PRIVACY POLICY

Best Money Gold Jewellery Private Limited
Website: www.bestmoneygold.co.in
Last updated: 12 October 2026

• WHO WE ARE

Best Money Gold Jewellery Private Limited (“BMG”, “we”, “us” or “our”) is part of the Balamuthalagu Group of Companies. It is a company incorporated in India with its registered office at Sivakami Building, TC 38/1445, 2nd Floor, Power House Road, Thiruvananthapuram, Kerala – 695 036.

We buy gold and silver jewellery, bars, coins and ornaments from the public and from financial institutions. We also help customers release gold pledged with banks and NBFCs. We do this through our branches across Kerala, Tamil Nadu, Puducherry and Andhra Pradesh.

We respect your privacy. This Privacy Policy explains:

• what personal data we collect, and why;

• how we use, share, store and protect it; and

• the choices and rights you have.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), BMG is the Data Fiduciary for the personal data described in this policy.

This policy has been prepared in accordance with:

• the Information Technology Act, 2000;

• the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;

• the DPDP Act and the Digital Personal Data Protection Rules, 2025, as and when their provisions come into force; and

• other applicable Indian laws.

• SCOPE OF THIS POLICY

This policy applies to personal data we collect when you:

• visit or use www.bestmoneygold.co.in and its pages (the “Website”);

• submit an enquiry or a “Get Instant Cash for Gold” form;

• call us, receive a call from us, or contact us by WhatsApp, SMS, email or social media;

• visit any BMG branch, or use our doorstep service where available, to have your gold valued, sell your gold or release your pledged gold; or

• otherwise interact with us.

It does not apply to third-party websites, apps or platforms that may be linked from our Website.

• PERSONAL DATA WE COLLECT

3.1 Information you give us online

When you submit an enquiry form on our Website, we collect:

• your name and mobile number;

• your preferred or nearest branch;

• whether your gold is in hand or pledged;

• the approximate weight of your gold; and

• any other details you choose to share with us.

3.2 Information collected at our branches or during doorstep service (KYC and transaction data)

When we value and purchase gold, or release pledged gold, the law and our internal policies require us to verify your identity and your ownership of the gold. We may collect:

• Identity and address proof: PAN card (or Form 60 where applicable), Aadhaar (we request a masked or offline-verified copy), passport, voter ID, driving licence, local address proof and professional or employer ID card.

• Your photograph and signature, and declarations of ownership and source of the gold.

• Bank details: account number, IFSC and a cancelled cheque leaf, so we can pay you.

• Gold details: purchase invoice, weight, purity test results, photographs of the ornaments and transaction value.

• Pledge details, if you are releasing pledged gold: name of the lender, loan or pledge account number, pledge receipt, outstanding amount and related correspondence.

• Transaction records: invoices, payment records and receipts.

3.3 Information collected automatically

When you browse our Website, we and our service providers may automatically collect:

• your IP address, approximate location, and device, browser and operating system type;

• the pages you visit, the time you spend on them, and the website that referred you; and

• similar technical data.

We do this using cookies, Google Tag Manager, analytics tools and advertising pixels (see Section 8).

3.4 Communications and security records

• We keep records of calls, WhatsApp chats, SMS and emails with us.

• Calls to or from our customer care may be recorded for quality, training and dispute-resolution purposes. You will be informed at the start of a recorded call.

• Our branches have CCTV, which records for the safety of customers, staff and assets.

3.5 Information from third parties

We may receive personal data about you from:

• banks and NBFCs, in connection with release of pledged gold;

• KYC and identity-verification service providers, and the Central KYC Registry;

• social media platforms and advertising partners, for example when you submit a lead form on Facebook or Instagram; and

• referral partners.

We do not collect biometric data, health data or passwords. We will never ask for your OTP, UPI PIN, card PIN or net-banking password.

• HOW WE USE YOUR PERSONAL DATA

We use your personal data only for the purposes for which it was collected. These include:

• Responding to your enquiry, calling you back, sharing the day’s gold rate and directing you to your nearest branch.
  
