Privacy Policy
Taxpex Consultancy (‘Taxpex’, ‘we’, ‘our’) is committed to protecting your privacy. This policy explains what we collect, how we use it, who we share it with, and the rights you have as an Indian data principal under the Digital Personal Data Protection Act, 2023.
1. What we collect
To deliver GST registration, ITR filing, accounting, ROC and other services we collect: (a) identity data — PAN, Aadhaar, DIN, DSC details, passport, photograph; (b) contact data — name, email, phone, address; (c) business data — GSTIN, incorporation documents, financial statements, invoices, bank details; (d) technical data — IP, device, browser, cookies, usage analytics.
2. How we use it
We use your data only to (i) provide the specific service you engaged us for, (ii) comply with statutory obligations under the Income Tax Act, CGST Act, Companies Act, PMLA and other applicable laws, (iii) respond to consultation requests, (iv) send transactional updates about your filings and (v) improve our website and content.
3. Legal basis
Processing is based on (a) your explicit consent (consultation forms, WhatsApp opt-in), (b) performance of contract for engaged services, and (c) legal obligation for statutory filings.
4. Sharing & disclosure
We share data only with (a) government portals (GSTN, Income Tax, MCA, TRACES, DGFT, IPO, FSSAI, EPFO, ESIC) as required to file returns and registrations on your behalf, (b) our authorised chartered accountants, company secretaries and support staff under NDAs, (c) secure infrastructure providers (Supabase/PostgreSQL, Cloudflare, transactional email). We never sell your data.
5. Data retention
Financial and statutory records are retained for a minimum of 8 years as required under Section 44AA of the Income Tax Act and Rule 68 of the Companies Rules. Marketing data is retained until you opt out.
6. Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256 on managed database), with role-based access control, activity audit logs, MFA on admin accounts and least-privilege engineering practices. Payment data is not stored — all payments run through PCI-DSS compliant gateways.
7. Cookies
We use first-party cookies for session state and privacy-preserving analytics. Third-party analytics (Google Analytics, Meta Pixel, GTM) are loaded only when the corresponding environment IDs are configured. You can disable cookies via your browser.
8. Your rights (DPDP Act, 2023)
You may request access, correction, updation, erasure or portability of your personal data, withdraw consent, or nominate a legal heir by writing to contact@taxpex.in. We will respond within 30 days.
9. Grievance officer
Grievance Officer: Vivek Sharma · contact@taxpex.in · +91-74289-33464 · Delhi, India. If your complaint is unresolved, you may approach the Data Protection Board of India.
10. Changes
We will publish material changes on this page and, where required, notify you by email. Continued use of our website or services constitutes acceptance of the updated policy.