Privacy Policy for www.disytax.com

Introduction

This Privacy Policy outlines how Disytax.com collects, utilizes, and safeguards the personal data of individuals who access and use our website. At Disytax.com, we are committed to protecting your privacy and ensuring the security of your personal information. This policy is designed to provide you with a clear understanding of our data processing practices and your rights under the Digital Personal Data Protection Act 2023 (DPDPA) of India. The DPDPA aims to establish a framework that recognizes both the individual’s right to protect their personal data and the necessity for organizations to process such data for lawful purposes . This Privacy Policy reflects our dedication to adhering to the principles enshrined in the DPDPA, ensuring a balance between your rights and our legitimate business needs.

This policy applies to all users of the website www.disytax.com. The DPDPA governs the processing of digital personal data within the territory of India. Furthermore, its provisions extend to the processing of digital personal data outside India if such processing is related to offering goods or services to individuals within India 2. Therefore, regardless of your location, if you are accessing or utilizing the services offered on www.disytax.com, this Privacy Policy is applicable to you and your personal data.

Information We Collect

We collect various categories of personal data to provide and improve our services, communicate with you effectively, and ensure the security of our website. The types of personal data we may collect include:

• Contact Information: This includes your name, email address, phone number, and mailing address, which you may provide when registering on our website, filling out contact forms, or requesting our services . This information allows us to communicate with you, respond to your inquiries, and provide the services you have requested.
• Website Usage Data: When you interact with our website, we automatically collect certain information about your visit. This may include your IP address, browser type, operating system, referring URLs, the pages you visit, and the timestamps of your visits . We utilize cookies and similar tracking technologies to gather this data, which helps us analyze website traffic, understand user behavior, and improve our website’s functionality and user experience 5.
• Tax-Related Information: If you choose to utilize our tax-related services, we will collect information necessary for the preparation and filing of your tax returns. This may include your Permanent Account Number (PAN), financial details such as income, investments, and expenses, as well as details about deductions and other relevant financial information. The specific information collected will depend on the tax services you require . Tax preparation websites often handle sensitive data like Social Security Numbers (in the US context) or their equivalent, highlighting the need for comprehensive data collection practices in this domain .
• Account Information: If you register for an account on our website, we will collect your chosen username and password. This information is essential for managing your account and providing you with secure access to our services.
• Communications Data: We may retain records of any correspondence you have with us, including emails and chat logs, especially when you contact our customer support team or make inquiries about our services . This helps us to track communication history, provide efficient support, and improve our service quality.
• Other Information: We may also collect any other information that you voluntarily provide to us through forms or other interactive elements on our website. This could include feedback, survey responses, or any specific details you choose to share with us.

How We Collect Information

We employ various methods to collect your personal data, ensuring transparency and adherence to legal requirements:

• Direct Collection: The majority of the personal data we collect is provided directly by you. This occurs when you fill out forms on our website, such as registration forms, contact forms, or forms related to our tax services. Information is also collected when you communicate with our customer support team through email, chat, or phone 5.
• Automatic Collection: We automatically collect certain information about your website usage through cookies and similar tracking technologies . These technologies help us gather data such as your IP address, browser type, pages visited, and other browsing patterns. Our server logs also record technical information about your interactions with our website.
• Indirect Collection: In some instances, we may collect information about you indirectly from third-party service providers. For example, we may utilize analytics providers to help us understand website traffic and user behavior . If we integrate with third-party platforms for specific services, we may also receive information from them, always ensuring that such collection is lawful and transparent.

