Nagpal & Company Privacy Policy

Your privacy is important to us. It is Nagpal & Company's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://nagpalandcompany.com, and other sites we own and operate.

As a professional Chartered Accountancy and Company Secretarial firm, we are committed to maintaining the highest standards of client confidentiality and data protection in accordance with ICAI and ICSI codes of ethics, the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and other applicable Indian regulations.

This policy is effective as of November 2025 and was last updated on November 2025.

Information We Collect

Information we collect includes both information you knowingly and actively provide us when using or participating in any of our services and promotions, and any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Personal Information

We may ask for personal information which may include one or more of the following:

Name and designation
Email address and phone/mobile number
Business name and registered address
PAN, GSTIN, and other regulatory identification numbers
Bank account and payment details
Financial statements, accounting records, and tax documents
Legal documents, contracts, and corporate filings
Employment and directorship details
KYC documents and identity verification materials
Professional consultation records and correspondence

Legitimate Reasons for Processing Your Personal Information

We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our professional services to you, comply with regulatory obligations, and maintain our professional standards as required by ICAI and ICSI.

Collection and Use of Information

We may collect personal information from you when you do any of the following on our website:

Submit inquiry forms or request consultations
Sign up to receive updates from us via email or social media channels
Use a mobile device or web browser to access our content
Contact us via email, phone, WhatsApp, or similar technologies
Engage our professional services through formal agreements
Provide documents for accounting, auditing, taxation, or compliance services
Attend meetings, calls, or professional consultations

We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

To deliver professional accounting, auditing, taxation, compliance, and secretarial services
To comply with legal and regulatory obligations under Income Tax Act, GST Act, Companies Act, and other applicable laws
To contact and communicate with you regarding your professional engagements
For mandatory filings with Income Tax Department, MCA, GSTN, RBI, and other regulatory authorities
For analytics, market research, and business development, including to operate and improve our website and services
For advertising and marketing, including to send you promotional information about our services (only with your explicit consent)
To enable you to access and use our website and client portals For internal record keeping and administrative purposes as required by professional standards
To ensure compliance with anti-money laundering, KYC, and other regulatory requirements
For security and fraud prevention, and to ensure that our sites and services are safe and secure
To maintain professional confidentiality and client privilege as mandated by ICAI and ICSI codes

Please be aware that we may combine information we collect about you with general information or research data we receive from other trusted sources, always in compliance with our confidentiality obligations.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

We employ bank-level encryption, secure cloud storage, access controls with role-based permissions, regular security audits, and staff confidentiality undertakings in accordance with professional standards. All team members undergo periodic confidentiality training and are bound by ICAI and ICSI codes of professional conduct.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. We will comply with laws applicable to us in respect of any data breach.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services.

How Long We Keep Your Personal Information

We keep your personal information only for as long as we need to. For professional services, we typically retain client records for 8 years from completion of engagement or as required by statute, whichever is longer. This time period may depend on what we are using your information for, in accordance with this privacy policy and applicable legal requirements.

If your personal information is no longer required, we will delete it or make it anonymous by removing all details that identify you.

However, if necessary, we may retain your personal information for our compliance with legal, accounting, or reporting obligations under Income Tax Act, Companies Act, GST Act, or for archiving purposes in the public interest, scientific, or historical research purposes or statistical purposes.

Disclosure of Personal Information to Third Parties

We may disclose personal information to:

Regulatory authorities including Income Tax Department, MCA, GSTN, RBI, and other government agencies as required by law
Third party service providers for the purpose of enabling them to provide their services, including secure cloud storage, payment processors, and analytics platforms
Our employees, contractors, and professional associates bound by confidentiality agreements
Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings
Sub-contractors who assist us in providing professional services, always under strict confidentiality agreements
With your explicit written consent for specific purposes

We never sell or rent your personal information to third parties for marketing purposes.

International Transfers of Personal Information

The personal information we collect is primarily stored and processed in India. However, some information may be stored or processed where we or our partners, affiliates, and third-party service providers maintain facilities.

Please be aware that the locations to which we store, process, or transfer your personal information may not have the same data protection laws as India. If we transfer your personal information to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law including DPDP Act 2023; and (ii) we will protect the transferred personal information in accordance with this privacy policy and ensure adequate safeguards are in place.

Your Rights and Controlling Your Personal Information

You always retain the right to withhold personal information from us, with the understanding that your experience of our website and our ability to provide professional services may be affected. We will not discriminate against you for exercising any of your rights over your personal information.

If you do provide us with personal information you understand that we will collect, hold, use and disclose it in accordance with this privacy policy. You retain the right to request details of any personal information we hold about you.

Subject to applicable laws and professional obligations, you have the right to:

Access, correct, or request deletion of your personal data Restrict or object to processing Withdraw consent (where applicable and not conflicting with legal obligations) Request data portability (subject to technical and legal feasibility)

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time. We will provide you with the ability to unsubscribe from our email database or opt out of communications.

If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.

If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint.

Use of Cookies

We use "cookies" to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on preferences you have specified.

Our website uses:

Essential cookies: For core functionality and security
Analytics cookies: (e.g., Google Analytics, Hotjar) to understand usage and improve features
Marketing cookies: (e.g., Meta Pixel) only for remarketing, used with your explicit consent

You can manage your cookie preferences through our website's cookie consent tool at any time.

Limits of Our Policy

Our website may link to external sites that are not operated by us, including government portals, regulatory websites, and partner sites. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Professional Disclaimer: Information on this website is for general guidance only and does not constitute professional advice. Any engagement should be formalized via written agreement before acting on advice. Legal and tax regulations evolve - always seek current, case-specific guidance.

Changes to This Policy

At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.

If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your personal information.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

CS Ankit Nagpal
Founder & Managing Partner
Email: contact@nagpalandcompany.com
Phone: +91 8572857180, +91 9896586768
Address: SCF 52, 2nd Floor, Phase 11, Sector 65, Mohali, S.A.S Nagar, Punjab 160062, India

Compliance References

Digital Personal Data Protection Act, 2023 (DPDP Act) Information Technology Act, 2000 & Rules 2011 ICAI Code of Ethics (Confidentiality Principle) ICSI Professional Responsibility Guidelines Companies Act, 2013 | Income Tax Act | GST Act

Version 1.0 | www.nagpalandcompany.com