Privacy Policy

Last updated: August 24, 2026

PRIVACY POLICY

Clear standards for responsible handling of personal data

Effective Date: 22 August 2026
Last Updated: 22 August 2026

1. Introduction

ChandraGhanshyam & Associates LLP ("CGA," "we," "us," or "our") respects your privacy and is committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, protect, and otherwise process personal data when you:

  • Visit https://chandraghanshyam.com/;

  • Submit an enquiry or consultation request;

  • Contact us through telephone, email, WhatsApp, social media, or in person;

  • Engage us for taxation, GST, accounting, loan facilitation, banking support, business registration, legal, corporate, compliance, or advisory services;

  • Apply for employment, training, live projects, part-time opportunities, or professional empanelment; or

  • Otherwise interact with ChandraGhanshyam & Associates LLP.

For applicable data-protection laws, CGA may act as a "Data Fiduciary" in relation to personal data for which it determines the purpose and means of processing.

Where we process personal data only on the documented instructions of a client, the client may be the relevant Data Fiduciary, and CGA may act as its service provider or Data Processor.

2. Applicability

This Privacy Policy applies to personal data collected through our website, electronic communications, telephone calls, physical documents, meetings, professional engagements, and authorised third-party sources.

It does not apply to independently operated third-party websites, government portals, banks, lenders, credit-information companies, payment providers, or partner platforms. Their respective privacy policies will govern their processing activities.

3. Personal Data We May Collect

Depending on your interaction with us and the service requested, we may collect the following categories of personal data.

3.1 Contact and identification information

  • Full name;

  • Residential or business address;

  • City, state, country, and PIN code;

  • Email address;

  • Telephone and WhatsApp number;

  • Date of birth, age, gender, or photograph, where necessary;

  • Signature and authorised representative details.

3.2 Identity and KYC documents

  • PAN card details;

  • Aadhaar details or masked Aadhaar copies;

  • Passport, voter ID, driving licence, or other identity documents;

  • Digital Signature Certificate details;

  • Proof of address;

  • Business or professional identification documents;

  • Photographs and signatures.

We will seek Aadhaar or other official identity information only where it is reasonably necessary, lawfully permitted, or required for the relevant service.

3.3 Financial, taxation, credit, and banking information

For taxation, accounting, loan, banking, investment, or compliance services, we may collect:

  • Bank account and payment details;

  • Income, salary, turnover, revenue, expense, asset, and liability information;

  • Bank statements and financial statements;

  • Income-tax returns, Form 16, TDS records, tax notices, and assessment documents;

  • GST registration, returns, invoices, and transaction records;

  • Loan applications and supporting documents;

  • Credit history, credit score, CIBIL-related information, repayment history, and existing liabilities;

  • Insurance, property, investment, and security-related information;

  • Project reports, CMA data, business plans, and funding requirements.

We do not request debit-card PINs, credit-card PINs, CVVs, internet-banking passwords, or similar confidential authentication credentials through ordinary website forms.

3.4 Business, employment, and compliance information

We may collect information concerning:

  • Proprietorships, partnerships, LLPs, companies, trusts, societies, or other organisations;

  • Directors, partners, shareholders, beneficial owners, employees, authorised signatories, and nominees;

  • Company incorporation, ROC, MSME/Udyam, Startup India, IEC, licence, trademark, ISO, EPF, ESIC, and labour-law records;

  • Contracts, resolutions, registers, certificates, licences, notices, and regulatory correspondence;

  • Employee payroll, attendance, contribution, and benefit information where required for compliance services.

3.5 Legal and professional information

When legal or advisory services are requested, we may collect:

  • Facts and documents concerning a legal matter;

  • Agreements, notices, pleadings, correspondence, and evidence;

  • Details about disputes, claims, investigations, or proceedings;

  • Information relating to counterparties, witnesses, employees, representatives, or other individuals;

  • Confidential communications and instructions provided for professional services.

Collection or possession of information does not by itself create an advocate-client, consultant-client, fiduciary, or other professional relationship unless the engagement has been formally accepted by CGA.

3.6 Career, training, and empanelment information

Applicants for career programmes, training, live projects, part-time roles, or professional empanelment may be asked to provide:

  • Resume or curriculum vitae;

  • Educational qualifications and certificates;

  • Employment and professional experience;

  • Skills, areas of practice, work samples, and references;

  • PAN, Aadhaar, photograph, and address proof;

  • Bank-account details for authorised payments;

  • Availability, location, preferred work area, and interview information;

  • Information required for background, qualification, or identity verification.

3.7 Enquiry and communication information

We may retain:

  • Information entered in an enquiry or consultation form;

  • Remarks, questions, requirements, or service selections;

  • Emails, WhatsApp messages, letters, and other communications;

  • Call details, meeting notes, follow-up records, and service history;

  • Complaints, feedback, and support requests.

