Privacy Policy

1. Introduction

Radiant Cash Management Services Limited (“Radiant” or “the Company”) is committed to protecting the privacy and security of personal data entrusted to it by its employees, customers, shareholders, vendors, and other stakeholders. During business operations, the Company collects, processes, and stores certain personal information to enable efficient service delivery, ensure regulatory compliance and maintain operational effectiveness. This Privacy Policy sets out the framework adopted by Radiant to ensure that personal data is handled responsibly, securely, and in compliance with applicable laws and regulations, and any other relevant statutory provisions. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you interact with us through our website, digital platforms, communication channels, email and other online or offline modes. By using our services or communicating with us, you consent to the terms of this Privacy Policy.

1.1 Purpose

This Privacy Policy (“Policy”) outlines the principles and practices adopted by Radiant to ensure protection of personal data and privacy of individuals whose personal information is collected, processed, stored or shared to the Company in the course of its business operations.

1.2 Scope

This Privacy Policy applies to all personal information collected by Radiant in connection with:

Access to and use of our website, digital or technology platforms, applications and tracking systems
Communication and interaction messaging tools;
Engagements, service requests, or inquiries related to our cash management services, valuables logistics and associated operations.
Employment, vendor and contractual relationships

It does not apply to information collected by third-party websites, applications or links that may be accessible through our digital platforms.

This Policy applies to:

All employees, directors, consultants, vendors, customers, field representatives, shareholders and other persons who share data with Radiant or its authorized third parties for processing
All forms of personal data handled by the Company whether in electronic, paper or any other format pertaining to employees, customers, vendors, shareholders and other stakeholders.

1.3 Definitions

Terms	Definition
Personal Data	Any data about an individual who is identifiable by or in relation to such data.
Data Principal	The individual to whom the personal data relates.
Data Fiduciary	Radiant, which determines the purpose and means of processing personal data.
Processing	Any operation performed on personal data, such as collection, storage, use, disclosure, or erasure.
Sensitive Personal Data	Categories of personal data which, by their nature, require a higher degree of protection due to the potential harm that may result from un-authorised access or misuse

2. Policy

2.1 Nature of Data

We may collect the following types of information:

2.1.1 Personal Information:

Information you provide directly to us, such as:

Name, address, email ID and phone number of customers, vendors, employees cash executives, field representatives etc.;
Personal data of individuals engaged in cash management and valuables logistics operations, including identity details, address and contact information, background verification records, training credentials, operational allocation details and communication identifiers
Identity and business details (for clients and vendors);
KYC documents and related regulatory information (if applicable);
Any other information voluntarily shared via web forms, WhatsApp, or email.

2.1.2 Technical Information:

Operational & Technical Data such as CCTV footage at branches, cash vans and vaults;
Access logs, vehicle tracking data;
Automatically collected information when you visit our website or use our digital services, including: IP address, browser type, and device details; Date, time, and duration of website visits; Cookies and similar tracking technologies (if used).

2.1.3 Electronic Communication Data:

Radiant may use electronic communication platforms, such as messaging applications, to send operational alerts, duty assignments, acknowledgements, confirmations, safety instructions etc. Such communications are used strictly for operational, administrative and security purposes.

Radiant does not control the privacy practices of third-party communication platforms and users are advised to review the privacy policies of such platforms

2.2 Period of storage of information

RADIANT shall only keep the personal information for as long as it is necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal or regulatory requirements). No purpose in this policy will require keeping the individual’s personal information for longer than required. When RADIANT have no ongoing legitimate business need to process the stored personal information, RADIANT shall either delete or anonymize such information, or, if this is not possible (for example, because the personal information has been stored in backup archives), then RADIANT will securely store the personal information and isolate it from any further processing until deletion is possible.

2.3 Usage of Information

Radiant processes personal data for the following purposes:

Providing cash management and logistics services
Conducting background verification (including identity, address, reference checks and such other verification as may be required under applicable law or internal security protocols)
Operational coordination and compliance with internal security protocols
Contract execution and customer servicing
Compliance with legal, regulatory and audit requirements
Risk management, fraud prevention and security monitoring
Employee administration and human resource management
Technology operations, system security and service improvement

Personal data shall not be processed for purposes incompatible with those stated above, unless permitted by law.

2.4 Protection of Information

Radiant implements security measures to protect personal information from unauthorized access or disclosure. Radiant’s security practices and procedures limit access to personal information on need-only basis. Radiant employees who have limited access to customers’ personal information are bound by Non-Disclosure and Confidentiality Policies. Radiant may retain the personal information only for as long as it is required for rendering services or operations or if otherwise required under any law. When Radiant disposes of personal information, reasonable procedures will be adopted to erase it or render it. Radiant has implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information that Radiant processes. However, despite these safeguards and efforts to secure the information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, hence, Radiant cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat Radiant’s security and improperly collect, access, steal, or modify the information. Although Radiant will do its best to protect the collected personal information, transmission of personal information to and from Radiant’s services is at the individual’s own risk.

