Offline account opening

Some account-opening applications are handled offline, through Dhan. Where that is the route you are on, you may share the relevant account-opening documents with us - commonly by copying us on the emails you send to Dhan - and we will handle them to assist with your application, answer documentation queries and coordinate with the broker.

The documents concerned are the ones that process requires. They can include identity and address proof, a photograph, a signature specimen and a bank account proof. We apply access restrictions to them, handle them securely, and keep them only for as long as the application and our record-keeping obligations require.

Being copied on an email does not authorise any other use of what it contains. We use those documents to progress your application and to answer questions about it. We do not use them for marketing, and we do not share them beyond what the application and the law require.

3.4 Credentials, and information sent in error

Never send passwords, OTPs, PINs or login credentials to us, whichever way you are opening your account. Nobody who works for T7 Securities Pvt Ltd needs them, and we will never ask for them. We have no way to log in to your trading account on your behalf, and we never will. If anyone contacting you claims to represent T7 and asks for these things, report it to us and do not send them.

If you send us something we did not need - a credential, or a document that was meant for someone else or for another purpose - we will not forward it, copy it or use it. We will tell you what to do next, point you to the right channel, and remove the unnecessary copy from our own systems. Where a legal or regulatory obligation requires us to preserve a record, we will preserve only what we are required to keep, restrict it to that purpose, and tell you that we are doing so.

4. The information we handle

We handle information that reaches us through our website and our official communication channels. We do not run a customer account system on this Site: the information lives in the business communication accounts it came through, in the notes we keep while handling your enquiry or application, and, for technical information, with our host.

4.1 Information you give us

• Contact details: your name, phone number, email address and anything else you choose to tell us about yourself.
• Enquiry contents: what you asked, what you need to know before you start, and what you tell us about your circumstances.
• Messages and correspondence: the content of our exchanges on any official channel, and the attachments you chose to send.
• Account-opening documents, where you are opening an account through the offline process - identity and address proof, a photograph, a signature specimen and a bank account proof.
• Onboarding and referral information: what Dhan shares back with us about an account opened through our referral, so that we can assist with it rather than leave you guessing.
• Referral and commission records: the information we need to attribute a referral correctly and to reconcile what the broker owes us.

4.2 Information processed through the website

Visiting the Site produces two separate kinds of technical information. Request and security information - an IP address, the browser and device type, the pages requested and the time each request took - is generated automatically by our host as it serves the site and protects it, and is described in 7.1. Usage analytics - which pages are viewed, and basic request information - is measured by our host’s analytics, and is described in 7.3. Neither is produced by anything you have to do.

An IP address and a device identifier are personal data under the DPDP Act wherever they can be linked back to an individual, which a web server log generally can. So we treat our logs as personal data. We do not treat them as anonymous, and we do not use them to build a profile of you.

4.3 Information available through Dhan

Dhan may make information about customers associated with us available through its partner dashboard, and the information accessible may change from time to time. We access and use this information only as needed to assist customers with account-related issues, queries and the use of Dhan's platform and features.

We also use relevant referral and commission information to administer and reconcile payments received from Dhan.

Being able to see information does not authorise us to do anything more with it. It does not permit us to operate your account, place orders, handle your funds or securities, or make investment decisions for you, and we do not do any of those things. It is also not standing permission for any new use of your information: if what we can see changes, or we want to use it for something we have not done before, that needs its own basis, and we will tell you.

Separately, and whatever that dashboard may show, we do not ask for, and you should never send us, your Dhan password, OTP, PIN or full account credentials. We do not hold your funds or securities, and we do not execute your orders.

5. Why we use it

• To respond to enquiries and to communicate with you
• To provide onboarding guidance and platform assistance
• To assist with documents for account-opening processes handled offline
• To coordinate with Dhan and to resolve or escalate issues you raise
• To administer referrals and commission records, and to reconcile what the broker owes us
• To meet applicable security, legal and record-keeping requirements
• To understand how the Site is used so we can improve it

We do not sell or rent your personal data. We do not use it to build a profile of you, and we do not use it for automated decision-making that produces legal or similarly significant effects for you.

6. Who we share it with

We share information only in these situations:

• With Dhan, where it is necessary for the onboarding or support work you have asked for, or for the referral arrangement to operate. We will tell you when we do.
• With Cloudflare, our host, which serves the Site and provides the security and analytics services described in section 7.
• With service providers we use to run our email, messaging and other communications, strictly on a need-to-know basis and under confidentiality terms.
• Where required by law: to regulators, courts or law enforcement, or to enforce our legal obligations.
• With your consent, in any other circumstance.

Third-party platforms you use to reach us - messaging applications, social media services, and the community platforms - process the information you put in them under their own policies and their own terms, which we do not control. Using one of those channels means the platform sees what you send there and keeps its own records of it, including any copy that survives if you later delete the message. That is another reason to keep personal details out of public posts and to use our direct channels for anything sensitive.

