Privacy Policy

ILNB Financial Services Pvt. Ltd. (“ILNB Group”, “we”, “us”) respects your privacy. This policy explains what information we collect through this website and our advisory relationship, why we collect it, and the choices available to you.

Information we collect

Information you provide: name, email address, phone number, company, and any details you include in enquiry forms or newsletter sign-ups.
Onboarding information: where you become a client, KYC documentation, financial goals, income and risk-profile details required by regulation.
Technical information: standard server logs such as browser type, device and approximate location, used only to keep the site secure and functioning.

How we use your information

To respond to your enquiry and schedule a consultation.
To prepare, deliver and review financial recommendations suited to your stated goals.
To meet legal, regulatory and record-keeping obligations applicable to distributors of financial products in India.
To send newsletters or updates where you have opted in. You can unsubscribe at any time.

Sharing of information

We do not sell your personal information. We share it only with: (a) product manufacturers, registrars and platforms strictly as required to execute transactions you have authorised; (b) professional advisers and service providers bound by confidentiality obligations; and (c) regulators or authorities where disclosure is required by law.

Data retention and security

We retain personal and transaction records for as long as your relationship with us continues and thereafter for the period required under applicable law. We apply reasonable technical and organisational safeguards to protect your information, though no method of transmission over the internet is entirely secure.

Cookies

This website uses only essential cookies needed for basic functionality. We do not use advertising trackers. You can block or delete cookies through your browser settings.

Your choices

Request a copy of the personal information we hold about you.
Ask us to correct information that is inaccurate or out of date.
Withdraw consent for marketing communications at any time.
Request deletion of information we are not legally required to retain.

Third-party links

Our website may link to external platforms operated by product manufacturers or regulators. We are not responsible for the privacy practices of those sites and encourage you to read their policies.

Changes to this policy

We may update this policy from time to time. The current version will always be available on this page with its effective date.

How this website is secured

We treat the security of this site as part of our duty of care to clients. The controls below are implemented and can be verified independently by anyone, using a tool such as Mozilla Observatory or SecurityHeaders.com.

Encryption in transit. The site is served over HTTPS only. HTTP requests are permanently sent to HTTPS, and HTTP Strict Transport Security instructs browsers never to attempt an unencrypted connection.
Content Security Policy. The browser is instructed to execute JavaScript only from this domain. If an attacker ever managed to inject a script tag into a page, the browser would refuse to run it. Plugin content and framing by other sites are blocked outright.
No third-party tracking. There are no advertising pixels, no analytics trackers and no social media scripts. The only external resources are the web fonts and, on the contact page, an embedded map.
Static architecture. The site has no database, no content management system, no admin login and no server-side code. The overwhelming majority of website compromises target exactly those components. There is nothing here to inject into or log in to.
Form protection. Enquiry forms use a hidden honeypot field and a minimum completion time to reject automated submissions, and can only post to our approved endpoint.
Hardened responses. MIME-type sniffing is disabled, referrer information is restricted, folder listing is off, and device APIs such as camera, microphone and location are switched off at the browser level.
Responsible disclosure. A published policy at /.well-known/security.txt tells researchers how to report a vulnerability to us.

A note on standards and certification

We want to be precise here rather than use reassuring language loosely. ISO/IEC 27001 is a certification awarded to an organisation’s information security management system by an accredited certification body — it is not something a website can hold. Any firm claiming its website is “ISO certified” is, at best, being imprecise.

What we can tell you accurately is this: the technical controls on this website are built to align with the guidance in ISO/IEC 27001 Annex A (notably A.8 on technological controls) and with the OWASP Application Security Verification Standard and OWASP Top 10. If your organisation requires evidence of formal certification, or you are conducting vendor due diligence on us, please write to getstarted@ilnb.co.in and we will respond with our current status honestly.

Separately, we handle personal data in line with India’s Digital Personal Data Protection Act, 2023, and the KYC and record-keeping obligations that apply to distributors of financial products.

What we will never do

We will never ask for your passwords, OTPs, PINs or net-banking credentials. Not by phone, not by email, not ever. Anyone doing so in our name is impersonating us.
We will never ask you to transfer money to a personal account. Investments are always made to the AMC, insurer or regulated platform itself.
We will never sell, rent or share your contact details with anyone for marketing purposes.

If you receive a communication claiming to be from ILNB Group that does any of the above, please report it to us on getstarted@ilnb.co.in immediately.

Contact

Questions about this policy or your data can be sent to getstarted@ilnb.co.in or posted to ILNB Financial Services Pvt. Ltd., 205, Kulkarni House, Near Sai Baba Mandir, Ghatali Road, Thane (W).

Last updated: 2026. This policy is provided for information and does not create contractual rights beyond those available under applicable law.