Privacy Policy
Effective Date:01-April 2025
1. Introduction
This Privacy Policy applies to the website SetupFiling.in (“we”, “us”) and governs the collection, use, and disclosure of personal data in compliance with:
- Information Technology Act, 2000 and SPDI Rules, 2011
- Digital Personal Data Protection Act, 2023 (effective Jan 1, 2025)
- Google’s updated tracking policy (e.g., GA4 restrictions effective Feb 16, 2025)
2. Definitions
- Personal Data: Identifiable information such as name, email, phone number, address, etc.
- Sensitive Personal Data (SPDI): Includes financial details, identity documents, health info, etc.
- Data Principal: You, as a user whose data is being processed.
- Data Fiduciary: SetupFiling.in
3. Personal Data Collected
We may collect:
- Name, email, phone number, address (Personal Data)
- GST or identity data if required for specific services (Sensitive Personal Data)
- Other optional data you voluntarily provide, e.g. through service forms.
4. Purpose of Collection & Legal Basis
Data is collected for:
- Processing registrations (company, GST, etc.)
- Responding to inquiries and providing support
- Fulfilling regulatory obligations
- Sending transactional communications (not unsolicited marketing unless opted-in)
Every collection is consent-based and aligned with the Data Principals’ purpose.
5. Consent and Withdrawal
Your consent is obtained explicitly (e.g., via tick-box or form submission). You may withdraw consent anytime by contacting us. Withdrawal may limit usage of our services.
6. Use and Disclosure of Personal Data
We may share data with:
- Service Providers: e.g., payment processors, cloud hosting (only as required)
- Regulatory Authorities: Only if mandated by law
We do not sell or publish your data.
7. Data Storage, Security & Retention
- Data is stored on secure servers in India (if applicable), protected by encrypted connections, access controls, regular audits.
- Data is retained only as long as necessary for service delivery or legal compliance.
- In accordance with DPDPA draft rules, e‑commerce/Filing services may have a maximum retention period of 3 years, unless needed to maintain your account.
8. Users’ Rights
You may:
- Request access or correction of data
- Request erasure or restrict processing
- Withdraw consent
- Lodge grievances or complain to the Data Protection Board or send notices to our Grievance Officer
9. Grievance Officer
In compliance with IT Rules, you may contact our Grievance Officer:
- Name: Pundreek Pandey
- Address: E‑30, Jawahar Park, Laxmi Nagar, Delhi 110092, India
- Phone: +91 98182 09246
- Email: help@setupfiling.in
We aim to acknowledge complaints within 72 hours and resolve them promptly.
10. Data Breach Notifications
In the event of a data breach, we will notify affected users and the Data Protection Board immediately (if required), and submit a detailed report within 72 hours including description, scale, consequences, and mitigation steps.
11. Children's Data
We do not knowingly collect data from children under 18. If encountered, we will require verifiable parental consent before processing any personal data of minors.
12. Tracking, Cookies & Google Analytics
We use Google Analytics 4 in compliance with Google’s Feb 2025 updates and do not employ device fingerprinting or local storage tracking. If we use cookies or analytics, they are limited in scope and fully disclosed with consent.
13. Updates to Policy
We may update this policy. The “Last Updated” date will reflect such changes. Major modifications will be notified through the website or email.
14. Contact & Complaints
For any privacy-related queries or to exercise your data rights, please contact our Grievance Officer (see Section 9). You may also lodge a complaint with the Data Protection Board under DPDPA.
