Legal

Privacy Policy

Last updated: 8 August 2026

1. Introduction

Vriddhi Financial Consultancy ("Vriddhi", "we", "us", "our") is a partnership firm providing GST compliance, income tax and TDS, accounting and bookkeeping, and business advisory and registration services. Vriddhi is not a Chartered Accountancy firm and is not regulated by the Institute of Chartered Accountants of India (ICAI).

Website: vriddhifc.in Email: info@vriddhifc.in Phone / WhatsApp: +91 99284 38080 Offices:

  • F-39, First Floor, Rangoli Plaza, Vaishali Nagar, Jaipur 302034
  • First Floor, 61-H Block, Near H Block Diggi, Sri Ganganagar 335001

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you interact with us through our website, email, phone, in person, or WhatsApp (including the WhatsApp Business Platform / WhatsApp Business API), consistent with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Under the DPDP Act, an individual whose personal data we process is a "Data Principal", and Vriddhi — determining the purpose and means of processing — is the "Data Fiduciary". Where you have consented through a Consent Manager registered under the Act, that consent is honoured and can be withdrawn through the same Consent Manager.

2. Personal Data We Collect

  • Identity data: name, PAN, Aadhaar (where required for KYC/registration filings), date of birth, signature.
  • Contact data: phone number, WhatsApp number, email address, office/home address.
  • Financial data: income details, bank statements, GST data, TDS data, invoices, ledgers, financial statements — as necessary for GST Compliance, Income Tax & TDS, and Accounting & Bookkeeping services.
  • Business data: registration details, licences, and statutory identifiers (GSTIN, TAN, CIN/LLPIN) relevant to Business Advisory & Registrations services.
  • Communication data: content of emails, calls, and WhatsApp messages, including shared documents/media.
  • Technical data: IP address, browser type, device information, cookies collected via our website (if applicable).

We do not knowingly collect personal data of children (under 18) except where necessary as part of a family's compliance engagement and with verifiable parental/guardian consent as required under the DPDP Act.

3. WhatsApp Business Platform Data Processing

We use the WhatsApp Business API / WhatsApp Business Platform, provided by Meta Platforms, Inc. and its affiliates ("Meta"), on our published number +91 99284 38080, to communicate with clients and prospective clients.

What we collect via WhatsApp:

  • Your WhatsApp phone number and profile name.
  • The content of messages you send us (text, and any documents, images, or media you share — e.g., invoices, PAN/Aadhaar copies, GST/financial documents).
  • Delivery and read-receipt metadata generated by the platform.

Why: to respond to service enquiries (typically within 4 working hours, our stated response time), share reminders and document requests, exchange documents for GST/tax/accounting work, and provide updates on registrations and filings.

Meta's role: Meta processes messages, media, and associated metadata as part of operating the WhatsApp Business Platform infrastructure that delivers our messages to you and yours to us. Meta acts as a data processor/technology-service-provider for this transmission and is separately bound by its own Business Messaging Policy and Privacy Policy (https://www.whatsapp.com/legal/business-data-processing-terms, https://www.whatsapp.com/legal/privacy-policy). We do not control Meta's infrastructure-level processing.

Retention: message content and shared documents exchanged over WhatsApp are retained per our general retention schedule (Section 6) and, for statutory records, for the periods specified under the Income Tax Act, 1961 and other applicable law.

Opting out / stopping messages: you may stop receiving messages from us on WhatsApp at any time by:

  • Replying STOP to any message thread with us, or
  • Blocking our WhatsApp Business number (+91 99284 38080) directly within WhatsApp, or
  • Emailing info@vriddhifc.in requesting that we cease WhatsApp communication.

Opting out of WhatsApp does not affect our ability to serve communications through other legally valid channels (email, post, phone) where required for an ongoing engagement.

4. Lawful Basis for Processing

We process personal data on the following grounds recognised under the DPDP Act and applicable law:

  • Consent, obtained through clear, itemised notice, for optional or marketing-adjacent communication.
  • Legitimate/specified use for which you voluntarily provide data, e.g., sharing documents to obtain a GST filing or registration.
  • Performance of a contract/engagement: to deliver GST Compliance, Income Tax & TDS, Accounting & Bookkeeping, or Business Advisory & Registration services you have engaged us for.
  • Compliance with legal obligation: e.g., retaining records under the Income Tax Act, GST law, and Companies Act (where the engagement concerns a company client).

5. Third-Party Processors and Disclosures

We share personal data only as necessary, with:

  • Meta Platforms, Inc. — as the WhatsApp Business Platform provider (see Section 3).
  • Hosting/IT service providers — for website hosting, email, and cloud storage, under confidentiality obligations.
  • ERPNext (self-hosted instance) — used internally to manage client records, invoicing, and engagement data, hosted on infrastructure we control and secure.
  • Statutory/regulatory authorities — Income Tax Department, GST authorities, ROC/MCA, or courts/tribunals, where legally required or authorised by you.
  • Sub-consultants/associate professionals — for specific matters (e.g., a Chartered Accountant engaged for an audit-adjacent requirement), under confidentiality safeguards.

We do not sell personal data to third parties and do not share client financial data for marketing purposes.

6. Cross-Border Data Transfer

WhatsApp/Meta infrastructure operates globally, and messages and associated metadata processed via the WhatsApp Business Platform may be transmitted to, or stored on, Meta servers located outside India, including in jurisdictions such as the United States, subject to Meta's own data-transfer safeguards. Except as required for this platform's functioning and any disclosed cloud-hosting arrangement, we do not otherwise routinely transfer client personal data outside India. Any cross-border transfer is limited to what is necessary for service delivery, consistent with Section 16 of the DPDP Act.

7. Data Retention

Our operative retention period is 8 years from the end of the engagement. We apply this single period to all client records rather than varying it by record type, because 8 years satisfies the longest applicable statutory minimum and a uniform policy is one we can reliably honour.

The statutory minimums this period is set to cover are:

  • The Income Tax Act, 1961 — generally up to 6 years from the end of the relevant assessment year.
  • The Companies Act, 2013 — books of account for at least 8 years for company clients (and LLP Act requirements where applicable), the longest of the applicable minimums and therefore the basis for our period.
  • GST law — generally 72 months from the due date of the annual return.

Records are retained beyond 8 years only where an assessment, reassessment, appeal, litigation or other proceeding remains pending, in which case they are retained until that matter concludes and any further statutory period expires.

  • Communication records (including WhatsApp logs retained for service continuity) are kept only as long as necessary for the engagement and applicable statutory retention, after which they are securely deleted or anonymised.
  • Data not subject to statutory retention and no longer required is deleted or irreversibly anonymised.

8. Security Measures

We apply reasonable security safeguards, including: access restricted to authorised personnel on a need-to-know basis, password-protected and encrypted storage of client financial documents, a secure (self-hosted, access-controlled) ERPNext deployment, regular backups, and confidentiality undertakings for our staff and associates. No system is completely secure; we will notify affected Data Principals and the Data Protection Board of India of any personal data breach as required under the DPDP Act.

9. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

  1. Access — obtain a summary of personal data we process about you and the processing activities undertaken.
  2. Correction and updating — request correction of inaccurate or incomplete personal data.
  3. Erasure — request erasure of personal data no longer necessary for the purpose it was collected, subject to our statutory retention obligations (see Section 7 and our Data Deletion Instructions).
  4. Grievance redressal — raise a grievance with our Grievance Officer and expect a response within a reasonable time.
  5. Nominate — nominate another individual to exercise your rights in the event of death or incapacity.
  6. Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email info@vriddhifc.in with the subject line "DPDP Request" and a description of the request.

10. Grievance Officer

Designation: Grievance Officer, Vriddhi Financial Consultancy Email: info@vriddhifc.in Phone: +91 99284 38080 Office (Jaipur): F-39, First Floor, Rangoli Plaza, Vaishali Nagar, Jaipur 302034 Office (Sri Ganganagar): First Floor, 61-H Block, Near H Block Diggi, Sri Ganganagar 335001

If you are not satisfied with our response, you may approach the Data Protection Board of India as constituted under the DPDP Act, 2023.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The "Last updated" date at the top reflects the latest revision. Material changes will be notified through our website, WhatsApp, or email.

12. Contact Us

Vriddhi Financial Consultancy Email: info@vriddhifc.in Phone/WhatsApp: +91 99284 38080 Website: vriddhifc.in