Introduction
GAMCO Limited ("GAMCO", "we", "us", "our"), a company listed on BSE and part of the Golden Goenka Group, is committed to protecting the digital personal data of individuals who visit our website or interact with our services. This Privacy & Data Protection Policy is issued pursuant to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025, and sets out how we collect, process, store, and protect your personal data.
For the purposes of the DPDP Act, GAMCO Limited is the Data Fiduciary— the entity that determines the purpose and means of processing your digital personal data.
Data We Collect
We may collect the following categories of digital personal data:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, email address | Responding to enquiries |
| Technical Data | IP address, browser type, device info | Website security & analytics |
| Usage Data | Pages visited, time on site, clicks | Improving website experience |
| Communication Data | Enquiry form submissions | Responding to your requests |
We do not collect children's data (persons under 18) through this website.
Lawful Basis for Processing
Under the DPDP Act, we process your personal data on the following bases:
Consent (Section 6)
For analytics cookies, marketing communications, and optional form submissions. Consent is freely given, specific, informed, and unambiguous.
Deemed Consent (Section 7)
For processing necessary to provide information you explicitly requested (e.g., responding to your contact enquiry).
Legitimate Use
For strictly necessary cookies required for website security and functionality.
Your Rights as a Data Principal
Under the DPDP Act 2023, you have the following rights:
Right to Access (Section 11)
Request confirmation and a summary of your personal data being processed.
Right to Correction (Section 12)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Section 13)
Request deletion of your personal data, subject to legal retention requirements.
Right to Grievance Redressal (Section 14)
File a grievance with our Data Protection Officer regarding data processing.
Right to Withdraw Consent (Section 6)
Withdraw consent at any time, as easily as it was given.
Right to Nominate (Section 15)
Nominate a person to exercise your rights in the event of death or incapacity.
To exercise any of these rights, write to dpo@gamco.co.in. We will respond within 30 days of receiving your request.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for 1 year and then securely deleted. Analytics data is retained in anonymised form for 26 months (per Google Analytics defaults, where applicable).
Data Security
We implement reasonable security safeguards as required under Section 8 of the DPDP Act and Rule 6 of the DPDP Rules, including:
Data Breach Notification
In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals within 72 hours as required under Section 8(6) of the DPDP Act and Rule 7 of the DPDP Rules.
Cross-Border Data Transfer
Your personal data may be transferred to servers located outside India where our service providers operate (e.g., Google for analytics). Such transfers are made in compliance with Section 16 of the DPDP Act, and data is only transferred to countries or territories not restricted by the Central Government.
Grievance Redressal & Escalation
Data Protection Officer
GAMCO Limited
Email: dpo@gamco.co.in
Response time: Within 30 days
If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India as established under Section 18 of the DPDP Act, 2023.
Changes to This Policy
We may update this Privacy & Data Protection Policy from time to time. Any material changes will be notified on this page with an updated effective date. Your continued use of the website after changes constitutes acknowledgement of the updated policy. This policy was last reviewed in September 2026.