MIDAS Stock Broking Company ("MIDAS", "we", "us") is a stockbroker licensed by the Securities Board of Nepal (SEBON) and broker member no. 21 of Nepal Stock Exchange (NEPSE). This policy explains what personal information we collect through this website and our online account and KYC services, why we collect it, how we protect it, and the choices you have. It also explains how we use the information we receive when you choose Continue with Google.
Information we collect
- Account details you give us when you sign up: your name, email address, mobile number and password. We store only a secure hash of your password, never the password itself.
- If you continue with Google: your name, email address, whether Google has verified that email address, a link to your profile picture and your Google account ID. We never receive your Google password, and we do not access your contacts, Gmail, Drive or any other Google data.
- KYC information required by SEBON's KYC regulations (the individual KYC form): personal and family details, date of birth, addresses (including a map location you choose to pin), occupation and income range, bank account details, nominee or guardian details, identity document numbers (citizenship, national ID, PAN, demat/BOID), declarations such as politically exposed person status, and a witness's name and phone number. For a KYC update, the client code of your existing account.
- KYC documents and images you upload: copies of your identity documents, a passport-size photo, a live selfie, your signature and thumbprints, a bank cheque copy and a short declaration video.
- Newsletter sign-ups: the name, email address and phone number you enter.
- Chat messages you type into the website's assistant.
- Technical information: your IP address and browser details, recorded for security, fraud prevention and to limit abusive traffic.
How we use your information
- To create and secure your online account and sign you in.
- To verify your identity and process your KYC application, as SEBON regulations and Nepal's anti-money-laundering and counter-terrorist-financing laws require.
- To open and maintain your trading, MIDAS and demat accounts and keep their records.
- To contact you about your account and application: verification codes, KYC decisions, requests to update your KYC, and reminders before your KYC expires.
- To answer your questions through the chat assistant.
- To keep our services secure by detecting and preventing fraud, abuse and unauthorised access.
- To meet our legal and regulatory obligations, including record-keeping and reporting to the authorities.
We do not sell your personal information, and we do not use it for advertising.
Continue with Google
When you choose Continue with Google, we use the information Google shares with us (your name, email address, email verification status, profile picture link and Google account ID) only to create your MIDAS customer account, sign you in and keep your account secure. We accept only Google accounts whose email address Google has verified.
We do not use Google user data for advertising and we do not sell it. We share it only with the service providers that host our website and database for us, as described below. You can remove MIDAS's access at any time from your Google Account (myaccount.google.com/permissions); your MIDAS account and KYC records are not affected.
MIDAS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we protect your information
- All connections to this website are encrypted (HTTPS).
- KYC documents are kept in private storage that is not publicly accessible. Only you and authorised MIDAS staff can view them.
- Staff access is limited by role, and staff actions are logged.
- Passwords are stored as secure hashes, and repeated sign-in attempts are limited.
- Backups are encrypted and kept in storage that cannot be altered or deleted early.
No system is completely secure, but we work to protect your information and review our safeguards regularly.
How long we keep information
We keep your KYC records and account information for as long as your account is open, and afterwards for the period required by Nepali law and SEBON regulations. An incomplete KYC form you delete is kept for 10 days in case you ask us to restore it, and is then permanently deleted. Security logs are kept for a limited period.
Where your information is stored
Our website, database and file storage run on established cloud service providers, which may store your information in data centres outside Nepal. We choose providers with strong security and confidentiality commitments.
Your choices and rights
- You can view and continue your KYC applications from your dashboard. To change an approved KYC, ask us to request an update, then resubmit it.
- You can delete an incomplete KYC form from your dashboard.
- You can ask us for a copy of your personal information or ask us to correct it. Some information must be kept by law even after your account is closed.
- You can unsubscribe from our newsletter at any time.
Children
An account for a minor is opened and managed by the minor's legal guardian, who provides the minor's details and documents as the KYC regulations require.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will tell you on this website or by email.
Contact us
For questions or requests about your personal information, contact our Grievance Officer, Anuj Pandit, on 9801030123 or at inquiry@midasstock.com.np, or write to MIDAS Stock Broking Company, Kamaladi Mode, Kathmandu, Nepal (phone 01-5970056).
