Privacy Policy

Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act)

Last updated: July 2026

1. Introduction

CMA Renu Singhania (“we”, “us”, “our”, or “Compliance Growth Hub”) is committed to protecting the personal data of every individual (“you”, “user”, or “Data Principal”) who interacts with this website or engages our professional services. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable Indian laws.

2. Data Fiduciary

For the purposes of the DPDP Act, CMA Renu Singhania (proprietor, Compliance Growth Hub) is the Data Fiduciary responsible for determining the purpose and means of processing your personal data.

3. Personal Data We Collect

  • Identity data: name, PAN, Aadhaar reference (only when explicitly shared for filing)
  • Contact data: email address, phone number, WhatsApp number
  • Financial data: Form 16, salary slips, bank statements, investment proofs, business income statements — shared only when you engage filing or consultation services
  • Communication data: messages exchanged with us via email, WhatsApp, or community channels
  • Technical data: limited browser, device, and analytics information from this website

4. Purpose of Processing

Your personal data is processed strictly for the following lawful purposes:

  • Providing ITR filing, consultation, advisory, and workshop services
  • Communicating updates, deadlines, and responses to your queries
  • Issuing invoices and maintaining statutory records
  • Complying with applicable laws, including the Income Tax Act, 1961
  • Improving the quality and security of our services

5. Consent

We process your personal data based on the free, specific, informed, unconditional, and unambiguous consent you provide when you contact us, submit a form, or engage our services. You may withdraw your consent at any time, subject to legal and contractual retention requirements.

6. Data Sharing

We do not sell, rent, or trade your personal data. Limited data may be shared only with: (a) the Income Tax Department or other statutory authorities as required by law, (b) secure technology providers strictly assisting in service delivery (e.g., hosting, communication tools), bound by appropriate confidentiality obligations.

7. Data Retention

Personal and financial data is retained only for as long as necessary to fulfil the purpose for which it was collected or as required under the Income Tax Act, 1961 and other applicable laws. Once the purpose is complete and the statutory retention period lapses, data is securely deleted or anonymised.

8. Data Security

We implement reasonable technical and organisational safeguards — including secure storage, restricted access, encrypted communication where applicable, and confidentiality protocols — to protect your personal data from unauthorised access, alteration, disclosure, or loss.

9. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the right to:

  • Access a summary of your personal data being processed
  • Request correction, completion, updating, or erasure of your personal data
  • Withdraw consent previously given
  • Nominate another individual to exercise your rights in the event of death or incapacity
  • Lodge a grievance with us, and if unresolved, with the Data Protection Board of India

10. Cookies & Analytics

This website may use minimal cookies and standard web analytics solely to improve performance and user experience. No personal identification is performed through cookies without your consent.

11. Children

Our services are not directed to individuals below 18 years of age. We do not knowingly collect personal data of children without verifiable parental consent.

12. Grievance Officer

For any privacy-related grievance, request, or query under the DPDP Act, please reach out to us via the WhatsApp community or contact options available on the home page. We will acknowledge and respond within the timelines prescribed under the DPDP Act.

13. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in law or our practices. The latest version will always be available on this page.