Privacy Policy

Last updated: 18 April 2026

Madhav & Associates (“we”, “our”, “us”, “the firm”) operates this website. This Privacy Policy explains what personal data we collect when you visit, how we use it, who we share it with, and the rights you have — in line with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian laws.

1. Who we are

Madhav & Associates, Chartered Accountants
Unit 154, 2nd Floor, Sunrays Shopping Centre, Sector 5, Charkop Market, Kandivali West, Mumbai 400067
Phone: 9920672369 · Email: madhav.associates2016@gmail.com

For this website, we are the Data Fiduciary under the DPDP Act.

2. Data we collect

2.1 Data you provide directly

• Name, phone number, WhatsApp number and email when you submit the contact form
• The service category you select and any message you write to us
• If you engage us for professional work, any documents and financial information you share — PAN, Aadhaar references where legally required, bank statements, invoices, agreements and similar records — under a separate engagement

2.2 Data collected automatically

• Basic technical data such as your approximate region, browser type and device type, captured by our hosting provider for security and operational purposes
• Pages you visit and links you click, only if you consent to analytics cookies (we do not run analytics cookies by default)

2.3 Data from third parties

We do not obtain personal data about you from third parties for this website.

3. Why we collect it

• To respond to your enquiry and, if you wish, begin a professional engagement
• To deliver the services you have engaged us for — tax, GST, audit, compliance, incorporation and related work
• To comply with obligations we have as chartered accountants under Indian law, the Chartered Accountants Act, 1949 and rules issued by the ICAI
• To keep the website secure and working

4. Legal basis

We rely on your consent (for example, when you submit the contact form) and, for ongoing engagements, on the contract between you and the firm. We also process data where a law, regulation, or order from a competent authority requires us to.

5. Who we share it with

We do not sell your personal data. We share it only in these situations:

• Service providers who help us run the firm securely — for example, hosting, email, accounting software and document-management tools. They are bound by contractual confidentiality.
• Regulators and authorities — Income Tax Department, GSTN, MCA, ICAI and similar bodies — where a filing, audit, inspection or legal obligation requires it.
• Professional advisers — only with your consent, for example if another professional needs information to complete related work.

We do not transfer personal data outside India except where a service provider lawfully processes it abroad under a valid basis under the DPDP Act.

6. How long we keep it

• Website enquiries that do not become engagements: up to 12 months, then deleted.
• Client records under an engagement: for the period required by the Chartered Accountants Act, 1949, the Income Tax Act, 1961, the Companies Act, 2013 and other applicable laws — typically 8 years from the end of the relevant financial year, or longer where a specific law requires.
• Analytics data (if you consent): as set by the analytics provider, typically up to 14 months.

7. How we protect it

• Our website runs over HTTPS with modern TLS configured by the hosting provider.
• Client records are held on access-restricted systems with individual logins.
• Staff and service providers are bound by confidentiality. As chartered accountants, we are additionally bound by the ICAI Code of Ethics.
• No method of transmission or storage is perfectly secure. We will notify you and the Data Protection Board of India without undue delay in the event of a reportable breach affecting your data.

8. Cookies

This site uses only essential cookies — small files needed for the site to work and to remember your cookie preference. We do not load advertising or tracking cookies. If we add optional analytics in future, we will block them until you opt in through the cookie banner.

You can clear cookies at any time from your browser settings.

9. Your rights

Under the DPDP Act, you have the right to:

• Know what personal data we hold about you and why
• Ask us to correct or complete inaccurate or incomplete data
• Ask us to erase your data, where we are not legally required to retain it
• Withdraw any consent you have given, at any time — as easily as you gave it
• Nominate another person to exercise your rights in case of death or incapacity
• File a grievance with us, and then escalate to the Data Protection Board of India if needed

To exercise any right, email us at madhav.associates2016@gmail.com with your request. We will respond within a reasonable time.

10. Grievance officer

11. Updates to this policy

We may update this policy to reflect changes in law or in how the site works. The “Last updated” date at the top will always show the latest version. If we make a material change, we will highlight it on the homepage for a reasonable period.