Last Updated: 26 May 2026
KyaTax ("we", "our", "us") is an professional CA firm based in Delhi, India. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website kyatax.com or contact us for our professional services.
By using our website or engaging our services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website.
1. Information We Collect
1.1 Information You Provide Directly
- Contact forms: Name, mobile number, email address, service requirement, and message
- ITR filing wizard: Income details, deductions, tax regime preference, and uploaded documents (Form 16, AIS)
- DPR/CMA calculator: Business name, promoter details, financial data entered for projection purposes
- WhatsApp enquiries: Any information shared via WhatsApp chat with our team
1.2 Information Collected Automatically
- IP address, browser type, device type, and operating system
- Pages visited, time spent, and navigation patterns (via cookies/analytics)
- Referral source (how you found our website)
1.3 Payment Information
Payments are processed via Razorpay, a PCI-DSS compliant payment gateway. We do not store your card details, bank account numbers, or UPI credentials on our servers. All payment data is handled directly by Razorpay as per their Privacy Policy.
2. How We Use Your Information
- To provide the professional services you have requested (ITR filing, GST, company registration, DPR, etc.)
- To contact you regarding your enquiry or service request
- To send service reminders (e.g., ITR due date, GST filing dates) — only to existing clients
- To improve our website content and user experience
- To comply with legal and regulatory obligations as a CA firm under the Income Tax Act, GST Act, and ICAI guidelines
- To process payments for services rendered
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
3. Legal Basis for Processing (India)
We process your data under the following legal bases as applicable under Indian law (including the Digital Personal Data Protection Act, 2023):
- Consent: When you submit a contact form or use our calculator tools
- Contract: When processing is necessary to deliver the professional services you have engaged us for
- Legal obligation: When required by CA regulations, Income Tax Act, GST Act, or court orders
- Legitimate interests: For improving our services and website analytics
4. Data Sharing & Disclosure
We share your information only in the following limited circumstances:
- Government portals: Income Tax Portal (incometax.gov.in), GSTN (gst.gov.in), MCA21, IP India, TRACES — as required to deliver our services
- Payment processor: Razorpay, for processing payments
- WhatsApp Business: Meta Platforms, for communication via WhatsApp
- Legal requirements: Where required by law, court order, or government authority
- Professional obligations: As required under ICAI Code of Ethics and professional standards
5. Data Retention
- Client tax documents: Retained for 8 years as required under the Income Tax Act
- GST records: Retained for 6 years as required under the GST Act
- Contact enquiries (non-clients): Retained for 12 months, then deleted
- Website analytics data: Retained for 26 months in aggregate form
- ITR wizard localStorage data: Stored only in your browser; we do not receive or store this on our servers unless you submit it
6. Cookies & Tracking
Our website uses minimal cookies:
- Essential cookies: Required for the ITR wizard progress-save functionality (localStorage)
- Analytics: We may use Google Analytics to understand website traffic in aggregate. This data is anonymised.
You can disable cookies in your browser settings. Disabling cookies will not affect your ability to use our core services.
7. Security
We implement appropriate technical and organisational measures to protect your personal data:
- SSL/TLS encryption for all data transmitted via our website (HTTPS)
- Secure access controls for client document storage
- Regular security reviews of our systems
- Staff trained on data confidentiality under CA professional obligations
However, no internet transmission is 100% secure. We cannot guarantee absolute security of data transmitted over the internet.
8. Your Rights
Under the Digital Personal Data Protection Act, 2023 (India) and applicable laws, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal retention requirements)
- Withdraw consent: Withdraw consent for data processing at any time (this will not affect past lawful processing)
- Grievance: Lodge a complaint with our Grievance Officer (details below)
To exercise any of these rights, contact us at the details below. We will respond within 30 days.
9. Children's Privacy
Our services are intended for adults (18+) and business entities. We do not knowingly collect personal information from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately for deletion.
10. Third-Party Links
Our website contains links to government portals (incometax.gov.in, gst.gov.in, mca.gov.in) and third-party services (Razorpay, WhatsApp). We are not responsible for the privacy practices of these external websites. We encourage you to review their respective privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised "Last Updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.
12. Grievance Officer & Contact