Purpose of Collecting Information

The collection and processing of your personal data serve several key purposes, all aimed at providing you with the best possible service and ensuring the security and functionality of our website:

• Providing and Improving Services: We collect your tax-related information to process your tax returns accurately and efficiently, and to provide you with the specific tax services you have requested . The website usage data we collect helps us to personalize your experience on our website, tailoring content and features to your preferences. This data also assists us in continuously improving our website’s functionality, performance, and content to better meet your needs .
• Communication: Your contact information allows us to respond to your inquiries, provide effective customer support, and keep you informed about important updates or notifications related to our services . This ensures that you receive timely and relevant information regarding your account and any services you are utilizing.
• Account Management: If you create an account on our website, we use your account information to manage your access, secure your account, and provide you with the necessary tools and features for utilizing our services.
• Marketing (with Consent): With your explicit consent, we may use your contact information to send you promotional emails or offers about our services that we believe may be of interest to you . As mandated by the DPDPA, we will only engage in marketing communications with your clear and affirmative consent . You will have the option to withdraw your consent at any time.
• Legal Compliance: We may process your personal data to comply with applicable laws, regulations, and legal processes. This includes responding to legal requests, fulfilling our legal obligations related to tax services, and ensuring adherence to relevant statutory requirements.
• Security: We collect and process data to protect the security and integrity of our website and our services. This includes monitoring for and preventing fraudulent activities, ensuring data security, and maintaining the overall safety of our online platform.
• Analytics: We analyze website usage data and trends to gain insights into how our website is being used. This helps us to understand user behavior, identify areas for improvement, and make data-driven decisions to enhance our services and user experience.

Legal Basis for Processing

Under the Digital Personal Data Protection Act 2023, the processing of your personal data must have a lawful basis. At Disytax.com, our primary legal basis for processing your personal data is your explicit consent.

• Consent: We will obtain your free, specific, informed, unconditional, and unambiguous consent before processing your personal data for specified purposes 1. This consent will be requested in clear and plain language, providing you with all the necessary information about the data being collected and the purposes for its processing. You will typically provide your consent through affirmative actions, such as checking a box on a form. You have the right to withdraw your consent at any time, and we will ensure that the process for withdrawing consent is as easy as giving it 1. Please note that the withdrawal of your consent will not affect the lawfulness of any processing that was carried out based on your consent before it was withdrawn .
• Legitimate Uses: In certain limited circumstances, the DPDPA allows for the processing of personal data without explicit consent for “legitimate uses” . These uses are specified under Section 4(1) of the Act and may include situations such as when the data principal voluntarily provides the data or for certain functions related to the State. While our primary processing will be based on your consent, we may rely on these legitimate uses where applicable under the law.

Data Security Measures

We are committed to ensuring the security of your personal data and have implemented reasonable security safeguards to protect it from unauthorized access, use, disclosure, alteration, or destruction, as mandated by the DPDPA . These measures include both technical and organizational safeguards.

Our technical safeguards include the use of encryption to protect data during transmission and at rest, the implementation of firewalls to prevent unauthorized access to our systems, and the maintenance of secure servers. We also employ access controls to ensure that only authorized personnel have access to your personal data . We conduct regular security audits to assess the effectiveness of our security measures and to identify and address any potential vulnerabilities.

Organizationally, we have established internal policies and procedures for managing personal data, and we provide regular training to our employees on data protection best practices. We also ensure that any data processors we engage with adhere to stringent security standards.

In the event of a personal data breach, we are committed to complying with the requirements of the DPDPA. We will promptly notify the Data Protection Board of India and any affected data principals about the breach in the prescribed form and manner .

Data Retention Policy

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations . The retention period for different categories of personal data may vary depending on the specific purpose of collection and any legal obligations that require us to retain the data for a certain period. For example, tax return information may need to be retained for a longer duration to comply with tax laws.

When you withdraw your consent for the processing of your personal data, we will cease processing the data and will erase it, unless its retention is necessary for compliance with any law currently in force . Similarly, we will erase personal data as soon as it is reasonable to assume that the specified purpose for which it was collected is no longer being served, unless legal obligations necessitate its continued retention. We will also ensure that any data processors we work with erase personal data under the same conditions.

