Effective Date: 30 May 2026 | Last Updated: 30 May 2026

1. Introduction

Namma Auditor (“we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of personal information entrusted to us by our clients and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in connection with our services and our website at www.nammaauditor.com.

We operate in full compliance with the Information Technology Act, 2000 and its amendments, and align our practices with the Digital Personal Data Protection (DPDP) Act, 2023 of India. By using our website or engaging our services, you acknowledge that you have read and agree to this Privacy Policy.

2. Who This Policy Applies To

This policy applies to all individuals who interact with Namma Auditor in any capacity, including:

• Prospective clients who submit enquiry forms or contact us through our website, phone, email, or WhatsApp
• Clients who engage our services for ITR filing, GST registration/returns, company/LLP/OPC incorporation, or Digital Signature Certificates (DSC)
• NRI clients whose tax and compliance matters are handled by us
• Website visitors who browse www.nammaauditor.com
• Minor clients (under 18 years of age) whose returns are filed through a parent or guardian acting on their behalf

3. What Personal Data We Collect

We collect only the information necessary to deliver our services. This falls into three categories:

A. Contact & Enquiry Data

• Full name
• Mobile number / phone number
• Email address
• Nature of your service requirement

B. Service Delivery Data

• PAN (Permanent Account Number)
• Aadhaar number (for identity verification and government portal requirements)
• Date of birth
• Address details (residential, business, or registered office)
• Bank account details (account number, IFSC, cancelled cheque / passbook copy) — for refund and filing purposes only
• Form 16, Form 26AS, AIS/TIS statements
• Income details — salary slips, capital gains statements, rent receipts, business income details
• Business registration documents (for GST, incorporation, OPC)
• Passport / Visa / FEMA documents (for NRI clients)
• DSC-related identity proofs — photo, PAN, Aadhaar, email, phone
• Any other documents required by the applicable government portal

C. Technical & Usage Data

• IP address and browser type
• Pages visited and time spent on site
• Device type and operating system
• Referral source
• Cookie and interaction data (see Section 9)

4. Why We Collect Your Data

• To assess your requirement and provide an accurate service quote
• To deliver the service engaged — ITR filing, GST registration/returns, company/LLP/OPC incorporation, or DSC procurement
• To file documents on your behalf on applicable government portals
• To communicate via WhatsApp, phone, or email regarding your service and document requirements
• To send service-related reminders (due date alerts, document submission follow-ups) via WhatsApp or SMS
• To comply with legal, regulatory, and statutory obligations under applicable Indian law
• To maintain accurate business and accounting records
• To detect and prevent fraud, errors, or unauthorized access
• To improve our website and measure the effectiveness of our digital marketing

5. How We Use Your Data

• Service processing: Your PAN, Aadhaar, income data, and documents are used exclusively to process and file your tax returns, GST returns, incorporation applications, or DSC requests
• Communication: We coordinate via WhatsApp, email, and calls. We send service reminders but do not send unsolicited promotional messages
• Identity verification: Aadhaar, PAN, and photo are used for KYC verification as required by government portals
• Payment processing: We use Razorpay and UPI. Payment processing is handled by these providers — we do not store your card or bank credentials on our systems
• Analytics and advertising: We use Google Analytics (GA4) and Google Tag Manager. We run Google Ads with conversion tracking and remarketing — if you visit our site, you may see our ads on other Google services (see Section 9)

6. WhatsApp Communication & Consent

WhatsApp is our primary communication channel. By sharing your mobile number with us, you expressly consent to being contacted via WhatsApp for:

• Acknowledging your enquiry or service request
• Requesting or following up on document submission
• Sharing service status updates and filing confirmations
• Sending due date reminders and compliance alerts
• Sharing quotes, invoices, or payment links

What we will NOT do via WhatsApp: Send unsolicited promotional messages unrelated to your active service | Share your number with third parties for marketing | Contact you after you have opted out.

Opt-Out: Send “STOP” on WhatsApp or write to [email protected]. We will cease WhatsApp communication within 48 hours.

