Privacy Policy

This policy explains how Bharath InCorp, a partnership firm handles personal data collected through https://www.bharathincorp.com and our related services. It is written to comply with the Digital Personal Data Protection Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021.

We handle documents that matter: PAN cards, incorporation certificates, financial statements. We treat them accordingly.

1. What we collect

Information you give us

• Identity and contact details: name, mobile number, email address, city.
• Business details: entity name, entity type, date of incorporation, turnover band, sector, GSTIN.
• Documents you upload: incorporation certificates, MOA and AOA, LLP agreements, partnership deeds, PAN cards, financial statements and similar statutory documents.
• Communications: messages, support tickets and correspondence with your case manager.

Information collected automatically

Pages visited, actions taken on the platform, device and browser type, and IP address. This is used to keep the service working and secure, not to build advertising profiles.

Payment information

Payments are processed by our payment gateway partner. Card numbers, UPI credentials, CVV and bank passwords are entered on the gateway's systems and are never received, seen or stored by us. We retain only a transaction reference, the amount and the payment status.

2. Why we use it

• To deliver the service you asked for, including preparing and filing applications.
• To assign a qualified professional to your matter.
• To authenticate you, including one time passwords sent to your mobile or email.
• To track compliance deadlines and tell you before you miss one.
• To keep you updated on order status.
• To meet our own legal, tax and record keeping obligations.

We do not use your data for automated decision making that produces legal effects, and we do not profile you for advertising.

3. Legal basis and consent

We process your data on the basis of the consent you give when you submit information to us, and where necessary to perform the service you have engaged us for. Where we ask for consent, we ask for it specifically, and you may withdraw it at any time by writing to us. Withdrawal does not affect processing carried out before withdrawal, and may mean we can no longer deliver a service in progress.

4. Who we share it with

We do not sell your data. We share it only in these circumstances:

• With the Chartered Accountant, Company Secretary or advocate assigned to your matter, who are bound by their institutional ethics codes.
• With government departments and portals, as required to submit the application you engaged us for.
• With service providers who operate our infrastructure, being our database and storage provider, our email provider and our payment gateway, each bound by contract to protect your data.
• Where we are compelled by law, a court order or a lawful authority request.

5. Where your data is stored

Data is stored on Supabase infrastructure hosted in Singapore, within the AWS Southeast Asia region. Row level security is applied so records are accessible only to you and to authorised personnel working on your matter. Uploaded documents are held in access controlled storage.

Transfers outside India are made only to jurisdictions permitted under the DPDP Act 2023 and subject to contractual safeguards.

6. How long we keep it

• Documents uploaded during an application that does not proceed to payment are deleted automatically thirty days after upload.
• Records relating to completed engagements are retained for eight years, which is the period required under Indian tax and company law.
• Enquiry and lead records with no resulting engagement are retained for two years.

When a retention period ends, data is deleted or irreversibly anonymised.

7. Your rights

Under the DPDP Act 2023 you have the right to:

• Ask what personal data we hold about you and how it is being processed.
• Have inaccurate or incomplete data corrected or updated.
• Have your data erased, subject to any retention we are legally required to observe.
• Nominate another person to exercise these rights if you die or become incapacitated.
• Raise a grievance and have it answered.

Write to support@bharathincorp.com to exercise any of these. We respond within thirty days, and usually much sooner.

8. Security

Data is encrypted in transit using TLS. Access to client records is restricted to personnel working on the matter. Sessions are authenticated and time limited. We review access controls periodically.

No system is perfectly secure. If a breach affecting your personal data occurs, we notify you and the Data Protection Board as required by law.

9. Cookies

We use cookies that are necessary for the site to function, principally to keep you signed in. We do not use advertising or cross site tracking cookies. Blocking necessary cookies in your browser will prevent you from staying signed in.

10. Children

Our services are intended for business owners and are not directed at children. We do not knowingly collect data from anyone under eighteen. If we learn that we have, we delete it.

11. Grievance Officer

In accordance with the Information Technology Act 2000, the Information Technology Rules 2021 and the DPDP Act 2023, the following officer may be contacted regarding any concern about your personal data:

Grievances are acknowledged within twenty four hours and resolved within fifteen days.

12. Changes to this policy

We may update this policy as our services or the law change. The date at the top reflects the current version. Where a change materially affects how we handle your data, we notify you by email.