Privacy Policy
Joshi & Co., Chartered Accountants (the "Firm", "we", "us") respects the privacy of every individual who interacts with us, whether as a client, prospective client, employee, or website visitor. This policy describes how we collect, use, and safeguard personal information in the course of our professional practice, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and applicable regulations of the Institute of Chartered Accountants of India ("ICAI").
Information We Collect
In the ordinary course of our work, we may collect:
- Identification information — name, designation, contact details, PAN, Aadhaar (where statutorily required), passport details, and director identification numbers.
- Financial information — bank statements, tax filings, audit working papers, transaction records, and any other documents necessary for the engagement.
- Correspondence — emails, letters, meeting notes, and information submitted through this website's enquiry form.
- Technical information — basic web server logs (IP address, browser type, pages visited) when you access this website.
How We Use Your Information
We use personal information solely for the purposes for which it was collected: delivering professional services, complying with statutory obligations (including the Income-tax Act, Companies Act, GST laws, PMLA, and ICAI directives), responding to enquiries, and maintaining our client records. We do not sell, rent, or commercially exploit personal information under any circumstances.
Confidentiality
All client information is held in strict professional confidence in accordance with the Code of Ethics issued by the ICAI. Information will be disclosed only with the client's express written consent, where required by law or regulatory authority, or where mandated by court order.
Data Retention
Client engagement files are retained for a minimum of eight years from the close of the engagement, in line with the Companies Act and ICAI record-retention requirements. Enquiry-form submissions that do not result in an engagement are deleted within twelve months unless retention is otherwise requested.
Your Rights under the DPDPA
Subject to the limits permitted under the DPDPA and our professional obligations, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of data that is no longer required, subject to our statutory retention obligations.
- Nominate a representative to exercise these rights in the event of incapacity or death.
- Lodge a grievance with the Data Protection Board of India.
Grievance Officer
Questions, concerns, or requests under this policy may be addressed to the Firm's designated Grievance Officer:
CA Priya Sharma, Managing Partner
Joshi & Co., Chartered Accountants
Office No. 412, Pearl Business Park, Sahar Road,
Andheri East, Mumbai 400 099
Email: grievance@joshi-co.com
Telephone: +91 22 2684 2180
Changes to This Policy
This policy may be updated from time to time. Material changes will be reflected by updating the "Last updated" date at the head of this page.