Privacy Policy

On this page

Introduction

We are CA Hemraj Sharma & Co., a chartered accountancy practice based at C-12, Civil Lines, Jaipur, Rajasthan 302006.

This Privacy Notice explains how we use, share and store personal data provided to us. That includes client contact information and any personal details submitted through our website. We decide the means and purposes for this processing, which makes us the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

When we provide professional services for clients — audit, tax, GST, filings and related work — we handle information under the written terms of that engagement and ICAI confidentiality rules. We do not decide independent means and purposes for that processing. It is not covered in this notice. Each client should maintain their own privacy information for processing we undertake on their instruction.

How we collect personal information about you

Most of the personal information we process is provided to us directly by you for one of the following reasons:

To create an account, complete a profile, and verify your email or mobile number
To enter into a contract for a listed service or bundle, including checkout and payment
To manage delivery of services you have purchased
To provide feedback or enquire about our services through the contact form
To respond to requests sent by email or telephone

Information we receive indirectly

We also receive personal information indirectly as follows:

Google, when you choose to sign in with Google: your name and verified email address
Razorpay, when you pay for a service: payment status, order and payment references, and the amount collected
Our email and SMS providers, when they confirm delivery of verification or account messages
The practice administrator, when a client record is created for you before you first sign in

The type of personal information we collect

We currently collect and process the following information:

Name, email address, Indian mobile number, and optional business name
Content of messages and enquiries, including topic and any service you select on the contact form
Account details: verification status for email and phone, optional password, and sign-in method
Purchase records: selected offerings, snapshot of names and prices, payment references, amounts, and service status
Session cookies needed to keep you signed in, and a short-lived checkout cookie that remembers a purchase selection for one hour

We do not currently use advertising cookies or third-party analytics that profile visitors to this website.

How we use the personal information and our legal basis for processing

Contract and requested services

We process information to perform a contract with you, or to take steps at your request before a contract, in order to:

Create and maintain your client account, including verification of email and phone
Complete checkout, collect the professional fee through Razorpay, and confirm payment
Deliver purchased services, assign work within the practice, and show status on your dashboard
Address feedback and enquiries about our services

Legitimate use

We process information for specified legitimate uses, including operating this website and the practice, in order to:

Provide basic website and account functionality, including host-only session cookies
Respond to requests submitted by email, phone or the contact form
Keep an internal record of enquiries and purchased work so the practice can serve you
Comply with professional, tax and accounting record-keeping duties that apply to a chartered accountancy practice

We rely on consent in order to:

Contact you about an enquiry after you tick the consent box on the contact form
Send email or SMS one-time codes when you choose those sign-in or verification methods

Who has access to your personal information

We will only share personal data with relevant recipients where necessary to fulfil the purposes in this notice and in line with the DPDP Act, 2023.

The practice: Partners, employees and operators who need the information to serve the account, enquiry or engagement.
Payment: Razorpay, to create an order, collect the professional fee, and confirm capture.
Identity: Google, only if you choose Google sign-in.
Messaging: Resend and Fast2SMS, to deliver verification, invitation and recovery messages.
Hosting and storage: The database and application hosts that run this website, and Cloudflare R2 for private client documents, which may be outside India.

We do not sell personal data. We do not share it with partners for their own marketing.

How we store and dispose of your personal information

We may process your personal data on systems outside India, including countries that the Central Government has not notified as having a comparable data-protection regime. Where that occurs, we use providers under written terms that require them to keep the data secure and to use it only for the instructed purpose. Write to us at the address below if you want more detail on those arrangements.

Where we have an account or contract with you, we generally keep contact information, purchase records and related correspondence for eight years after the relationship ends, which aligns with tax and company-record practice in India. Other data is held for shorter periods: website contact-form enquiries for twelve months, and the checkout selection cookie for one hour.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

When a retention period has expired and we no longer need your data, we dispose of it by deleting it from electronic systems. Sub-processors engaged to support a contract are bound by our retention limits and by contract terms to keep your data safe.

What rights do you have

Under the Digital Personal Data Protection Act, 2023, you have a number of rights, including:

Access: You may ask us for a summary of the personal data we hold about you and the processing activities we carry out.
Correction and completion: You may ask us to correct inaccurate data or to complete data you think is incomplete.
Erasure: You may ask us to erase personal data in certain circumstances, unless we must retain it for a legal or professional duty.
Withdraw consent: Where we rely on consent, you may withdraw it. That does not affect processing already carried out.
Grievance: You may raise a complaint with us about our use of your data.
Nomination: You may nominate another individual to exercise your rights in the event of death or incapacity, as provided in the Act.

We do not take decisions about you solely by automated means, including profiling, that produce a legal or similarly significant effect.

You are not required to pay a charge for exercising these rights. Write to hello@cahemrajsharma.com if you wish to make a request or query our use of your data. You may also telephone +91 98765 43210 or write to us at C-12, Civil Lines, Jaipur, Rajasthan 302006, Jaipur, Rajasthan.

If you are unhappy with our use of your data or with our response to a complaint, you also have the right to approach the Data Protection Board of India once it is receiving complaints under the Act.

Changes to this privacy notice

This Privacy Notice is reviewed regularly so that it reflects how we use your information. When minor changes are made, we will post the updated notice on this page. We will notify you of any substantive changes by email where we hold a working address for you.

Questions about this notice: hello@cahemrajsharma.com.