What information we collect
To provide services such as ITR filing, tax planning, payroll management, GST registration & returns,
bookkeeping and compliance, we collect information relevant to the service you request. This includes:
- Identity & contact: name, business name, PAN, Aadhaar (where required), address,
email, phone.
- Financial & tax documents: bank statements, Form 16/Form 26AS, invoices, ledgers,
trial balances, payroll records.
- Company & statutory records: GSTIN documents, incorporation papers,
director/partner IDs, bank account proofs.
- Communications & uploads: emails, messages, file uploads you provide via portal,
WhatsApp or email.
- Optional data: payment details (for billing), third-party references, audit
correspondence.
We collect only the minimum data required for the requested service. If you provide third-party data
(e.g., employee information) you confirm you have the right to share it.
How we use your data
We use information to deliver, maintain and improve our services. Typical uses include:
- Preparing and filing ITRs, GST returns and statutory filings on your behalf.
- Processing payroll, payslips, statutory deductions (PF/ESI/TDS).
- Bookkeeping, reconciliation, financial statements and management reports.
- Communicating deadlines, reminders, queries and compliance alerts.
- Responding to regulatory requests and defending legal rights where required.
- Analytics and quality improvements to our systems (aggregated and anonymized).
Where required, we will present and explain alternatives (e.g. anonymized reporting) and obtain your
consent for any special processing beyond normal service delivery.
Security & confidentiality
Protecting client data is a core responsibility. Our practices include:
- Encryption: files in transit and at rest are encrypted (TLS for transmission;
encrypted storage).
- Access controls: role-based access, MFA for admin accounts, strict internal
permissions.
- Operational safeguards: periodic backups, secure hosting, patched systems and
regular security reviews.
- Confidentiality agreements: NDAs with employees and trusted vendors handling client
data.
Despite strong controls, no system is 100% immune. We maintain incident response processes and will
notify affected parties in line with applicable laws.
When we share data
We never sell your data. Data may be disclosed only in certain limited circumstances:
- To government authorities (e.g., GSTN, Income Tax Department) when required for filings or legal
compliance.
- To trusted service providers (cloud hosts, software vendors, secure portals) that process data under
contract and confidentiality terms.
- To professional advisors, auditors or attorneys when necessary for legitimate service delivery.
- To comply with legal process, court orders, or regulatory requests.
Before any third-party transfer, we evaluate security practices and use written contracts to protect
your rights.
Data retention & deletion
We retain personal and financial records for as long as required to provide services and meet legal
obligations (tax & statutory retention periods). Typical retention periods vary by record type and
jurisdiction.
- Financial & statutory records: retained as required by Indian law (e.g., minimum 6 years where
applicable).
- Backups & logs: retained for operational needs and then securely purged.
- Deletion requests: upon verified request we will delete or anonymize personal data unless retention
is required by law.
Your rights
Depending on applicable law and your location, you may have rights such as:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion or restriction of processing (subject to legal obligations).
- Object to certain processing and withdraw consent where processing is consent-based.
To exercise a right, contact us (see Contact). We will respond promptly and in
line with applicable law.
Cookies & website analytics
Our website uses cookies and analytics tools to improve site performance and user experience. Cookies
help remember preferences, analyze traffic and enable secure login where applicable. You can control
cookie preferences through your browser.
We may use third-party analytics (e.g., Google Analytics) with privacy-preserving settings and data
retention controls.
Practical examples
Example 1 — ITR filing: You upload Form 16 & bank statements. We use these documents
to compute taxable income, prepare ITR forms, and file returns. The uploaded files are stored until
statutory retention or deletion request.
Example 2 — Payroll: Employer provides employee salary & attendance. We compute
payroll, prepare payslips, and retain payroll records for compliance and audit purposes.
Frequently asked questions
How do I request deletion of my data?
Send a request to info@ofctaxations.com with your
identity details and the records to delete. We will verify and respond within 30 days or as required
by local law.
Is my data transferred internationally?
We use select cloud providers who may store/backup data in multiple regions. Transfers are
protected by contracts and encryption. We will inform you if international transfer requires
specific consent.
How do you secure file uploads (e.g., bank statements)?
Uploads are secured via TLS; stored files are encrypted at rest. For especially sensitive materials
we recommend password-protected archives and secure channels. We can provide secure upload
instructions on request.
Will you share my details with other clients?
No. Client information is segregated and never shared between clients except in anonymized
aggregate form (for internal analytics).
Who can I contact for privacy concerns?
Contact our Data Protection Officer at info@ofctaxations.com or call +91 8983383247. Our office is located in Pune, Maharashtra, India.
Contact & updates
Questions or requests about this policy or your personal data? Please reach out:
OFC Taxation Solutions LLP
Pune, Maharashtra, India
Phone: +91 8983383247
Email: info@ofctaxations.com
We may update this policy to reflect legal or operational changes. We will post the revised policy on
this page with the updated effective date.