3.8 Website and technical information

When you visit our website, certain information may be collected automatically, including:

  • Internet Protocol address;

  • Browser, device, and operating-system information;

  • Date and time of access;

  • Pages viewed and links selected;

  • Referring website;

  • Cookie identifiers;

  • Website-performance, security, error, and access logs.

4. Sources of Personal Data

We may collect personal data:

  • Directly from you;

  • From your authorised representative, employer, family member, business partner, or professional adviser;

  • From documents and information voluntarily supplied for a service;

  • From banks, lenders, insurers, credit-information companies, professional associates, or service providers with your authorisation;

  • From government departments, statutory authorities, courts, tribunals, and publicly accessible official records;

  • Through our website and communication systems; and

  • From other lawful sources where collection is necessary for the requested service.

You must ensure that you are legally authorised to provide personal data relating to another individual.

5. Purposes of Processing

We may process personal data to:

  • Respond to enquiries and provide consultations;

  • Verify identity and assess service requirements;

  • Deliver taxation, GST, accounting, banking, loan, legal, corporate, registration, and compliance services;

  • Prepare and submit applications, returns, registrations, reports, and supporting documents;

  • Communicate with banks, lenders, credit-information companies, government departments, courts, regulators, and professional advisers;

  • Facilitate loan or financial-service applications requested by you;

  • Process payments, invoices, refunds, commissions, and professional fees;

  • Conduct conflict, eligibility, KYC, fraud-prevention, or compliance checks;

  • Manage professional engagements and maintain client records;

  • Process career, training, project, employment, and empanelment applications;

  • Maintain website security, functionality, and performance;

  • Respond to complaints and exercise-of-rights requests;

  • Protect our legal rights and prevent fraud, misuse, or unlawful activity;

  • Comply with legal, regulatory, taxation, accounting, professional, and reporting obligations;

  • Send service-related updates and, where permitted, promotional communications; and

  • Carry out any other purpose disclosed to you when the information is collected.

We will not use personal data for a new, incompatible purpose without providing an appropriate notice or obtaining consent where required.

6. Grounds for Processing

We process personal data only for lawful purposes. Depending on the circumstances, processing may be based on:

  • Your free, specific, informed, and unambiguous consent;

  • Your voluntary provision of data for a clearly specified service or enquiry;

  • Steps necessary to enter into or perform a professional engagement;

  • Compliance with a legal, statutory, regulatory, taxation, accounting, or professional obligation;

  • Establishment, exercise, or defence of legal rights or claims;

  • Prevention, detection, investigation, or reporting of fraud, cyber incidents, or unlawful activity; or

  • Any other legitimate use permitted under applicable law.

Where processing is based on consent, you may withdraw that consent. Withdrawal will not affect processing lawfully completed before withdrawal and may prevent us from continuing a service that requires the relevant data.

7. Disclosure of Personal Data

We may disclose personal data, only where reasonably necessary, to:

  • CGA's partners, employees, authorised personnel, consultants, and empanelled professionals;

  • Chartered accountants, company secretaries, advocates, valuers, auditors, and other professional advisers involved in the engagement;

  • Banks, non-banking financial companies, lenders, insurers, credit-information companies, and authorised financial intermediaries;

  • Income Tax, GST, MCA, EPFO, ESIC, trademark, labour, municipal, licensing, or other government and regulatory portals;

  • Courts, tribunals, law-enforcement authorities, regulators, or government agencies where required by law;

  • Hosting, cybersecurity, software, communication, document-management, payment, and website-support providers;

  • Partner platforms where you separately choose to access or request their services;

  • Prospective or actual parties to a lawful merger, restructuring, transfer, or reorganisation of CGA; and

  • Other persons with your consent or at your authorised direction.

Service providers and professional associates are expected to process personal data only for authorised purposes and to maintain appropriate confidentiality and security.

We do not sell or rent personal data to third parties.

Loan applications and financial-service requests may require disclosure to multiple lenders or intermediaries, but such disclosure will be made only in connection with your request, authorisation, or another lawful basis. Loan approval, interest rates, terms, and credit decisions are independently determined by the relevant lender.

8. Professional Confidentiality

Client documents and professional communications are handled confidentially and are accessible only to persons who reasonably require access for the relevant engagement, administration, supervision, compliance, or legal obligation.

Where independent professionals or associates assist with an engagement, they may receive limited information necessary for their assigned work and will be expected to follow confidentiality and data-protection obligations.

Nothing in this Privacy Policy limits any higher confidentiality obligation that applies under a professional engagement, contract, or applicable law.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

  • Enable essential website functions;

  • Remember basic preferences;

  • Maintain website security;

  • Prevent fraudulent or automated submissions;

  • Measure traffic and improve website performance; and

  • Understand how visitors interact with website pages.