Third-Party Disclosure

To provide our services effectively, we may need to share your personal data with certain categories of third parties. These may include:

• Service Providers: We may share your data with third-party service providers who assist us in various aspects of our operations, such as website hosting, payment processing, data analytics, email delivery, and customer support . We ensure that these service providers are contractually obligated to protect your personal data in accordance with applicable laws and our privacy standards.
• Legal Authorities: We may disclose your personal data to legal authorities or regulatory bodies if we are required to do so by law or legal process. This may include responding to subpoenas, court orders, or other legal requests.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will ensure that you are notified of any such transfer and that the receiving entity continues to protect your personal data in a manner consistent with this Privacy Policy.

We may transfer your personal data to countries outside India for processing and storage. We will ensure that any such transfers comply with the provisions of the DPDPA regarding cross-border data transfers . The Government of India may, from time to time, issue notifications restricting the transfer of personal data to certain countries. We will abide by any such restrictions.

Rights of Data Principals

The Digital Personal Data Protection Act 2023 grants you several rights as a data principal regarding your personal data. These rights include:

Right	Description	How to Exercise on www.disytax.com
Right to Access	You have the right to request a summary of your personal data being processed by us, the processing activities undertaken, and the identities of all data fiduciaries and data processors with whom your personal data has been shared.	To exercise your right to access, please send an email to disytax@gmail.com with the subject line “Data Access Request.” We will respond to your request within the timeframe specified under the DPDPA rules.
Right to Correction	You have the right to request the correction, completion, or updating of your personal data if it is inaccurate or incomplete.	To request a correction, please send an email to disytax@gmail.com with the subject line “Data Correction Request,” clearly specifying the data you believe is inaccurate or incomplete and the correct information.
Right to Erasure	You have the right to request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent. Please note that we may not be able to erase your data if its retention is required by law.	To request erasure of your personal data, please send an email to disytax@gmail.com with the subject line “Data Erasure Request.” Please specify the data you wish to be erased and the reason for your request.
Right to Grievance Redressal	You have the right to have readily available means of grievance redressal if you have any concerns regarding the processing of your personal data or the exercise of your rights under the DPDPA.	If you have any grievances, please contact our Grievance Officer (details provided in Section 10) through the specified channels.
Right to Nominate	You have the right to nominate another individual who can exercise your rights under the DPDPA in the event of your death or incapacity.	To nominate an individual, please send an email to [email address removed] with the subject line “Data Nomination,” providing the details of your nominee as prescribed under the DPDPA rules. We will provide you with the necessary form and procedure for nomination.
Right to Withdraw Consent	Where we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.	You can withdraw your consent by. Please note that withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.

Grievance Redressal Mechanism

If you have any questions, concerns, or grievances regarding the processing of your personal data or this Privacy Policy, you may contact our Grievance Officer:

Grievance Officer: Dharmendrra kumar

Email Address: disytax@gmail.com

Phone Number: +919013616833

Mailing Address: S-671C School Block Shakarpur khas New Delhi 110092

Please include a clear description of your grievance along with any relevant details. We will acknowledge receipt of your grievance and will make our best efforts to address and resolve it within a reasonable timeframe, as per the guidelines provided under the DPDPA rules.

Before approaching the Data Protection Board of India, we encourage you to first utilize this grievance redressal mechanism to allow us an opportunity to address your concerns 1.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please feel free to contact us at:

Dharmendrra kumar

S-671C School Block Shakarpur khas New Delhi 110092

Email Address: disytax@gmail.com

Phone Number: +919013616833

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or website functionality . We will notify you of any significant changes by posting a prominent notice on our website or by sending you an email to the email address associated with your account. The “Last Updated” date at the beginning of this policy will indicate when the latest revisions were made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

Governing Law and Jurisdiction

This Privacy Policy and any disputes arising out of or in connection with it shall be governed by and construed in accordance with the laws of India. The courts shall have exclusive jurisdiction to hear and decide any legal actions or proceedings arising out of this Privacy Policy.