Skip to content
VMF InvestmentsAMFI-registered Mutual Fund Distributor
Menu

Privacy notice

VMF InvestmentsLast updated: 24 Oct 2026. Version privacy-2026-10-23-v1.

The short version

  • You can use this website and all our tools without telling us who you are. The figures you type into a tool stay on your device. They are never sent to us or saved.
  • If you ask us to call you, we keep your name, your number, what you'd like help with, a good time to call, and the page you asked from. We use them only to call or WhatsApp you about your request.
  • We never sell your details, never use them for advertising, and never follow you around the internet.
  • You can ask us at any time to show you what we hold, to correct it, to delete it, or to stop contacting you. Just send us a WhatsApp or an email.

Who we are

VMF Investments is run by Edwin Sebastian Fernandes, an AMFI-registered Mutual Fund Distributor (ARN-371792), from Calangute, Goa, India. We are a sub-distributor of AssetPlus (Valueplus Technologies Private Limited), an AMFI-registered mutual fund distributor with ARN-114376. "We" and "us" in this notice mean VMF Investments. "You" means anyone who uses our website or talks to us about investing.

Under India's Digital Personal Data Protection Act, 2023, we are the "Data Fiduciary" for your personal data. That means we decide why and how it is used, and we are responsible for looking after it, including when a company we use handles it for us.

We follow India's Information Technology Act, 2000 and its 2011 rules on personal data, and the Digital Personal Data Protection Act, 2023.

What we collect, why, and for how long

1. When you visit our website

  • What: the technical details every browser sends to every website: your internet (IP) address, the type of browser and device, the page you asked for, and the time.
  • Why: to show you the website, keep it secure, and stop automated programs ("bots") from abusing it. When you send the call request form, a security check runs in your browser to tell people from bots, and our website counts how many requests come from one connection in a short time. We don't use any of this to find out who you are.
  • Who handles it: the company that hosts our website, and a security service for the check on the form (see "The companies that help us").
  • How long: our website forgets its count after 10 minutes. Our hosting company keeps its own records of requests for a short time, under its own terms.
  • Cookies: we don't use cookies to track you, and we don't use advertising or social media tracking. The website remembers whether you chose light or dark mode, in your own browser only. That choice never reaches us.
  • Counting visits: we count which pages and tools are used, with Cloudflare Web Analytics. It sets no cookies, doesn't identify you, and doesn't follow you to other websites.

2. When you use one of our tools

  • What: nothing. The calculations happen on your device. The figures you type are never sent to us and never saved.
  • If you press Message on WhatsApp, your WhatsApp opens with a short message that names the tool. Nothing is sent unless you press send yourself. After that, WhatsApp's own privacy policy also applies to the chat.

3. When you ask us to call you ("Book a call")

  • What: your name; your mobile or WhatsApp number; what you'd like help with (a choice from the list, or a few words of your own); the best time to call; the page or tool you asked from; your confirmation that you're 18 or over; and when you agreed to this notice and which version of it you saw.
  • Why: to call or WhatsApp you about your request; to try again a few times over the following weeks if we don't reach you; and to keep a record that you asked us to contact you.
  • What we don't ask for: your income, savings, investments, ID numbers or bank details. Please don't type them into the form.
  • How long: if you don't become our client, we delete your details 12 months after our last contact with you, or sooner if you ask.
  • Our legal basis: your consent, which you give by ticking the box. You can withdraw it at any time (see "Your rights" below).

4. When you message, call or email us

  • What: your number or email address, and what you tell us.
  • Why: to reply and help you. When you first contact us this way, we'll send you a link to this notice.
  • Who handles it: WhatsApp, or our email provider, carries the messages.
  • How long: as in section 3, or as in section 5 if you become our client.

5. If you become our client

What we keep in our client records:

  • your name and contact details (phone, WhatsApp, email);
  • your goals, as short labels such as "Daughter's college" (never amounts);
  • the stage you've reached with us;
  • your risk profile: the answer you chose to each question, a band for your fixed commitments and one for your savings rate (never the rupee figures), the result, and the date. We make a new dated record each time we reassess, so we can always show how a result was reached;
  • notes of our conversations, including life events you tell us about, such as a new job or a new child;
  • a dated log of what we did for you.

What we never keep in our own records: your holdings, the amounts you invest, your investment dates, portfolio reports, your exact age, your goal amounts, your passport, overseas address or tax-residency (FATCA/CRS) details, or copies of ID and bank documents. When we review your existing investments with you, we look at them during the meeting and don't save them.

Why:

  • to understand your goals and how much risk suits you, so that the mutual fund schemes we suggest are suitable for you;
  • to help you invest, and to look after your investments over time;
  • to keep the records that the rules for mutual fund distributors require. AMFI's Code of Conduct asks us to keep records of how we judged suitability, and of your agreement or disagreement.