2.5 Disclosure and sharing of information

Radiant do not sell, trade, or otherwise transfer to outside parties the personally identifiable information collected. This does not include trusted third parties who assist in operations, conducting the business, or servicing customers/employees, so long as those parties comply with applicable laws and agree to keep this information confidential.

2.5.1 Internal Use:

RCMS and its employees may utilise personal information strictly on a need-to-know basis for internal assessments, operational requirements, compliance, and related lawful business activities

2.5.2 Technology Service Providers, Vendors and other Authorised Third Parties:

Radiant may engage third-party technology service providers and vendors to support its operational, administrative, and technology infrastructure, including communication platforms, data hosting, security systems, and enterprise applications. Personal data shared with such service providers shall be limited to what is necessary for service delivery and shall be subject to contractual safeguards and data protection obligations.

2.5.3 Banks, Financial Institutions and Insurers:

Radiant may share personal data with banks, financial institutions, and insurance providers for purposes including settlement of transactions, maintenance of operational accounts, insurance coverage relating to cash management operations, claims processing, risk assessment, and compliance with contractual or statutory requirements.

2.5.4 Regulators, Statutory Authorities and Law Enforcement Agencies:

Radiant may disclose personal data to regulatory authorities, statutory bodies or law enforcement agencies where such disclosure is required under applicable law, pursuant to a lawful request, court order or in connection with investigations, inspections or compliance obligations.

2.5.5 Auditors, Legal Advisors and Consultants:

Radiant may share personal data with its auditors, legal advisors, professional consultants, and other advisors solely for the purpose of audits, legal compliance, risk assessment, advisory services, and discharge of statutory or contractual obligations, subject to appropriate confidentiality obligations.

2.5.6 Group or Affiliate Entities

Radiant may share personal data with its group companies or affiliated entities, where applicable, for legitimate business purposes such as centralised administration, compliance, audit, or operational support, subject to lawful processing, purpose limitation, and appropriate data protection measures.

All disclosures shall be made strictly on a need-to-know basis and in accordance with applicable data protection laws and Radiant’s internal data governance policies.

2.6 Rights of data principals

Subject to applicable law, data principals have the right to:

Access personal data
Request correction or updating of inaccurate data
Withdraw consent (where applicable)
Seek grievance redressal

Such requests shall be addressed in accordance with the grievance redressal mechanism set out under this Policy

2.7 Consent

Radiant may obtain consent for sharing your personal information in several ways, such as in writing, online, through “click-through” agreements; or when consent is part of the terms and conditions of agreements pursuant to which Radiant provide the service. As Radiant relies on consent or other lawful grounds for processing personal data, including consent obtained expressly or as otherwise permitted under applicable law, the individuals shall also have the right to withdraw their consent at any time. They can withdraw their consent at any time by writing to us at privacy@radiantcashservices.com However, such withdrawal may affect the provision of services where processing is legally or contractually required. Upon the request to terminate the individual’s account, Radiant shall deactivate, anonymise, or delete the account and information from the active databases. However, Radiant shall retain some information in the backup files to prevent fraud, troubleshoot problems, assist with any investigations, enforce Radiant’s legal terms and/or comply with applicable legal requirements.

2.8 Handling privacy concerns

If you have any questions about this Privacy Policy or if you believe that your personal data is not handled in accordance with the applicable law or this document, then you may contact us Details of Nodal Grievance Redressal Officers are as under:

Name	Karthick Sankaran
Designation	Chief Technology Officer
Email	privacy@radiantcashservices.com
Address	Corporate Office : Radiant Building (Opposite AKDR Golf Village) OMR 4/3, Raju Nagar, 1st Street, Okkiyam, Thoraipakkam, Chennai – 600 096
Tel	+91-44-49044904

2.9 Cross-Border Data Transfer

Radiant does not transfer personal data outside India except where permitted under applicable law and subject to appropriate safeguards.

2.10 Cookies and Website Usage

Radiant’s website and platforms may use cookies or similar technologies for functional and analytical purposes. Users may control cookie preferences through browser settings, subject to website functionality.

3. Policy review

(a) This Privacy Policy shall be governed by the laws of India and the Courts of Chennai (India) shall have the exclusive jurisdiction to try any dispute arising thereof

(b) In case of any subsequent changes in the provisions of the Applicable Laws which makes any of the provisions in the Policy inconsistent with such provision of the Applicable Laws, then such provisions of the Applicable Laws would prevail over the Policy and the provisions in the Policy would be modified in due course to make it consistent with Applicable Laws.

4. Revision History

Revision Number	Author(s)	Description of Version	Date of Revision (dd-mm-yyyy)	Reviewed & approved by	Approval Date (dd-mm-yyyy)
1.0	CTO	Initial release	30-01-2026	Board	11-02-2026

4.1 Review History
This section will be completed to provide proof of the review of this document. If any changes are made during the review, they should be recorded in the revision history table above. All policies will be reviewed annually, on or before March 31st.