Confidentiality Policy
How CapitalBox protects, handles, and secures your proprietary financial and business information with the highest professional standards.
CapitalBox (operating under Exult Shoppers) receives access to proprietary financial statements, corporate strategies, and personal information in the course of providing business loan assistance, funding facilitation, corporate registrations, and compliance advisory services. This policy is our binding commitment to protect it all.
Definition of Confidential Information
"Confidential Information" includes all data disclosed by the Client to CapitalBox — verbally, electronically, or in writing — including but not limited to:
Bank account statements, audited or unaudited balance sheets, profit & loss statements, income tax returns (ITR), ledger records, sales invoices, and debt metrics.
Permanent Account Number (PAN), Aadhaar data, Director Identification Numbers (DIN), Digital Signature Certificates (DSC), passwords, and government portal OTPs.
Shareholding patterns, partnership deeds, MOA/AOA, customer lists, employee structures, and proprietary business expansion plans.
Detailed Project Reports (DPR), financial models, and bank login profile evaluations generated during the facilitation process.
Standard of Care & Non-Disclosure Obligations
All Staff Are NDA Bound
Every employee, independent contractor, and associate of CapitalBox is bound by strict internal Non-Disclosure Agreements (NDAs) to prevent any leakage of client assets or confidential data.
Need-to-Know Access
Only designated specialists, accountants, case managers & legal consultants access your files — strictly limited to their role.
Never Commercialized
Your data is never sold, traded, or used for any purpose beyond fulfilling your specific contracted service.
Secure Infrastructure
256-bit SSL encryption, protected servers, and access-controlled systems safeguard all client data at every level.
Authorized & Permitted Disclosures
The Client grants authorization to disclose Confidential Information only in these specific operational scenarios:
Financial Network Facilitation
Relevant financial profiles, CIBIL metrics, and corporate statements may be shared with our trusted network of RBI-registered Banks and NBFCs — solely to evaluate and process your funding application.
Statutory Filing Authorities
Identity credentials and tax data may be uploaded onto secure government portals — MCA, GSTN, IP India (Trademark Registry), and Income Tax Department — to complete mandatory corporate compliance.
Regulatory & Judicial Mandate
Data may be disclosed if compelled by a valid legal subpoena, judicial order, statutory government investigation, or to protect against active financial fraud or cyber threats.
Exclusions from Confidential Protection
Confidentiality obligations do not apply to information that:
- Public Domain: Is or becomes publicly known through no wrongful act, negligence, or breach by CapitalBox.
- Prior Possession: Was already lawfully in the Company's possession before receiving it from the Client, without any existing obligation of confidentiality.
- Independent Source: Is lawfully acquired from an independent third party who has no restriction on disclosing such information.
Breach Remedies & Limitation of Indemnity
In the event of an accidental data breach, CapitalBox will take immediate administrative steps to mitigate exposure and secure the compromised infrastructure.
Cap on Damages: To the maximum extent permitted under Indian law, CapitalBox's total financial liability for any proven breach shall be strictly capped at the exact amount of professional fees paid by the Client for that specific transaction. No indirect, consequential, or punitive business loss damages shall be claimed against the Company.
Term, Survival & Disposal of Records
3-Year Survival
Confidentiality obligations continue in full force for 3 years after termination or completion of the professional engagement.
Statutory Retention
Records retained only as long as required under Indian tax and corporate audit mandates.
Secure Deletion
After retention period, data is securely archived or permanently deleted from active system servers.
Governing Law & Territorial Jurisdiction
- Governing Framework: This policy shall be governed by and interpreted in accordance with the substantive laws of the Republic of India.
- Territorial Jurisdiction: Any disputes, claims, or breaches arising from this policy shall be subject to the exclusive jurisdiction of competent courts in Surat, Gujarat, India.
Corporate Compliance & Confidentiality Desk
For any security questions, data inquiries, or privacy notices, contact our compliance officer:
Entity Name
CapitalBox (A Unit of Exult Shoppers)
Registered Office
Near Siddhi Vinayak Temple, Vesu, Surat – 395007
Official Email
letstalk@capitalbox.co.in
support@capitalbox.co.in
GSTIN
24DXCPB3045Q1ZG
Questions About Your Data Security?
Our compliance team is available to address any confidentiality concerns, data inquiries, or security-related questions.
256-bit Encryption | © 2024–2026 CapitalBox All Rights Reserved. | GSTIN: 24DXCPB3045Q1ZG
Confidentiality Policy
How CapitalBox protects, handles, and secures your proprietary financial and business information with the highest professional standards.