7. Cloudflare, cookies and browser storage

7.1 What Cloudflare does

T7 Securities Pvt Ltd is hosted on Cloudflare. Cloudflare serves the site’s files and provides the infrastructure and security services around them. In doing so it processes request metadata - such as IP addresses, request times, user agents and the resources requested - and it generates and processes security events, including bot detection signals.

Three separate things are worth keeping apart:

• What we can access or retain ourselves: the information in section 4.1 - your contact details, your enquiries, your correspondence, any account-opening documents you have sent us, and the referral and commission records.
• What Cloudflare processes to deliver the service to us: the request and security metadata described above, and the analytics described in 7.3.
• What Cloudflare processes for its own purposes: Cloudflare is a large infrastructure provider and it processes some data under its own terms and for its own purposes, including to secure and improve its own network. We do not control that, and it is not all done on our instructions.

Cloudflare's own privacy policy is at cloudflare.com/privacypolicy, and the terms and data processing arrangement that govern Cloudflare's processing on our behalf are at cloudflare.com/cloudflare-customer-dpa.

Some processing happens on infrastructure located outside India. Personal data transferred outside India is subject to the requirements the applicable law specifies for that transfer, and we comply with those requirements as they apply to us.

We use Cloudflare to host and deliver our website and provide website security and analytics. This does not mean that customer documents received through our communication channels are stored on Cloudflare. The information you send us by email, telephone, message or social media stays in the business communication accounts it came through and in the records we keep to assist you, on the devices and systems we work on. It is not on Cloudflare’s infrastructure, and it does not become Cloudflare’s data because Cloudflare serves the site.

7.2 Cookies

This Site does use cookies. They are set by our host’s security systems, not by us: when Cloudflare’s protections challenge a visitor, it may place a cookie on the browser as a security token, and it may also use a short-lived bot-detection cookie for the same purpose. These are not advertising cookies and are not used to identify you across other sites. We do not set cookies ourselves and we do not read them.

We set no advertising cookie, no cross-site tracking cookie, no third-party advertising or social-pixel script, and we run no behavioural advertising.

7.3 Analytics

This Site runs Cloudflare Web Analytics, which Cloudflare enables for this zone and injects into the pages it serves. It measures how the Site is used - which pages are viewed, and basic request information - so that we can see whether the site is working and what readers look at.

It is worth being precise about what that means, because it differs from the analytics most people picture. It is cookie-less: it sets no cookie and stores nothing in your browser, and it does not follow you to other sites. It does not build a profile of you, and it is not used for advertising. It is separate from the request and security processing described in 7.1 and the cookies described in 7.2 - one measures usage, the other protects the site.

7.4 Browser storage

The Site uses your browser’s storage to remember two things, both of which stay on your device: your light or dark theme preference, so the page does not flash the wrong theme before it loads, and the dismissal of the closing banner, so it does not reappear as you move between pages. The theme preference is read by the Site’s own script on your device, because that is what makes the feature work. Clearing your browser data for this site removes both.

7.5 Why there is no consent banner

There is no banner because of what the processing actually is, not because the Site happens to be static. The one analytics service in use is cookie-less and does not track you across sites, the cookies in use are a security token set by our host, and there is no advertising or cross-site tracking to consent to. If we ever introduce analytics, advertising or cross-site tracking that does need consent, this policy will be updated and the consent mechanism will be in place before it is switched on.

8. How long we keep it

We keep each category of information for as long as it has a purpose, and no longer than that.

• Enquiries: kept while the enquiry is being handled and for as long afterwards as is needed to support you. If the enquiry turned into an account opening, the enquiry record becomes part of the referral record below.
• Messages and correspondence: kept while the conversation is live and for a period afterwards, so that we have the context if you come back to us. Ask us for the current period if you want it.
• Account-opening documents: kept for as long as the application is being processed, the records we are required to keep for that application, and our record-keeping obligations require. We restrict access to them to the people handling the application.
• Support records: kept while the matter is open and for a period afterwards so that a complaint or a dispute can be dealt with fairly.
• Referral and commission records: kept for as long as tax, accounting and regulatory record-keeping require. Those obligations set the floor here, so this category outlives the customer relationship.
• Technical and security logs: generated automatically by our host and kept by it for its own operational and security purposes. We do not set that period, so we are not going to quote you one here - ask us and we will tell you what it currently is.

These are the records we hold. Dhan controls how long information is kept within its own systems, under the broker’s retention. Where we hold our own copies - the application documents you sent us, the correspondence we handled, the referral and commission records - they are kept on the criteria above, and this policy governs them.

You can ask us to delete your enquiry information at any time, and we will do so unless we are required to retain it. We will not promise the impossible, though: where a record must be kept for tax, accounting, regulatory or dispute-handling reasons, it stays for that reason and no longer. And deleting your copy with us does not delete copies held by a messaging or social media provider - those are the provider's records and you will need to ask them.

9. How we protect it

Here is what is actually in place, and no more. The Site is served over HTTPS, using Cloudflare's TLS termination and its bot-detection and firewall protections, which are what place the security cookie described in 7.2.

