Legal
Privacy policy
Who is responsible
Ghosh Khanna & Co LLP (“the firm”) is the data fiduciary for personal data collected through this website, under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Grievance officer: To be confirmed.
What is collected
| Data | When | Purpose | Kept for |
|---|---|---|---|
| Name, email; optionally organisation and telephone; your message | When you send the request form | To reply to your request | To be confirmed, then deleted |
| Campaign tags in the link you arrived by, if any (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid) | Read from the address of the first page you open, kept in your browser for that visit only (session storage), and sent only if you send the request form | To know which link or listing led to a request | With the request, for the same period |
| Your answer to “Was this page useful?” and the page address | When you press Yes or No | To improve the pages | Aggregated; no personal data is attached |
| Display settings (text size, contrast, motion) | When you change them | To keep your choice between pages | In your browser only (local storage); never sent to the firm |
| The text of questions typed into the search tool | When you use the search tool | To answer the question in your browser | Not stored by the firm in the preview; if a live service is switched on, questions (without personal data) are logged for quality for a period stated here first |
| Anonymous visit statistics (page, referrer, device type, country) | On every visit, if analytics are switched on | To understand which pages are used | Aggregated; no profile is built |
The website does not use advertising or tracking cookies, does not build profiles and does not sell or share personal data.
Consent
The request form asks for consent with a box that is not ticked in advance, next to a notice that says what is collected and why. You may withdraw consent at any time by writing to the grievance officer; the firm will then stop using your data and delete it unless the law requires it to be kept.
Who processes the data
The website is hosted on Cloudflare, which processes IP addresses to deliver pages and, on the request form, may check that the form is sent by a person (Cloudflare Turnstile). Cloudflare may process data outside India. Requests are passed to an automated workflow operated by To be confirmed and to the firm’s email. These providers act only on the firm’s instructions under written terms.
Your rights
- To a summary of the personal data held about you and how it is used.
- To have inaccurate or incomplete data corrected, and data no longer needed erased.
- To nominate another person to exercise these rights in the event of death or incapacity.
- To have a grievance addressed within the time allowed under the Rules (not more than 90 days).
- If not satisfied, to complain to the Data Protection Board of India.
Security and breaches
Data is sent over encrypted connections and access is limited to those who need it to reply. If a personal data breach occurs, the firm will inform the people affected and the Data Protection Board as the law requires. Information received from clients in the course of professional work is also subject to the confidentiality rules of the Institute of Chartered Accountants of India.
Children
This website is not intended for children, and the firm does not knowingly collect personal data of anyone under 18 through it.