  

• Verifying your identity, address, age and ownership of the gold, and carrying out KYC and anti-money-laundering checks.
  
  

• Testing purity using non-destructive XRF (X-ray fluorescence) testing, valuing your gold and completing the purchase.
  
  

• Paying you, ordinarily by bank transfer to your own account.
  
  

• Coordinating with your bank or NBFC to close your gold loan and release pledged gold. This includes paying the outstanding amount directly to the lender.
  
  

• Complying with legal and regulatory obligations. These include obligations under the Prevention of Money-laundering Act, 2002 and its rules, the Income-tax Act and GST laws. They also include lawful requests from police, courts and government authorities, for example about stolen property.
  
  

• Detecting and preventing fraud, theft, impersonation and misuse, and keeping our branches secure.
  
  

• Handling customer service requests, complaints and grievances.
  
  

• Improving our Website, services and customer experience through analytics.
  
  

• With your consent, sending you information about gold rates, offers, new branches and services by call, SMS, WhatsApp or email.
  
  

• LAWFUL BASIS FOR PROCESSING
  
  

We process your personal data on one of two bases:

• With your consent. You give this when you submit a form, contact us, or transact with us after being shown this policy.

• For legitimate uses permitted under the DPDP Act. Examples are when you voluntarily provide data for a specific purpose (such as selling your gold), when we must comply with a law or court order, and when we respond to emergencies.

Where we rely on consent, you may withdraw it at any time (see Section 10). Withdrawal will not affect processing already carried out, or data we must keep under law.

• SHARING OF PERSONAL DATA

We do not sell or rent your personal data. We share it only on a need-to-know basis with:

• Group companies within the Balamuthalagu Group, for operations, accounting and customer service.

• Service providers (Data Processors) who act on our instructions. These include providers of IT and cloud hosting, CRM, call-centre and telecalling services, SMS, WhatsApp and email services, banking and payment services, purity testing, and security and CCTV. They also include our auditors and legal advisers. All of them are bound by contract to keep your data confidential and secure, and to use it only for our purposes.

• Banks, NBFCs and other financial institutions where your gold is pledged, to the extent needed to release it.

• Government, regulatory and law-enforcement authorities, where required by law. These include the Financial Intelligence Unit – India (FIU-IND), the Income Tax Department, GST authorities, police and courts.

• A successor entity, in the event of a merger, acquisition, restructuring or sale of business, subject to equivalent privacy protections.

• STORAGE AND TRANSFER OF DATA

We store your personal data on secure servers and in secured physical files in India.

We may use reputable cloud or technology service providers whose servers are outside India. Any such transfer will be made only to countries not restricted by the Government of India, and with appropriate safeguards.

• COOKIES AND TRACKING TECHNOLOGIES

Cookies are small text files stored on your device. We use three kinds:

• Essential cookies, which the Website and forms need in order to work.

• Analytics cookies, such as Google Analytics (via Google Tag Manager), to understand how visitors use the Website.

• Advertising cookies and pixels, such as Google and Meta (Facebook and Instagram) tags, to measure our campaigns and show you relevant ads.

You can control these in several ways:

• block or delete cookies through your browser settings;

• opt out of Google Analytics using Google’s browser add-on; and

• manage ad preferences in your Google and Meta account settings.

Blocking essential cookies may affect how the Website functions.

• DATA RETENTION

We keep personal data only for as long as necessary for the purposes described here, or as required by law:

• KYC and transaction records: for the periods prescribed under the Prevention of Money-laundering Act and its rules, the Income-tax Act and GST laws. This is generally between five and eight years from the date of the transaction. We keep them longer where an investigation, dispute or legal proceeding is pending.

• Enquiry or lead data where no transaction takes place: up to 12 months from your last interaction, unless you ask us to delete it sooner.

• CCTV footage: ordinarily up to 90 days, unless required for an investigation.