Who else gets your details, and why: to invest, your details go to AssetPlus (Valueplus Technologies Private Limited), the distributor whose ARN your investments are placed through, and the platform we use to place them. Through it, they go to the fund houses (asset management companies), their registrars (CAMS and KFin Technologies), the KYC registration agencies, and the platforms that carry mutual fund transactions, as needed to complete your KYC, open your folios and process your investments. For insurance, they go to AssetPlus and the insurer you choose. Each of them handles your data under its own privacy notice and the law.

How long: while you're our client, and for 5 years after you stop being our client, because the rules for distributors ask us to keep records of how we judged suitability, and so that we can answer any question or complaint later. After that, we delete them. The records of your investments themselves are kept by AssetPlus, the fund houses and their registrars, under their own rules.

Our legal basis: your consent, given when you become our client; and, for the records we must keep, that legal requirement.

6. If someone refers you to us

If a friend or family member gives us your name and number, we contact you once to ask if you'd like to talk. If you say no, we delete your details.

What we never do

  • We never sell or rent your personal data.
  • We never share it with anyone for their own marketing, including any other business of ours. (AMFI's Code of Conduct also forbids sharing investor data for cross-marketing.)
  • We don't send you promotional broadcasts unless you separately ask for them.
  • We don't make automated decisions about you. Edwin looks at every suggestion himself.
  • We don't collect children's personal data through this website.
  • We share your details with a regulator, a court or the police only when the law requires us to.

The companies that help us

We use a few trusted companies to run our website, our database, our email, our chats and our backups, the security check on our call request form, and the count of visits. Each one handles your details only to do that job for us, and gets only what it needs for it. Our database and our website are in Mumbai, India; some of the others store data outside India, which India's law allows, except to countries the Government restricts. If any country is ever restricted, we'll follow that. If you'd like the names of these companies, just ask us (see "Your rights").

How we protect your data

  • Your details are encrypted when they travel (HTTPS) and when they're stored.
  • Only Edwin can open our records, using a password and a second code from an authenticator app.
  • The website can't see anyone's details in our database. It can only add a call request, and show our published blog posts.
  • We make an encrypted backup every night, so your details aren't lost, and we keep a dated log of every change.
  • We regularly review who has access to our systems.
  • We will never ask you for an OTP, a password, a PIN or card details, by phone, WhatsApp or email. If anyone claiming to be us does, it isn't us; please tell us.

No system is perfect. If a breach ever affects your data, we'll tell you without delay what happened, what it could mean for you, what we're doing about it, and what you can do. We'll also report it to the Data Protection Board of India, as the law requires.

Your rights

You can:

  1. Withdraw your consent at any time, as easily as you gave it: send "stop" on WhatsApp or by email. We'll stop contacting you straight away, and delete your details within 30 days unless a law requires us to keep them. Withdrawing doesn't undo anything done before.
  2. Get a summary of the personal data we hold about you, what we do with it, and who we've shared it with.
  3. Correct or update your details, or complete anything missing.
  4. Ask us to erase your details. We'll erase them unless a law requires us to keep them. If it does, we'll tell you what we must keep and for how long, and we'll use it for nothing else. Copies in our encrypted backups are deleted on their own when those backups expire, within 13 months at most.
  5. Nominate someone to use these rights for you if you die or become unable to act.
  6. Complain to us, and if you're not happy with our answer, to the Data Protection Board of India.

How to ask: send a WhatsApp to +91 92262 37492 or an email to vmfinvestments@gmail.com, starting with "Privacy request" and saying what you'd like. To protect you, we'll check it's really you, usually by replying to the number or email address we already have. We'll acknowledge your request within 3 working days and complete it within 30 days. The law allows up to 90 days; we aim to be much quicker. If there's something we can't do, we'll explain why.

Who to contact (our Grievance Officer)

Edwin Sebastian Fernandes, Proprietor, VMF InvestmentsCalangute, Goa, IndiaEmail: vmfinvestments@gmail.comWhatsApp or phone: +91 92262 37492

We answer questions and complaints about your personal data within 30 days.

If you're not satisfied with our answer, you can complain to the Data Protection Board of India. Complaints are made online, through the Board's official website.

Children

Our services are for adults. The call request form asks you to confirm you're 18 or over, and won't send your details without it. If you're under 18 and would like to start investing, please ask a parent or guardian to contact us. When a parent invests in a child's name, we handle the child's details only as the parent instructs, and only for that investment.

Language

This notice is in English. If you'd like it in another language listed in the Eighth Schedule to the Constitution of India, such as Konkani, Hindi, Marathi or Malayalam, ask us and we'll provide it.

Changes to this notice

We date every version and keep every old one. If we change what we collect or why, we'll update this page before the change takes effect, and where the law requires it, we'll ask for your consent again.

Talk to us