CapitalBox (operating under Exult Shoppers) receives access to proprietary financial statements, corporate strategies, and personal information in the course of providing business loan assistance, funding facilitation, corporate registrations, and compliance advisory services. This policy is our binding commitment to protect it all.
Definition of Confidential Information
"Confidential Information" includes all data disclosed by the Client to CapitalBox — verbally, electronically, or in writing — including but not limited to:
Bank account statements, audited or unaudited balance sheets, profit & loss statements, income tax returns (ITR), ledger records, sales invoices, and debt metrics.
Permanent Account Number (PAN), Aadhaar data, Director Identification Numbers (DIN), Digital Signature Certificates (DSC), passwords, and government portal OTPs.
Shareholding patterns, partnership deeds, MOA/AOA, customer lists, employee structures, and proprietary business expansion plans.
Detailed Project Reports (DPR), financial models, and bank login profile evaluations generated during the facilitation process.
Standard of Care & Non-Disclosure Obligations
All Staff Are NDA Bound
Every employee, independent contractor, and associate of CapitalBox is bound by strict internal Non-Disclosure Agreements (NDAs) to prevent any leakage of client assets or confidential data.
Need-to-Know Access
Only designated specialists, accountants, case managers & legal consultants access your files — strictly limited to their role.
Never Commercialized
Your data is never sold, traded, or used for any purpose beyond fulfilling your specific contracted service.
Secure Infrastructure
256-bit SSL encryption, protected servers, and access-controlled systems safeguard all client data at every level.
Authorized & Permitted Disclosures
The Client grants authorization to disclose Confidential Information only in these specific operational scenarios:
Financial Network Facilitation
Relevant financial profiles, CIBIL metrics, and corporate statements may be shared with our trusted network of RBI-registered Banks and NBFCs — solely to evaluate and process your funding application.
Statutory Filing Authorities
Identity credentials and tax data may be uploaded onto secure government portals — MCA, GSTN, IP India (Trademark Registry), and Income Tax Department — to complete mandatory corporate compliance.
Regulatory & Judicial Mandate
Data may be disclosed if compelled by a valid legal subpoena, judicial order, statutory government investigation, or to protect against active financial fraud or cyber threats.
Exclusions from Confidential Protection
Confidentiality obligations do not apply to information that:
- Public Domain: Is or becomes publicly known through no wrongful act, negligence, or breach by CapitalBox.
- Prior Possession: Was already lawfully in the Company's possession before receiving it from the Client, without any existing obligation of confidentiality.
- Independent Source: Is lawfully acquired from an independent third party who has no restriction on disclosing such information.
Breach Remedies & Limitation of Indemnity
In the event of an accidental data breach, CapitalBox will take immediate administrative steps to mitigate exposure and secure the compromised infrastructure.
Cap on Damages: To the maximum extent permitted under Indian law, CapitalBox's total financial liability for any proven breach shall be strictly capped at the exact amount of professional fees paid by the Client for that specific transaction. No indirect, consequential, or punitive business loss damages shall be claimed against the Company.
Term, Survival & Disposal of Records
3-Year Survival
Confidentiality obligations continue in full force for 3 years after termination or completion of the professional engagement.
Statutory Retention
Records retained only as long as required under Indian tax and corporate audit mandates.
Secure Deletion
After retention period, data is securely archived or permanently deleted from active system servers.
Governing Law & Territorial Jurisdiction
- Governing Framework: This policy shall be governed by and interpreted in accordance with the substantive laws of the Republic of India.
- Territorial Jurisdiction: Any disputes, claims, or breaches arising from this policy shall be subject to the exclusive jurisdiction of competent courts in Surat, Gujarat, India.
Corporate Compliance & Confidentiality Desk
For any security questions, data inquiries, or privacy notices, contact our compliance officer:
Entity Name
CapitalBox (A Unit of Exult Shoppers)
Registered Office
Near Siddhi Vinayak Temple, Vesu, Surat – 395007
Official Email
letstalk@capitalbox.co.in
support@capitalbox.co.in
GSTIN
24DXCPB3045Q1ZG
Questions About Your Data Security?
Our compliance team is available to address any confidentiality concerns, data inquiries, or security-related questions.
256-bit Encryption | © 2024–2026 CapitalBox All Rights Reserved. | GSTIN: 24DXCPB3045Q1ZG