• Call recordings: up to 6 months, unless required for a dispute.

After the retention period, we securely delete, destroy or anonymise the data.

• YOUR RIGHTS

Subject to applicable law, you have the right to:

• Access: obtain a summary of the personal data we hold about you, how we process it, and who we have shared it with.

• Correction and updating: have inaccurate or incomplete data corrected or completed.

• Erasure: ask us to delete your data, except where the law requires us to keep it (for example, KYC and transaction records).

• Withdraw consent: at any time, including for marketing communications.

• Grievance redressal: raise a complaint with our Grievance Officer.

• Nominate: name another person to exercise your rights in the event of your death or incapacity.

How to make a request:

• Write to contact@bestmoneygold.in, call 97503 97503, or visit any branch.

• We may need to verify your identity before acting on a request.

• We aim to respond within 30 days and, in any case, within the time prescribed by law.

• If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational.

• MARKETING COMMUNICATIONS

We will contact you for marketing only with your consent, and in line with TRAI regulations.

You can opt out at any time by:

• replying STOP to our SMS or WhatsApp messages;

• using the unsubscribe link in our emails;

• telling our caller; or

• writing to us.

Even after you opt out, we may still contact you about an ongoing transaction or enquiry.

• DATA SECURITY

We follow reasonable security practices consistent with IS/ISO/IEC 27001 principles, including:

• SSL/TLS encryption on our Website;

• role-based access controls, so only authorised staff can access your data;

• secure, locked storage of physical KYC documents at branches and head office;

• confidentiality obligations and periodic privacy training for staff;

• contractual security obligations on our service providers; and

• regular review of our systems and procedures.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will take prompt steps to contain it. We will inform the Data Protection Board of India and affected individuals as required by law.

• BEWARE OF FRAUD

BMG will never ask you for:

• your OTP, UPI PIN, card PIN, CVV or net-banking password; or

• any “processing fee” or “advance” to sell your gold.

Our official contact number is 97503 97503, and our official email domain is @bestmoneygold.in.

If you receive a suspicious call or message claiming to be from BMG, do not share any details. Report it to us immediately, and to the National Cyber Crime Helpline (1930) or www.cybercrime.gov.in.

• CHILDREN

Our services are not intended for persons under 18 years of age. To sell gold with BMG, customers must have completed 26 years of age on the date of sale.

We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

• THIRD-PARTY LINKS AND SOCIAL MEDIA

Our Website may contain links to third-party websites and to our official social media pages:

• Facebook: facebook.com/bestmoneygoldbusiness

• Instagram: @bestmoneygoldofficial

• LinkedIn: linkedin.com/company/bestmoneygold

• YouTube: @BestMoneyGoldOfficial

• X: @bestmoneygoldin

We are not responsible for the privacy practices of those platforms. Please read their privacy policies before sharing information with them.

• CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. We will post the updated policy on this page with a revised “Last updated” date. Where changes are significant, we will also notify you through the Website or by other appropriate means.

• GRIEVANCE OFFICER AND CONTACT DETAILS

In accordance with the Information Technology Act, 2000, the rules made under it and the DPDP Act, our Grievance Officer’s details are:

Name: Grievance Officer, Best Money Gold (Kerala)
Designation: Grievance Officer / Data Protection Officer
Address: Best Money Gold Jewellery Private Limited, Sivakami Building, TC 38/1445, 2nd Floor, Power House Road, Thiruvananthapuram, Kerala – 695 036
Email: contact@bestmoneygold.in
Phone: 97503 97503
Working hours: during branch business hours (excluding public holidays)

• GOVERNING LAW AND JURISDICTION

This Privacy Policy is governed by the laws of India. Any dispute arising from it shall be subject to the exclusive jurisdiction of the courts at Thiruvananthapuram, Kerala.

By using our Website, submitting an enquiry or transacting with BMG, you acknowledge that you have read and understood this Privacy Policy.