Privacy Policy

This Privacy Policy explains how Tanwar & Associates, Chartered Accountants (“the Firm”, “we”, “us”, or “our”), a proprietorship firm registered with the Institute of Chartered Accountants of India (ICAI Firm Registration No. 044114N), collects, uses, stores, shares, and protects the personal data of visitors and users (“you”, “your”, or “User”) of our website www.tanwarassociates.in (the “Website”).

We are committed to handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 together with the rules framed thereunder. By accessing or using the Website, or by submitting your information through any form on the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of this Policy

This Policy applies to personal data we collect through the Website, including via our enquiry and callback forms, and through any communication you initiate with us by email, telephone, or messaging (such as WhatsApp). It does not apply to third-party websites that may be linked from our Website, which are governed by their own privacy policies.

2. Personal Data We Collect

We collect only the data reasonably necessary to respond to your enquiries and to provide our professional services. Depending on how you interact with us, this may include:

2.1 Information you provide to us

• Identity and contact details you submit through our enquiry / callback form — such as your name, telephone or WhatsApp number, and email address;
• Enquiry details — the service you are interested in and any message or information you choose to share with us;
• Information shared during an engagement — if you become a client, additional information necessary to provide professional services, governed by a separate engagement letter and applicable professional confidentiality obligations.

2.2 Information collected automatically

When you visit the Website, certain technical information may be collected automatically through cookies and similar technologies, including:

• Your IP address, browser type, device type, and operating system;
• Pages visited, time spent, referring website, and similar usage data;
• Data collected through analytics and advertising tools (see Section 6, Cookies and Tracking).

We do not knowingly collect: payment card numbers, bank account details, passwords, or financial credentials through the Website. Please do not submit such information through the Website forms.

3. Children’s Data

The Website and our services are intended for businesses and adults. We do not knowingly collect personal data of children (defined under the DPDP Act as individuals below eighteen (18) years of age). If we become aware that we have inadvertently collected personal data of a child without verifiable consent of a parent or lawful guardian, we will delete it. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

4. How and Why We Use Your Data

Under the DPDP Act, we process your personal data for specified, lawful purposes and, where required, on the basis of your consent. We use your personal data to:

• Respond to your enquiry, provide a quote, and contact you regarding the service you have requested;
• Provide, perform, and administer our professional services if you engage us;
• Communicate with you, including sending service-related updates and responding to your questions;
• Maintain records and comply with our legal, regulatory, and professional obligations, including those of the ICAI and applicable tax and corporate laws;
• Operate, maintain, secure, and improve the Website;
• Measure and improve the effectiveness of our online presence (including advertising and analytics, where you have consented to such cookies).

Legal basis: We rely on your consent (given when you voluntarily submit a form or accept cookies), and on other lawful grounds permitted under the DPDP Act, such as the legitimate uses specified in the Act and compliance with legal obligations. You may withdraw your consent at any time (see Section 9).

5. How We Share Your Data

We do not sell, rent, or trade your personal data. We share it only as described below, and only to the extent necessary:

• Service providers / processors (“Data Processors”): We use trusted third-party infrastructure to operate the Website and process form submissions — including cloud hosting and email-notification services (for example, Amazon Web Services). These providers process data on our behalf, under appropriate obligations of confidentiality and security, and are not permitted to use it for their own purposes.
• Communication platforms: If you choose to contact us via telephone, email, or WhatsApp, your communication is handled through the respective service providers under their own terms.
• Legal and regulatory disclosure: We may disclose personal data where required by law, by a court, or by a regulatory or statutory authority (including the ICAI), or to establish, exercise, or defend legal claims.
• Professional confidentiality: Information shared with us in the course of a professional engagement is additionally protected by the confidentiality obligations applicable to Chartered Accountants under ICAI norms.

6. Cookies and Tracking Technologies

The Website may use cookies and similar technologies to function correctly, understand usage, and — where applicable — measure advertising performance. Cookies fall broadly into:

• Essential cookies — necessary for the Website to operate;
• Analytics cookies — to understand how visitors use the Website;
• Advertising / conversion cookies — such as those used by Google Ads to measure the effectiveness of our online campaigns.

You can control or disable cookies through your browser settings. Where required by law, we will seek your consent before placing non-essential cookies. Disabling certain cookies may affect how the Website functions for you.

7. How We Protect Your Data

We take reasonable security safeguards to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include the use of reputable cloud infrastructure, access controls, and encryption in transit where appropriate. However, no method of transmission over the internet or electronic storage is completely secure, and while we strive to protect your personal data, we cannot guarantee absolute security. We also encourage you to take care when sharing information online and to avoid sending sensitive details (such as financial credentials) through the Website.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to respond to your enquiry, to provide and administer our services, and to comply with legal, regulatory, tax, and professional record-keeping requirements. Enquiry data of persons who do not become clients is retained only for a reasonable period and thereafter deleted or anonymised. Records relating to professional engagements are retained for the periods prescribed by applicable law and ICAI requirements.

9. Your Rights Under the DPDP Act

Subject to the conditions and exceptions in the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed;
• Request correction, completion, or updating of inaccurate or incomplete personal data;
• Request erasure of your personal data where it is no longer required for the purpose for which it was collected, subject to our legal and professional retention obligations;
• Withdraw your consent at any time, where processing is based on consent (this will not affect processing already carried out);
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Grievance redressal in respect of our handling of your personal data.

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before acting on your request.

10. Third-Party Links

The Website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policy of any third-party website you visit.

11. Storage and Transfer of Data

Your personal data is processed using cloud infrastructure that may store or process data on servers located within or outside India, in accordance with applicable law. Where data is transferred or processed outside India, we take reasonable steps to ensure it remains subject to appropriate safeguards and is handled consistently with this Policy and the DPDP Act.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The revised version will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Your continued use of the Website after changes are posted constitutes acceptance of the revised Policy.

13. Contact and Grievance Redressal

If you have any questions, requests, or grievances regarding this Privacy Policy or your personal data, please contact: