Privacy Policy
Draft
To be reviewed by the client or his adviser before launch.
1. Who we are
This website, khatainsight.com, is operated by KhataInsight Finance & Advisory Private Limited ("KhataInsight", "we", "us" or "our").
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), KhataInsight is the Data Fiduciary for personal data collected through this website. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have.
2. Scope
This policy applies to personal data collected through this website, including the contact form, and when you contact us by WhatsApp or phone after visiting the site. It does not cover data we process when we provide services under a separate engagement. That is covered by the engagement terms agreed with each client.
3. Personal data we collect
Information you give us through the contact form:
- Name
- Company
- Email address
- Mobile number
- City (optional)
- Industry (optional)
- Current accounting software (optional)
- Service required
- Message (optional), and anything you choose to include in it
Information you give us when you contact us directly: your name, phone number and the content of your messages when you contact us by WhatsApp or phone.
Information collected automatically: when you visit the website, our website hosting provider may collect technical information such as your IP address, browser type, device type, approximate location (city or region), pages visited, the website that referred you, and the date and time of your visit. See section 7 on cookies.
Please do not share sensitive financial information, account numbers, passwords or documents through the contact form. If we need such information to provide a service, we will ask for it separately under an engagement.
4. Why we use your personal data
We use personal data only for the following purposes:
- to respond to your enquiry and arrange the Finance Health Check or consultation you requested;
- to communicate with you about your enquiry, using the contact details you give us;
- to keep a record of enquiries and our correspondence;
- to understand how the website is used, and to improve its content and performance;
- to keep the website secure and prevent spam or misuse; and
- to comply with applicable law, or respond to lawful requests from authorities.
We do not sell your personal data. We do not use it for unrelated marketing without your consent.
5. Basis for processing
We process personal data you voluntarily provide (for example, by submitting the contact form or messaging us) for the purpose for which you provided it, as permitted under the DPDP Act. Where the law requires your consent for a particular use, we will ask for it, and you may withdraw it at any time by contacting us (section 11). Withdrawal does not affect processing carried out before you withdrew.
6. Who we share it with
We share personal data only where necessary, with:
- Service providers who process data on our behalf, such as our website hosting and email service providers, under contract and only on our instructions.
- Professional advisers such as lawyers or auditors, where needed.
- Authorities, where required by law or a lawful order.
When you use the contact form, your details are passed to WhatsApp (a Meta service) to send your message to us, and WhatsApp’s own privacy policy applies to that message. If you contact us on WhatsApp, your messages are also processed by WhatsApp (Meta) under its own terms and privacy policy.
Some of our service providers may store or process data on servers outside India. Any such transfer will be made in accordance with the DPDP Act and any restrictions notified by the Government of India.
7. Cookies
Cookies are small text files stored on your device. We use essential cookies, needed for the website to function and stay secure. If we introduce analytics or other non-essential cookies, we will set them only with your consent through a cookie notice, and we will update this policy first.
You can also block or delete cookies through your browser settings. Some parts of the site may not work properly if essential cookies are blocked.
8. How long we keep it
We keep enquiry information only as long as needed to respond to you and for our legitimate records. After that, unless you become a client or the law requires us to keep it longer, we delete or anonymise it.
9. How we protect it
We use reasonable security safeguards to protect personal data against unauthorised access, loss, misuse or alteration. These include encrypted (HTTPS) connections, access limited to people who need it, and service providers with appropriate security practices. No method of transmission over the internet is completely secure, but we work to protect your data and will act promptly if a breach occurs, including notifying affected individuals and authorities where the law requires.
10. Your rights
Subject to the DPDP Act and the rules made under it, you have the right to:
- obtain a summary of the personal data we hold about you and how we process it;
- ask us to correct, complete or update inaccurate or incomplete personal data;
- ask us to erase personal data that is no longer needed, unless we must keep it by law;
- withdraw consent where processing is based on consent;
- have a grievance about our handling of your personal data addressed; and
- nominate another person to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, contact us as set out in section 11. We may need to verify your identity before acting on a request. When using these rights, please provide accurate information and do not file false or frivolous complaints.
11. Contact and grievances
For questions, requests or complaints about this policy or your personal data, contact us using the contact form or the phone number on this website:
Contact form: khatainsight.com/contact
Phone and WhatsApp: +91 7610985978
We will acknowledge your request and respond within a reasonable time. If you are not satisfied with our response, you may approach the Data Protection Board of India, in accordance with the DPDP Act.
12. Children
This website is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, please contact us and we will delete it.
13. Links to other websites
This website may link to other websites, such as WhatsApp. We are not responsible for the privacy practices of those websites. Please read their policies.
14. Changes to this policy
We may update this policy from time to time, for example to reflect changes in the law or in how we use personal data. The latest version will always be on this page, with the date it was last updated.