Your Data Rights

Under the Digital Personal Data Protection Act 2023, you (the “Data Principal”) have the following rights with respect to the personal data Capital YONO processes about you.

1. Right to access

You can request a summary of: (a) the personal data we hold about you, (b) the categories of processing we do, (c) the categories of third parties with whom we have shared the data, and (d) any other information prescribed under the DPDP Act.

2. Right to correction and completion

You may request correction of inaccurate or misleading personal data and the completion of incomplete personal data through your profile page or by writing to us.

3. Right to erasure

You can request deletion of your personal data, subject to legal retention obligations (e.g., 7-year statutory records under Income Tax Act, Companies Act, GST Act). We will retain only the minimum required by law.

4. Right to data portability

You can request a machine-readable export of your business profile, uploaded documents, AI-extracted fields, reports, payments and communications.

5. Right to nominate

You may nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

6. Right to grievance redressal

Visit the Grievance Officer page to lodge a formal complaint.

How to exercise these rights

Write to dpo@capitalyono.com with the subject line “DPDP Request — [right requested]”. We will verify your identity and respond within 30 days. Capital YONO will not charge a fee for exercising these rights for the first request in a calendar year.