Privacy Policy

1. Who we are and scope

Finbees Consulting (“Finbees”, “we”, “us” or “our”) provides business registration, tax, accounting, compliance, technology and related support services. Our principal contact address is 48/4, Netaji Bypass Road, Dharmapuri, Tamil Nadu 636701, India.

This policy applies when you visit finbeesconsulting.com, contact us, ask for a quote, become a client, or provide information so that we can deliver a service. A specific engagement letter, proposal or statutory notice may give additional information for a particular service.

We handle personal information under applicable Indian law, including the Information Technology Act, 2000 and rules currently in force. We will update our practices as further provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 become applicable.

2. Information we collect

The information depends on the service you request and may include:

• Identity and contact information: name, date of birth, phone number, email address, postal address, signature and authorised representative details.
• Business and compliance information: entity, director, partner, shareholder, employee, registration, tax, accounting and transaction information.
• Documents: PAN, Aadhaar or other identity documents, photographs, address proof, GST or company records, financial statements, invoices and bank or payment evidence where genuinely required for the requested service.
• Communications: messages, calls, files, instructions, feedback and approvals sent through WhatsApp, email, telephone, forms or other channels.
• Payment information: payment status, reference numbers, invoices and refund records. Payment providers process card, UPI or banking credentials; we do not intentionally store complete card or UPI authentication credentials.
• Technical information: IP address, browser and device details, pages visited, referring page and security or performance events collected by our hosting, security or analytics providers.

Please do not send sensitive or unrelated documents that we have not requested. Where a document contains information about another person, you must have lawful authority to provide it.

3. How we receive information

We receive information directly from you; from a director, employer, accountant, advocate or other representative authorised by you; from our service partners; and, where lawful and relevant, from government portals, regulatory databases and public records.

4. How we use information

We use information only where reasonably necessary to:

• answer enquiries, understand requirements, prepare quotes and manage client relationships;
• verify identity, eligibility and documents and perform the service you requested;
• prepare, review, submit and track applications, registrations, returns, reports or filings;
• collect payments, issue invoices, process refunds and maintain financial records;
• communicate about approvals, deadlines, status, support and related service needs;
• protect accounts, prevent fraud, resolve disputes and secure our website and operations;
• meet tax, accounting, professional, regulatory and legal obligations; and
• measure and improve our website, services and client experience using proportionate analytics.

Depending on the context, processing is based on your consent or voluntary provision of information, steps requested before or during a service engagement, our legal obligations, and other grounds permitted by applicable law. You may decline optional information, but we may then be unable to provide the affected service.

5. When we share information

We do not sell or rent personal information. We may share the minimum information reasonably necessary with:

• our authorised team and qualified accountants, company secretaries, advocates or other service professionals working on your matter;
• government departments and regulatory portals such as the Income Tax Department, GST systems, Ministry of Corporate Affairs, IP India or GeM, when relevant to your service;
• service providers for hosting, cybersecurity, file storage, communications, email, analytics, payment processing and client support, under appropriate arrangements;
• law-enforcement, courts, regulators or other persons when disclosure is required by law or reasonably necessary to protect rights, safety or prevent fraud; and
• a successor in a genuine merger, restructuring or transfer of business, subject to lawful safeguards.

Third-party platforms, including WhatsApp and payment providers, process information under their own terms and privacy notices as well as any obligations they owe to us.

6. Processing outside India

Some technology or communications providers may store or process information outside India. Where this occurs, we use providers and arrangements intended to protect the information and follow any transfer restriction notified under applicable Indian law.

7. How long we retain information

We keep information only for as long as reasonably required for the service, statutory and professional record-keeping, security, audit, tax, complaint or dispute purposes. Different records therefore have different retention periods. When information is no longer required, we take reasonable steps to delete, de-identify or securely dispose of it. A deletion request cannot override a legal duty or a legitimate need to preserve records for an active claim or proceeding.

8. Security

We use reasonable technical and organisational safeguards appropriate to the nature of the information, including access controls, need-to-know handling, reputable infrastructure and secure transmission features where available. We also require clients to protect passwords, OTPs and devices and to notify us promptly of suspected unauthorised access.

No website, message, storage system or transmission method can be guaranteed completely secure. If a personal-data incident occurs, we will investigate, contain and make notices required by the law applicable at that time.

9. Your choices and rights

Subject to applicable law and verification of your identity, you may ask us to:

• explain or provide access to personal information we hold about you;
• correct inaccurate or incomplete information;
• erase information that is no longer required or lawfully retained;
• withdraw consent for future consent-based processing; or
• address a grievance about how your information is handled.

Withdrawal does not affect processing already lawfully completed. It may prevent us from continuing a service that needs the information. Rights such as nomination will be supported when and to the extent they become applicable. We may request reasonable proof of identity and authority before acting on a request.

10. Children

Our website and business services are not directed to persons under 18. We do not knowingly seek their personal information. Where information concerning a child is genuinely required for an authorised service, it must be provided by or with the lawful authority of a parent or guardian and will be handled in accordance with applicable law.

11. Third-party websites and services

Our website may link to government portals, WhatsApp, payment services or other websites. Their operators control their own privacy and security practices. Review their notices before submitting information. A link does not mean that Finbees controls or accepts responsibility for that service.

12. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version will be posted here with a revised “last updated” date. If a change materially affects how we use information already collected, we will give additional notice or seek consent where required.

13. Questions, requests and grievances

Contact the Grievance Officer at Finbees Consulting. Please describe the issue, the service involved and how we can identify your record. We aim to acknowledge requests promptly and resolve them within 30 days, or within any shorter period required by applicable law.