Privacy Policy

Effective Date:01-April 2026

1. Introduction

This Privacy Policy applies to the website SetupFiling.in (“we”, “us”) and governs the collection, use, and disclosure of personal data in compliance with:

  • Information Technology Act, 2000 and SPDI Rules, 2011
  • Digital Personal Data Protection Act, 2023 (effective Jan 1, 2025)
  • Google’s updated tracking policy (e.g., GA4 restrictions effective Feb 16, 2025)

2. Definitions

  • Personal Data: Identifiable information such as name, email, phone number, address, etc.
  • Sensitive Personal Data (SPDI): Includes financial details, identity documents, health info, etc.
  • Data Principal: You, as a user whose data is being processed.
  • Data Fiduciary: SetupFiling.in

3. Personal Data Collected

We may collect:

  • Name, email, phone number, address (Personal Data)
  • GST or identity data if required for specific services (Sensitive Personal Data)
  • Other optional data you voluntarily provide, e.g. through service forms.

4. Purpose of Collection & Legal Basis

Data is collected for:

  • Processing registrations (company, GST, etc.)
  • Responding to inquiries and providing support
  • Fulfilling regulatory obligations
  • Sending transactional communications (not unsolicited marketing unless opted-in)

Every collection is consent-based and aligned with the Data Principals’ purpose.

5. Consent and Withdrawal

Your consent is obtained explicitly (e.g., via tick-box or form submission). You may withdraw consent anytime by contacting us. Withdrawal may limit usage of our services.

6. Use and Disclosure of Personal Data

We may share data with:

  • Service Providers: e.g., payment processors, cloud hosting (only as required)
  • Regulatory Authorities: Only if mandated by law

We do not sell or publish your data.

7. Data Storage, Security & Retention

  • Data is stored on secure servers in India (if applicable), protected by encrypted connections, access controls, regular audits.
  • Data is retained only as long as necessary for service delivery or legal compliance.
  • In accordance with DPDPA draft rules, e‑commerce/Filing services may have a maximum retention period of 3 years, unless needed to maintain your account.

8. Users’ Rights

You may:

  • Request access or correction of data
  • Request erasure or restrict processing
  • Withdraw consent
  • Lodge grievances or complain to the Data Protection Board or send notices to our Grievance Officer

9. Grievance Officer

In compliance with IT Rules, you may contact our Grievance Officer:

  • Name: Pundreek Pandey
  • Address: E‑30, Jawahar Park, Laxmi Nagar, Delhi 110092, India
  • Phone: +91 98182 09246
  • Email: help@setupfiling.in

We aim to acknowledge complaints within 72 hours and resolve them promptly.

10. Data Breach Notifications

In the event of a data breach, we will notify affected users and the Data Protection Board immediately (if required), and submit a detailed report within 72 hours including description, scale, consequences, and mitigation steps.

11. Children's Data

We do not knowingly collect data from children under 18. If encountered, we will require verifiable parental consent before processing any personal data of minors.

12. Tracking, Cookies & Google Analytics

We use Google Analytics 4 in compliance with Google’s Feb 2025 updates and do not employ device fingerprinting or local storage tracking. If we use cookies or analytics, they are limited in scope and fully disclosed with consent.

13. Updates to Policy

We may update this policy. The “Last Updated” date will reflect such changes. Major modifications will be notified through the website or email.

14. Contact & Complaints

For any privacy-related queries or to exercise your data rights, please contact our Grievance Officer (see Section 9). You may also lodge a complaint with the Data Protection Board under DPDPA.