Privacy Policy
Privacy Policy
Last
Updated: 6 May
2026
1.
Introduction
This
Privacy Policy describes how FilingsBaba Kconsulting Private Limited
("FilingsBaba", "we", "us",
"our") collects, uses, stores, shares, and protects your
information when you visit www.filingsbaba.com (the "Website")
or avail our Services.
We
comply with the Information Technology Act, 2000, the Information Technology
(Reasonable Security Practices and Procedures and Sensitive Personal Data or
Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.
By
using the Website or our Services, you consent to this Policy. This Policy
works together with our Terms and Conditions, Client Data Confidentiality
Statement, "We Won't Sell Your Data" Statement, Refund Policy, and
Legal Disclaimer.
2.
Information We Collect
Information
you provide directly:
- Identification:
name, date of birth, PAN, Aadhaar, passport, photographs, signatures
- Contact:
address, email, phone, WhatsApp number
- Financial:
bank details, income, tax records, GST returns
- Business:
company details, MOA/AOA, shareholding, IP details
- Engagement-specific
documents and communications
Information
collected automatically:
- Device
and browser information, IP address
- Pages
visited, time spent, click patterns
- Approximate
location (city/region level only)
Information
from third parties:
- Government
portals (MCA, GSTN, IP India) when verifying records
- Authorised
representatives acting on your behalf
- Payment
gateways for transaction verification
We
collect Sensitive Personal Data (financial, KYC, biometric data for digital
signatures) only with your explicit consent and only where necessary for the
Services.
3.
How We Use Your Information
We
use your information to:
(a)
Provide the Services you have engaged us for, including drafting and submitting
documents and liaising with authorities;
(b)
Verify identity and conduct KYC checks;
(c)
Process payments, issue invoices, and handle refunds;
(d)
Communicate with you regarding engagements, queries, deadlines, and reminders;
(e)
Send marketing communications, where you have consented;
(f)
Comply with statutory record-retention, anti-money laundering, and reporting
obligations;
(g)
Respond to legal requests, court orders, and regulatory directions;
(h)
Improve the Website through analytics and detect security threats and fraud.
Legal
bases for processing:
your consent, performance of contract, legal obligations, legitimate interests
(such as security and fraud prevention), and protection of vital or public
interests.
4.
How We Share Your Information
We
share your information only as follows:
(a)
Government authorities — MCA, GSTN, Income Tax, IP India, RBI, SEBI,
IRDAI, DPIIT, FSSAI, RERA, and other regulators, as required for your
engagement;
(b)
Empanelled professionals — chartered accountants, company secretaries,
advocates, and valuers, all bound by confidentiality;
(c)
Service providers — cloud hosting, email, document management, payment
gateways, and analytics tools, under data processing agreements;
(d)
As required by law — court orders, regulatory notices, anti-money
laundering reports;
(e)
With your explicit consent — to any other third party you nominate;
(f)
In a business transfer — in case of merger, acquisition, or
restructuring, with successor bound by equivalent privacy obligations.
We
do not sell, rent, or trade your personal data to anyone. See our separate "We Won't
Sell Your Data" Statement.
5.
International Transfers
Your
data is generally stored in India. Limited transfers outside India may occur
where IT service providers operate abroad or your engagement involves foreign
jurisdictions. Such transfers comply with the IT Act, SPDI Rules, and DPDP Act,
with equivalent confidentiality safeguards.
6.
Data Retention
We
retain data only as long as necessary for the Services and statutory
compliance:
- Tax
filings: minimum 8 years (Income-tax Act)
- GST
records: minimum 6 years (CGST Act)
- Companies
Act records: 8 years from end of financial year
- KYC
documents: minimum 5 years (PMLA)
- Engagement
correspondence: 5 years
- Marketing
data: until consent withdrawal
After
expiry, data is securely deleted, anonymised, or destroyed.
7.
Your Rights
Under
applicable Indian law, you have the right to:
(a)
Access the personal data we hold about you;
(b)
Correct inaccurate or incomplete data;
(c)
Erase your data, subject to statutory retention obligations;
(d)
Withdraw consent at any time;
(e)
Port your data in a structured format, where feasible;
(f)
Object to direct marketing;
(g)
Nominate another individual to exercise your rights in case of death or
incapacity (under DPDP Act);
(h)
Lodge a grievance with our Grievance Officer or competent authorities.
To
exercise any right, write to contact@filingsbaba.com with proof of
identity. We respond to verified requests within 30 days.
8.
Data Security
We
implement reasonable security practices in line with the SPDI Rules:
- SSL/TLS
encryption for data transmission
- Secure
servers with firewalls, access controls, and password protection
- Confidentiality
agreements with employees and contractors
- Regular
security training and audits
- Secure
disposal of physical and digital records
While
we use industry-standard safeguards, no system can guarantee absolute security.
Notify us immediately of any suspected unauthorised access at contact@filingsbaba.com.
9.
Cookies and Tracking
The
Website uses cookies for essential functionality, analytics (via
privacy-respecting tools like Google Analytics), and remembering preferences.
We do not use third-party advertising or retargeting cookies.
You
can manage cookies through the consent banner on first visit or your browser
settings. Disabling cookies may affect Website functionality.
10.
Marketing Communications
Transactional
communications (engagement updates, deadlines, payment confirmations) are sent
regardless of preferences. Marketing communications are sent only with your
consent.
You
may opt out of marketing at any time by clicking "unsubscribe" in any
email, replying "STOP" to SMS/WhatsApp, or writing to contact@filingsbaba.com.
Opt-outs are processed within 3 working days.
11.
Children's Privacy
The
Website and Services are intended for users 18 years or older. We do not
knowingly collect data from minors. Parents or guardians who believe a child's
data has been collected may contact us for prompt deletion.
12.
Data Breach Notification
In
the event of a personal data breach likely to result in significant harm, we
shall notify affected users within 72 hours, report to CERT-In and the Data
Protection Board as required, and take corrective measures.
13.
Grievance Officer
For
privacy concerns, contact our Grievance Officer:
Grievance
Officer
FilingsBaba Kconsulting Private Limited U-110, Shakarpur, East Delhi, Delhi –
110092, India Email: contact@filingsbaba.com Phone: +91-9958592769
Grievances
are acknowledged within 24 hours and resolved within 15 days.
14.
Changes to This Policy
We
may update this Policy to reflect legal or operational changes. The "Last
Updated" date indicates the latest revision. Material changes will be
notified by email or a prominent Website notice. Continued use after changes
constitutes acceptance.
15.
Governing Law
This
Policy is governed by the laws of India. Courts at Delhi shall have exclusive
jurisdiction, subject to the dispute resolution clause in our Terms and
Conditions.
16.
Contact Us
For
any questions about this Privacy Policy or your data rights:
FilingsBaba
Kconsulting Private Limited
Registered Office: U-110, Shakarpur, East Delhi, Delhi – 110092, India Email:
contact@filingsbaba.com Phone: +91-9958592769 | +91-7428099981 Website:
www.filingsbaba.com
©
2026 FilingsBaba Kconsulting Private Limited. All rights reserved.