Note: WhatsApp is operated by Meta Platforms Inc. under its own Privacy Policy at www.whatsapp.com/legal/privacy-policy. Namma Auditor is not responsible for Meta’s data practices.

7. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

A. Government Portals (for service delivery)

• Income Tax Department (incometax.gov.in) — ITR filing
• GST Network (gst.gov.in) — GST registration and returns
• Ministry of Corporate Affairs (mca.gov.in) — company/LLP/OPC incorporation
• Controller of Certifying Authorities (cca.gov.in) — DSC applications
• Any other portal applicable to your specific service

B. Payment Service Providers: Razorpay and UPI networks. We do not store your payment credentials.

C. Storage Services: Documents stored on secure cloud platforms and local systems, restricted to authorised team members.

D. Legal Authorities: Disclosed only where required by law, court order, or to protect legal rights.

E. No Other Sharing: Your data is not shared with marketing firms, data brokers, or other third parties for commercial purposes without your explicit consent.

8. Data Security

We implement reasonable technical and organisational measures including:

• Restricted access — only team members handling your file can access your data
• Secure storage with access controls on digital documents
• Encrypted communication channels where available
• No retention of sensitive credentials (Aadhaar, bank details) beyond service completion

No electronic storage method is 100% secure. Please do not share sensitive information over unverified channels.

9. Data Retention

• Tax filing records: Minimum 7 years (Income Tax Act, 1961)
• GST records: Minimum 6 years (GST Act)
• Incorporation / DSC documents: As required by MCA / CCA guidelines
• Lead data (non-converted): Up to 90 days, then purged
• WhatsApp and communication records: Duration of client relationship; deleted upon opt-out or closure

Data no longer required for any lawful purpose is securely deleted or anonymised.

10. Cookies and Tracking Technologies

The following are active on www.nammaauditor.com:

Google Tag Manager (GTM): Manages tracking scripts on our website.

Google Analytics (GA4): Collects anonymised usage data (pages visited, session duration, traffic sources). Does not collect personally identifiable information.

Google Ads Conversion Tracking: Tracks form submissions after users click our Google Ads to measure advertising effectiveness.

Google Remarketing: Users who visit our website may see Namma Auditor ads on other Google services. Uses anonymised cookie identifiers only.

Cookie Choices: Control cookies via browser settings. Opt out of Google interest-based ads at adssettings.google.com.

11. Your Rights

Under the IT Act 2000 and DPDP Act 2023, you have the right to:

• Access — Request a summary of personal data we hold
• Correction — Request correction of inaccurate data
• Deletion — Request deletion where data is no longer required, subject to legal obligations
• Withdraw consent — Withdraw consent for WhatsApp or marketing communications at any time
• Opt out of WhatsApp — Send “STOP” on WhatsApp or email [email protected]
• Data portability — Request your data in a standard readable format

To exercise these rights, contact our Grievance Officer (Section 13).

12. Minor Clients

Our services are for adults (18+). Where a minor’s data is submitted, it must be done by a parent or legal guardian who confirms they have authority to do so and consents to this policy on the minor’s behalf. We will not knowingly collect data directly from minors without verified parental consent.

13. Grievance Officer

In accordance with the IT Act 2000 and DPDP Act 2023:

Name: Mr. Suresh Kumar
Designation: Grievance Officer — Namma Auditor
Email: [email protected]
Response Time: Acknowledged within 48 hours; resolved within 30 days.

14. Third-Party Links

Our website may link to government portals, payment gateways, or social media platforms. This Privacy Policy applies only to www.nammaauditor.com. We are not responsible for third-party privacy practices.

15. Changes to This Privacy Policy

We may update this policy at any time. Changes will be published here with a revised “Last Updated” date. Continued use of our website or services after an update constitutes acceptance of the revised terms.

16. Contact Us

Namma Auditor
First Floor, 7A Chakravarthy Street, East Tambaram, Chennai – 600 059, Tamil Nadu, India
📧 [email protected]
📞 +91 95145 36363 / +91 96779 16905
🌐 www.nammaauditor.com

This Privacy Policy is effective as of 30 May 2026 and governs the use of www.nammaauditor.com and all services offered by Namma Auditor.