The information you send us sits in the business communication accounts it came through, on the devices our staff use, together with the notes we keep while handling your enquiry. We keep access to it to the people who need it for the task in front of them, and we do not share account-opening documents beyond what the application and the law require. Access to application documents is restricted to the people handling that application.

No system is perfectly secure, and we will not claim more than we can show. That is also why the rules in section 3 exist: never send us credentials, and send account-opening documents only through the route they are meant to travel.

10. Which law applies to your rights today

The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 were notified on 13 November 2025 with a phased commencement. As at the date of this revision, the substantive obligations of that regime are not yet in force. They come into force on 13 May 2027, with the consent manager provisions on 13 November 2026. Until then, the personal data protection law that applies to us in India is the Information Technology Act, 2000 as it stands, including section 43A and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We are not waiting for that to happen. We publish this policy now, we apply the standards it describes now, and we will keep applying them once they become compulsory. Nothing in this policy is a promise to comply in future rather than now.

11. Your rights

Under the law that applies to us today, and under the DPDP regime as it comes into force, you may:

• ask what personal information we hold about you, and get a copy of it
• ask us to correct information that is wrong or incomplete
• ask us to erase information where we are not required to keep it
• withdraw a consent you have given, and ask us to stop
• nominate someone to exercise these rights on your behalf if you are unable to do so yourself
• raise a grievance with us about the way we have handled your information

Some of these rights come from the DPDP Act and become fully enforceable on 13 May 2027. Others already apply to us today under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011: where the law requires personal information to be kept correct, we must rectify it, and where processing is being carried out on your consent, you can withdraw that consent and have the processing stopped. Where those provisions apply, we act on them as the law requires, not as a matter of courtesy. We honour rights required by applicable law and also consider requests for access or deletion where those rights are not yet statutory.

To make a request, email support@t7trade.com or call +91 94465 88497. We will respond within a reasonable period, and we will tell you if we need more.

Two practical notes, so a request is not delayed. You do not need an account with us, because we do not operate one - just say what you want and how we may identify you. And we will ask for only what is needed to verify the request, so please do not send account credentials, OTPs or PINs.

Browsing this Site, or contacting us, is not blanket consent to every processing purpose described in this policy. That we answer an ordinary enquiry without asking you for a separate consent form covers only the handling needed to do what you asked of us, on the terms set out here. It is not a general permission for unrelated marketing, and it is not permission to collect sensitive information about you. Anything beyond that needs its own basis.

12. Third-party links and platforms

The Site links to Dhan, exchanges, community platforms, app stores and other third-party sites. Once you follow such a link, that site's own privacy policy and terms apply. We are not responsible for the content or data practices of third parties, and we have no control over what they do with information you give them.

13. Changes to this policy

We may update this policy to reflect changes in our operations or in the law. The “last updated” date at the top reflects the current version, and material changes will be highlighted on this page.

14. Contact and grievances

Questions about this policy, and any grievance about the way we collect, store or use your information, should go to the address below. The Grievance Officer named below handles them, so you do not need to find the right department first.

T7 Securities Pvt Ltd
Dot Space Business Center, Ushasandhya, 1st Floor
Cabin No - 05, TC No 24/3088, Devasom Board Road, Kowdiar
Thiruvananthapuram, Keralam - 695003, India
support@t7trade.com · +91 94465 88497

A Grievance Officer is designated for this purpose, and is the person who takes a grievance raised with us and drives it to a resolution. One person and one address: the same mailbox answers your questions about personal data, receives your complaints and takes your support requests, so there is no other address and no other person to send them to. Being the Grievance Officer is a role in this company, and it is not an appointment as Data Protection Officer under the DPDP Act.

Name:

Syam Mohan V S

Designation:

Grievance Officer

E-mail:

support@t7trade.com

Telephone:

+91 94465 88497

Postal address for written complaints:

The Grievance Officer, T7 Securities Pvt Ltd, Dot Space Business Center, Ushasandhya, 1st Floor, Cabin No - 05, TC No 24/3088, Devasom Board Road, Kowdiar, Thiruvananthapuram, Keralam - 695003, India.

We acknowledge receipt of a grievance within forty-eight (48) hours and will resolve it within one month of receipt. That is required of us today, and we are not going to miss it. Where we cannot meet the one month, we will tell you before the month is up, give you the reason, and give you a date. Both periods run from the moment we receive it, and not from the day it is entered in our records. Explaining a delay does not extend the deadline, and the one month is a commitment on us and not a target we are aiming at. You will get a reply that names the person handling your matter. If the grievance is about your personal data, please give us that opportunity first, as the law asks you to.

Grievances about your brokerage account - trading, settlement, statements, custody or charges - are Dhan's to handle, not ours. Those should go to help@dhan.co or 9987761000, or through their grievance redressal process. We will still help you get to the right place, and we will help you escalate a Dhan issue that is not moving.