Legal

Privacy policy

Version 2.0 · Effective 18 October 2026 · Applies to advizin.in and our services

This notice explains what personal data Advizin Private Limited ("Advizin", "we") collects, why, who we share it with, how long we keep it and how you can exercise your rights. It is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (India), the EU and UK General Data Protection Regulation (GDPR) for visitors and clients in Europe, and applicable US state privacy laws. You can read it on its own; you do not need any other document to understand it.

1. Who we are

Advizin Private Limited (CIN U70200TS2023PTC175907), First Floor, H. No. 8-2-681/A/1/C, Road No. 12, Banjara Hills, Hyderabad 500034, Telangana, India. For the personal data described here we are the Data Fiduciary under Indian law and the controller under the GDPR.

Contact for privacy questions and grievances: Akash, Director · info@advizin.in · +91 98859 04075.

2. Personal data we collect and why

a) When you contact us (contact form, email, phone or WhatsApp): your name, email address, phone or WhatsApp number and the details you choose to share about your query. Purpose: to reply to you, understand what you need and send a proposal. Basis: your consent, and steps you ask us to take before an engagement.

b) Deadline reminders: your name, email address, WhatsApp number and the deadlines you select. Purpose: to send you reminders before GST, income-tax, TDS, ROC and payroll due dates. Basis: your consent, which you can withdraw at any time.

c) When you become a client: identity and KYC details (name, PAN, Aadhaar, address, date of birth, photographs, DIN and DSC where needed), contact details, bank statements, invoices, books of accounts, payroll and employee data you share with us, tax and regulatory records, and portal credentials only where you choose to share them for a specific filing. Purpose: to deliver the services in your engagement letter, such as accounting, tax and GST filings, company and ROC compliance, payroll, registrations and advisory work, and to bill you. Basis: the contract with you, information you have voluntarily provided for that purpose, and our legal obligations under tax, company and anti-money-laundering laws.

d) When you visit the website: technical data such as IP address, browser and device type, pages visited and the time of the visit, collected by our hosting provider for security and to keep the site running. Basis: our legitimate interest in a secure, working website.

e) Free tools: the calculators, checklists and quizzes on our Free tools page run entirely in your browser. What you type there is not sent to us or stored, unless you tap a button to send your result to us on WhatsApp, in which case you choose what is shared. Excel forms you download are created on your own device.

We do not sell personal data, use it for targeted advertising, or make decisions about you by automated means alone.

3. Who we share it with

  • Government authorities and portals, such as the income-tax, GST, MCA, TRACES, EPFO and ESIC portals, when we file or respond on your behalf.
  • Service providers that help us operate: website hosting and form storage, email, cloud storage, accounting software and messaging (for example WhatsApp, operated by Meta). They may process data only on our instructions.
  • Other professionals, such as auditors, valuers, lawyers or company secretaries, only where your engagement needs them and with your agreement.
  • Courts, regulators or law enforcement where the law requires it.

4. Transfers outside India

Some of our service providers store data on servers outside India. We transfer data only where the law allows it and not to any country the Government of India restricts. For data of people in the EU or UK, we rely on adequacy decisions or standard contractual clauses.

5. How long we keep it

  • Enquiries that do not become engagements: up to 12 months after our last contact.
  • Reminder list: until you unsubscribe or withdraw consent.
  • Client records: for the engagement and afterwards for as long as tax, company and other laws require (usually 8 years).
  • Website and processing logs: at least one year, as the DPDP Rules require, and then deleted unless the law needs them kept longer.

When data is no longer needed, we delete it or make it anonymous.

6. Your rights

Under Indian law (DPDP Act) you can:

  • get a summary of your personal data we process and who we have shared it with;
  • ask us to correct, complete, update or erase your data;
  • withdraw consent at any time, as easily as you gave it (reply "STOP" to a reminder, or email us). Withdrawal does not affect processing already done, or processing the law requires;
  • nominate someone to exercise your rights if you die or cannot act; and
  • raise a grievance with us. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

If you are in the EU or UK (GDPR) you also have the right to restrict processing, to object to processing based on legitimate interests, to data portability, and to complain to your local data protection authority.

If you are in the US, residents of states with consumer privacy laws (such as California, Virginia or Colorado) can ask to know, access, correct or delete their personal information. We do not sell or "share" personal information for cross-context behavioural advertising, and we honour Global Privacy Control signals.

How to ask: email info@advizin.in with your request. We may need to confirm your identity. We aim to reply within 30 days, and always within 90 days as the DPDP Rules require.

7. Children

Our services are meant for adults and businesses. We do not knowingly collect data from anyone under 18 except where a parent or lawful guardian gives it to us for a tax or compliance matter, in which case we act on the parent's or guardian's verifiable consent.

8. Security and breaches

We use reasonable safeguards, including encrypted connections, access limited to the team members working on your file, and secure handling of digital signature tokens and portal credentials. If a personal data breach affects you, we will tell you without delay and report it to the Data Protection Board of India (and, where the GDPR applies, the relevant authority) within the time the law sets, usually 72 hours.

9. Cookies and third-party content

The website uses only the cookies needed to run it and to remember your cookie choice. We do not use advertising or analytics trackers. Some pages load content from third parties: Google Fonts (typefaces), Google Maps (the map on our Contact page), a spreadsheet library from jsDelivr or cdnjs (only when you download an Excel form) and WhatsApp links. These providers may receive your IP address when that content loads; their own privacy policies apply.

10. Language and changes

You may ask for this notice in any language listed in the Eighth Schedule to the Constitution of India. We may update it from time to time; the version number and date at the top show when it last changed, and we will tell clients about significant changes.