Last Updated: January 2026
At ComplianceWaali, we take your privacy and the confidentiality of your business information extremely seriously. This policy outlines how we collect, use, protect, and handle your personal and business data.
1. Introduction
ComplianceWaali is committed to maintaining the highest standards of confidentiality and data protection. Your information is protected by professional ethics, legal obligations, and our comprehensive data security measures.
2. Information We Collect
We collect information necessary to provide you with compliance and tax services, including:
- Personal identification (PAN, Aadhaar, name, contact details)
- Business information (company name, registration details, turnover)
- Financial documents (bank statements, income records, investment proofs)
- Tax information (ITR filings, GST details, business records)
- Communication records (emails, WhatsApp messages, call logs)
3. How We Use Your Information
Your information is used exclusively for:
- Providing compliance, tax, and legal services
- Preparing and filing required documents with government authorities
- Communicating with you regarding your services
- Maintaining statutory records as required by law
- Improving our service quality
We never: Sell your information, share it with unauthorized third parties, or use it for marketing without your explicit consent.
4. Information Security
We implement comprehensive security measures to protect your data:
- Digital Security: Password-protected systems, encrypted communication, secure document storage
- Physical Security: Restricted access to documents, secure filing systems
- Access Control: Only authorized team members access your confidential information
- Regular Audits: Periodic security reviews and updates
5. Data Retention
We retain your information for the duration required by law and for maintaining service records. Generally:
- Statutory documents are retained for 6-7 years as per legal requirements
- Client records are maintained for ongoing service delivery
- Communication records are kept for audit and compliance purposes
You may request deletion of personal information where legally permitted.
6. Sharing of Information
Your information may be shared only with:
- Government Authorities: For mandatory tax and compliance filings (MCA, GSTN, Income Tax Department, etc.)
- Banks & Financial Institutions: If you authorize it for loan applications or account verification
- Professional Partners: CAs, auditors, or legal consultants working with us on your behalf (under confidentiality agreements)
No sharing happens without legal requirement or your explicit permission.
7. Professional Privilege & Confidentiality
As a professional firm, all communications and information shared with us are governed by principles of professional privilege and confidentiality. We maintain attorney-client privilege standards to the extent applicable.
8. Your Rights
You have the right to:
- Access your personal and business information held by us
- Request corrections to inaccurate data
- Request deletion of information (subject to legal retention requirements)
- Opt-out of non-essential communications
- Lodge complaints regarding data handling
9. Data Breach Notification
In the unlikely event of a data breach, we will:
- Immediately investigate and contain the breach
- Notify affected clients within 24 hours
- Work with authorities as required
- Implement preventive measures
10. Third-Party Services
We use secure third-party platforms for document management and communication. All third-party providers are contractually bound by confidentiality agreements and security standards equivalent to ours.
11. Compliance with Laws
This policy complies with:
- Indian Information Technology Act, 2000
- Income Tax Act, 1961
- GST Laws & RBI Guidelines
- Company Secretaries Act, 1980
- Professional ethics standards
12. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated to you. Continued use of our services constitutes acceptance of the updated policy.
13. Contact Us
For confidentiality concerns, data access requests, or complaints:
Your trust is our most valued asset. We are committed to protecting your confidential information.