You may block or delete cookies through your browser settings. Disabling essential cookies may affect website functionality.

If non-essential analytics, advertising, or third-party tracking technologies are introduced, appropriate notice and consent choices will be provided where required.

10. Third-Party Websites and Platforms

Our website may contain links to partner platforms, social-media services, WhatsApp, payment services, banks, government portals, or other third-party websites.

CGA does not control the privacy or security practices of independently operated third parties. You should review their privacy policies before submitting personal data. A link from our website does not make CGA responsible for the third party's processing practices.

11. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • Complete the purpose for which it was collected;

  • Provide and administer the requested service;

  • Maintain professional, taxation, accounting, employment, or regulatory records;

  • Handle complaints, disputes, audits, or legal claims;

  • Comply with applicable retention requirements; and

  • Maintain security, fraud-prevention, and processing logs where required.

Retention periods differ according to the type of information, service, legal obligation, and professional requirement. When personal data is no longer required, we will take reasonable steps to delete, anonymise, securely destroy, or restrict it, unless continued retention is required or permitted by law.

12. Data Security

We use reasonable technical, administrative, and organisational safeguards appropriate to the nature of the data, which may include:

  • Access controls and role-based permissions;

  • Password protection and authentication measures;

  • Encryption or secure transmission where appropriate;

  • Data backups and recovery procedures;

  • Security logging and monitoring;

  • Confidentiality obligations;

  • Restricted access to physical and electronic records; and

  • Periodic review of systems and service providers.

No website, email, internet transmission, or storage system can be guaranteed to be completely secure.

Users should avoid sending highly confidential documents through unsecured or unauthorised channels.

If a personal-data breach occurs, we will take reasonable steps to contain and investigate it and will notify affected individuals and competent authorities where required by applicable law.

13. Your Rights

Subject to applicable law and permitted exceptions, you may request:

  • Information about the personal data being processed and the processing activities;

  • Access to a summary of your personal data;

  • Correction of inaccurate or misleading information;

  • Completion or updating of incomplete or outdated information;

  • Erasure of information that is no longer required, unless retention is legally necessary;

  • Withdrawal of consent;

  • Details of persons or entities with whom your personal data has been shared, where applicable;

  • Grievance redressal regarding our processing of personal data; and

  • Nomination of another individual to exercise applicable rights in the event of death or incapacity, where recognised by law.

To protect personal data, we may verify your identity and authority before responding.

We may refuse or limit a request where necessary to comply with law, protect another person's rights, preserve professional privilege, or maintain records required for legal claims or statutory compliance.

Where CGA processes information solely on behalf of a client, your request may be referred to that client.

14. Children's Personal Data

Our financial, legal, taxation, loan, and professional services are not intended to be independently obtained by individuals below 18 years of age.

A child must not independently submit PAN, Aadhaar, banking, financial, legal, or other sensitive documents through the website. A parent or lawful guardian should communicate with us and provide any required consent.

Where a person below 18 applies for an eligible training, educational, internship, or project opportunity, CGA may obtain verifiable consent from a parent or lawful guardian where required by law.

We do not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children.

15. Marketing Communications

Where you have consented or where otherwise permitted by law, we may send information about services, programmes, events, or professional updates.

You may withdraw marketing consent by using an available unsubscribe option or by contacting us.

Withdrawal from marketing communications will not prevent necessary transactional, regulatory, or service-related communications.

16. Accuracy of Information

You are responsible for ensuring that personal data and documents supplied by you are accurate, complete, authentic, and up to date.

Our professionals prepare applications, reports, financial documents, filings, and advisory materials based on information supplied by clients and other authorised sources.

We may request corrections or additional documents where reasonably necessary.

17. Cross-Border Processing

Some technology or service providers may store or process information outside India.

Where cross-border processing occurs, we will take reasonable steps to ensure that it is undertaken in accordance with applicable contractual requirements and restrictions imposed under Indian law.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology, processing practices, or legal requirements.

The updated policy will be published on this website with a revised "Last Updated" date.

Material changes may also be communicated through an appropriate additional notice.

19. Privacy and Grievance Contact

For privacy questions, complaints, withdrawal of consent, or requests concerning your personal data, please contact:

Privacy and Grievance Contact

ChandraGhanshyam & Associates LLP
310/104-C, Alopibagh
Prayagraj - 211006
Uttar Pradesh, India

Email: connectus@chandraghanshyam.com
Telephone/WhatsApp: +91-9415-652-192
Website: https://chandraghanshyam.com/

Please write "Privacy Request" in the email subject line and explain your request clearly.

We will acknowledge and address the request within the period required under applicable law.

If you are dissatisfied with our response, you may pursue the grievance or complaint mechanism available under applicable Indian data-protection law.

 

Back to Home