Skip to main content
M&ACompliance | Advisory | GrowthMahelwale and Associates - Compliance | Advisory | Growth

Privacy Policy

Last updated on 9 August 2026

Mahelwale and Associates ("we", "us", "the firm") operates the website mahelwaleandassociates.com. We take the confidentiality of client information seriously, because most of what you share with us is financial and personal. This policy explains what we collect, why we collect it, how long we keep it and what you can ask us to do with it.

This policy is written in line with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information we collect

Information you give us directly

  • Enquiry details submitted through the contact form on this website: your name, email address, phone number, the service you are interested in and the message you write.
  • Engagement information shared after you become a client: business details, PAN and GSTIN, financial statements, invoices, bank statements, payroll data and any documents required to complete the work you have engaged us for.

Information collected automatically

  • Standard server logs recorded when you visit the website, including IP address, browser type, pages viewed and the time of the request. These are used for security, abuse prevention and diagnosing faults.
  • A record of your cookie choice, stored in your browser. See our Cookie Policy for the full list.

2. Why we use your information

  • To respond to your enquiry and give you a scope and a quote.
  • To carry out the professional services you engage us for, including filings with government portals such as the GST portal, the Income Tax portal and the MCA portal.
  • To raise invoices and maintain our own statutory books of account.
  • To meet legal and regulatory obligations, including record keeping and responding to lawful requests from authorities.
  • To keep the website secure and to prevent spam and fraudulent submissions.

We do not use your data for automated profiling, and we do not sell or rent personal data to anyone.

3. The basis on which we process data

Website enquiries are processed on the basis of the consent you give when you tick the consent box on the form. Client work is processed to perform the engagement you have asked us to carry out. Some processing is required by law, for example retaining records of filings we have made on your behalf.

4. Who we share information with

  • Government departments and portals, where a filing, registration or reply is being submitted on your behalf and with your instruction.
  • Service providers who support our operations, such as our email host and our website hosting provider. They may process data only on our instructions.
  • Professional advisors such as auditors or legal counsel, where required and under an obligation of confidentiality.
  • Authorities, where disclosure is required by law, a court order or a valid regulatory demand.

5. How long we keep it

Enquiries that do not turn into an engagement are kept for up to 24 months and then deleted. Client records are kept for at least eight years from the end of the relevant financial year, as required under Indian tax and company law, and longer where a matter is still open or under assessment.

6. How we protect it

  • The website is served over HTTPS and form submissions are encrypted in transit.
  • Access to client files is restricted to the team members working on that engagement.
  • Credentials for government portals are stored securely and are never shared outside the firm.
  • Submissions are rate limited and screened to reduce automated abuse.

No system can be guaranteed to be completely secure. If a breach affects your personal data we will act promptly and inform you and the relevant authority as required by law.

7. Your rights

Subject to the exceptions in the applicable law, you may ask us to:

  • confirm what personal data of yours we hold and how it is being used;
  • correct or complete data that is inaccurate or out of date;
  • erase data that is no longer needed for the purpose it was collected for, where we are not required by law to keep it;
  • withdraw a consent you previously gave, at any time;
  • nominate a person to exercise these rights on your behalf if you are unable to.

To make a request, email info@mahelwaleandassociates.com from the address you contacted us with. We respond within a reasonable period and may ask you to confirm your identity first.

8. Grievance redressal

If you are not satisfied with how we have handled your data or your request, write to our Grievance Officer at info@mahelwaleandassociates.com, or by post at Ghaziabad, Uttar Pradesh, India. Please include "Data grievance" in the subject line so it is routed correctly.

9. Children

Our services are meant for businesses and adults. We do not knowingly collect personal data of children. If you believe a child has submitted data to us, contact us and we will delete it.

10. Changes to this policy

We may update this policy when our practices or the law change. The revised version will be published on this page with a new date at the top. Continuing to use the website after a change means you accept the updated policy.

11. Contact

Mahelwale and Associates
Ghaziabad, Uttar Pradesh, India
Email: info@mahelwaleandassociates.com