Data & Consent Policy

1. Introduction

Taxcom Technologies LLP ("Taxcom", "we", "us", or "our") is committed to protecting the privacy, security, and dignity of every individual whose personal data we process. This Data & Consent Policy explains how we collect, use, store, share, and protect your personal information when you visit our website (taxcom.co.in), use our services, or otherwise interact with us.

This Policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and in anticipation of the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

2. Applicability

This Policy applies to:

• All visitors to www.taxcom.co.in
• Individuals and businesses who register for or purchase our services
• Newsletter subscribers and persons who contact us via forms, email, or phone
• Franchise partners and referral partners

3. Data We Collect

3.1 Personal Identification Data

• Full name, date of birth, and gender
• PAN (Permanent Account Number), Aadhaar number, and other government-issued identifiers required for tax or registration filings
• Contact details: mobile number, email address, and postal/business address

3.2 Business & Financial Data

• Business name, type, and registration details
• GSTIN, TAN, CIN, DIN, or other regulatory identifiers
• Bank account information (collected strictly for payment or filing purposes)
• Financial statements, tax returns, invoices, and supporting documents

3.3 Technical Data

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and clickstream data (via cookies or analytics tools)
• Form submission data and communication logs

3.4 Sensitive Personal Data or Information (SPDI)

Where required by law or for service delivery (e.g., Aadhaar-linked filings, DSC issuance), we may collect sensitive personal data. Such data is treated with heightened security and collected only with your explicit written consent.

4. How We Collect Your Data

• Directly from you through our website contact forms, checkout pages, or email
• When you call us or communicate via WhatsApp
• From government portals where you authorise us to act as your representative (e.g., MCA21, GST Portal, Income Tax Portal)
• Through cookies and website analytics (see Section 9)
• From referral partners or franchise networks, with your prior knowledge

5. Purpose of Processing & Legal Basis

We process your personal data only for specified, lawful purposes:

• Service Delivery: To complete company registrations, GST filings, trademark applications, tax returns, licences, and other services you purchase.
• Legal & Regulatory Compliance: To fulfil our obligations as a CA/CS/Legal practice and as an Authorised GST Practitioner and UTIITSL PSA, including mandatory KYC and document retention.
• Communication: To send order confirmations, updates on your filings, compliance reminders, and customer support responses.
• Marketing (Consent-Based): To send newsletters, promotional offers, or new service announcements — only if you have opted in. You may withdraw consent at any time.
• Platform Improvement: Aggregated, anonymised analytics to improve website functionality and user experience.

6. Consent

Where we rely on consent as the legal basis for processing your data, we will:

• Seek consent in a clear, plain-language format before collecting the data
• Record the date, time, and method by which consent was given
• Never bundle consent for optional purposes with acceptance of our terms of service
• Allow you to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal

To withdraw consent, please contact us at: [email protected] or call +91 94321 60189.

7. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

• 7.1 Government & Regulatory Authorities: Filing of returns, registrations, and documents with MCA, GSTN, Income Tax Department, UTIITSL, IPINDIA, and other statutory bodies as part of the services you have engaged us for.
• 7.2 Authorised Service Providers: Trusted third parties (e.g., payment gateways, cloud hosting providers, email service providers) who process data on our behalf under strict data processing agreements. They are prohibited from using your data for their own purposes.
• 7.3 Legal Requirements: When required by law, court order, or government directive, or when disclosure is necessary to protect our rights, clients, or the public.
• 7.4 Business Transfers: In the event of a merger, acquisition, or restructuring, your data may be transferred to the successor entity, subject to the same protections under this Policy.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law, whichever is longer:

• Tax and financial records: minimum 8 years as required under the Income Tax Act, 1961 and GST law
• Company incorporation and MCA filings: as required by the Companies Act, 2013
• Marketing communications: until you withdraw consent
• General correspondence and support tickets: 3 years from last interaction

Once the retention period expires, data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

Our website uses cookies to enhance your browsing experience. The types of cookies we use include:

• Essential Cookies: Necessary for the website to function correctly (e.g., session management, shopping cart). Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use the site (e.g., Google Analytics). Collected in aggregate form. You may opt out.
• Marketing Cookies: Used to deliver relevant advertisements if you have opted in.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

10. Data Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, misuse, or disclosure. These include:

• SSL/TLS encryption for all data transmitted through our website
• Access controls and role-based permissions for internal staff
• Secure storage on ISO 27001-aligned infrastructure
• Regular security audits and staff training on data protection practices

Notwithstanding the above, no method of transmission over the internet is 100% secure. We encourage you to take appropriate precautions, such as not sharing your login credentials.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: At any time, without affecting lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer at: [email protected]. We will respond within 30 days of receiving your request.

12. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe we have collected data about a minor, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party websites (e.g., government portals, payment gateways). This Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Data & Consent Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated Policy will be posted on our website with a revised Effective Date. Continued use of our services after such changes constitutes your acceptance of the updated Policy. For material changes, we will notify you via email or a prominent notice on our website.

15. Grievance Officer & Contact Details