Privacy notice
This notice explains how Ameesh Gupta & Co., Chartered Accountants ("we"), 83/9-B, Building Material Market, Juhi, Kanpur, Uttar Pradesh 208014, handles personal data that you give us through this website. For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it, we are the Data Fiduciary for this data.
1. What we collect, and why
| Personal data | When it is collected | Purpose |
|---|---|---|
| Name, email address, phone number (optional) | When you send a query through the contact form | To reply to your query and, if you ask, to arrange a call or meeting |
| Topic of your query, organisation type, dates of any notice, and your message | When you send a query through the contact form | To understand your query and how urgent it is |
| Resume and the details in your application email | When you apply for a position by email | To assess your application |
We collect only what is needed for these purposes. We do not use your data for advertising, we do not sell it, and we do not send you newsletters or marketing messages.
No sensitive personal data. This website does not ask for sensitive personal data or information, such as passwords, bank account or card details, or health or medical information. The contact form refuses messages containing bank or card numbers, PAN or Aadhaar numbers, and removes anything that looks like a password or OTP.
What we do not collect. The calculators run entirely in your browser; the figures you enter are not sent to us or stored. The site sets no advertising or analytics cookies. It keeps a few notes in your browser's session storage (that you have seen the disclaimer, whether you chose to show the map, and how many queries you have sent in this visit), which are deleted when you close the browser. If a page script fails, your browser sends us a short technical error report (page address, file and line), which contains no personal data.
2. Basis for processing
When you send us a query or an application, you give us that data voluntarily for the purpose of a reply. Before the contact form sends your query, it asks for your consent to use your details only to reply; we process the data on the basis of that consent, as the DPDP Act permits. You may withdraw it at any time by writing to us. If you engage us, data you share during the engagement is covered by our engagement letter and by our duty of confidentiality as Chartered Accountants.
3. Who else handles your data
We use a small number of service providers (Data Processors) who handle data only on our instructions:
- Resend (operated by Plus Five Five, Inc., USA) delivers contact-form messages from our website to our email inbox. Your message is not stored on our website, but Resend keeps a copy of each email it delivers (your name, contact details and message) on its servers in the United States, under its own privacy policy (published on its website). Access to our Resend account is protected by two-factor login.
- Google (Gmail) hosts our email, where your query is received and kept.
- Google Drive. If you engage us, we share documents with you through a Google Drive folder that we create for you alone and share only with the people you name. Please use that folder, not email or this website, for documents such as financial statements, notices or identity proofs.
- Our website host (Netlify) serves the pages, runs the small program that checks and forwards contact-form messages, and keeps standard technical logs for security. Our own logs record only a reference number, the outcome and a coded form of your IP address that changes every day; they do not record your name, contact details or message. To stop misuse, the number of queries sent from one connection is limited, using the same coded form.
- Google Maps shows our office location on the home and contact pages, but only if you choose "Show the map". Until then, no connection is made to Google. When the map loads, your browser connects to Google, which receives technical data such as your IP address under its own privacy policy.
Some of these providers may process data outside India. We will not transfer personal data to any country that the Government of India restricts under the DPDP Act. We disclose personal data to authorities only where the law requires it.
4. How long we keep it
- Queries that do not lead to an engagement: deleted from our inbox within 12 months of our last communication with you. The copy delivered through Resend is kept by Resend for the period set by its own policy.
- Job applications: kept for up to 12 months so we can consider you for later openings, unless you ask us to delete them sooner.
- Engagement records: kept for the period required by law and by the professional standards of the Institute of Chartered Accountants of India.
5. Your rights
Under the DPDP Act, you may:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update or erase your personal data;
- withdraw your consent at any time, as easily as you gave it (this does not affect processing already done);
- nominate another person to exercise your rights if you die or become unable to do so; and
- have your grievance addressed by us.
To use any of these rights, write to us using the contact details below. We will respond within one month of receiving your request.
6. Grievance Officer
Our Grievance Officer for privacy questions, requests and complaints is:
CA Ameesh Gupta, Ameesh Gupta & Co.
Email: ca.ameesh@gmail.com
Phone: +91 98388 58995
Address: 83/9-B, Building Material Market, Juhi, Kanpur, Uttar Pradesh 208014
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
7. Security and confidentiality
We protect personal data with reasonable security practices and procedures, documented in our website security policy, including access controls with two-factor login on our email and systems, encrypted connections and encrypted backups. Client information is also kept confidential as the Code of Ethics of the Institute of Chartered Accountants of India requires. Please do not send confidential documents through the contact form; once we speak, we share documents through a private Google Drive folder for you alone.
If a personal data breach happens. If a breach affects your personal data, we will inform you without delay, with what happened, its likely effect, what we are doing about it and whom to contact, and we will report it to the Data Protection Board of India and to CERT-In as the law requires.
8. Visitors outside India
If you contact us from the European Union, the United Kingdom or another country with its own data protection law (such as the GDPR or the UK GDPR), the following also applies to you:
- Legal basis. We use your details to take steps at your request before a possible engagement (to reply to your query), and on the basis of the consent you give in the form.
- Your rights. You may ask for access to, or a copy of, your personal data; correction; erasure; restriction of its use; and you may object to its use, ask to receive it in a portable form, or withdraw your consent at any time. We will reply within one month.
- Where your data is processed. Your data is processed in India, where we are based, and by Resend in the United States (see section 3).
- Complaints. You may complain to the data protection authority of the country where you live or work, as well as to our Grievance Officer.
9. Children
This website is not meant for children. We do not knowingly collect personal data of anyone under 18. If you are under 18, please ask a parent or guardian to contact us.
10. Changes to this notice
We will update this notice if our practices or the law change. The date below shows when it was last revised.
Last revised: 7 November 2026 (Resend's copy of contact-form messages disclosed; Grievance Officer and one-month replies; no sensitive personal data; Google Drive for documents; personal data breaches; visitors outside India).