Privacy policy.

Who I am and how to reach me

This website belongs to CA Arpit Rungta, FCA, 2nd Floor, Shree Durga Tower, Opp. Shri Lok Complex, H. B. Road, Tharpakna, Ranchi, Jharkhand – 834 001. Under India’s data protection law I am the “Data Fiduciary” for the personal data you share with me.

Grievance Officer / privacy contact: Arpit Rungta · arungta.arc@gmail.com · +91 92045 84369 · Mon–Sat, 10:00–20:00.

Laws this policy follows

The Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 (whose main duties apply from 13 May 2027); the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 until then; and the Code of Ethics of the Institute of Chartered Accountants of India (ICAI).

What I collect, and why

• Enquiry form, WhatsApp, call or email — name, mobile number, email (if you write), the service you need and any message. Why: to reply, understand your need and give a quote.
• If you become a client — documents needed for your work, such as PAN, Aadhaar, bank statements, accounts, invoices, returns, notices, and portal log-ins or digital signatures you choose to share. Why: to do the work you ask for and file it with the authorities.
• Training enquiries — name, mobile, organisation, topic and dates. Why: to plan the session.
• Basic technical data — IP address, browser and pages visited, recorded by the website host and the Google services listed below. Why: to run the site securely.

I do not collect anything else through this website, and I do not use advertising or tracking tools.

Your consent

When you send the enquiry form or message me, you agree to my using your details for the purposes above — nothing more. You can withdraw consent at any time, as easily as you gave it: just email or WhatsApp me. After withdrawal I will stop using your data, except where the law requires me to keep it. Withdrawal does not affect work already done, but I may not be able to continue a service without the needed information.

Who I share it with

• Government portals and authorities — Income Tax, GST, MCA/ROC, IEPF, FSSAI, DGFT and others — when filing for you.
• Banks, NBFCs or other parties you ask me to approach.
• My staff, and service providers who help me run my practice — such as Google (email, Sheets, storage), WhatsApp (Meta), my website host and accounting or AI software — only as needed, and bound to keep it confidential.
• Anyone the law, a court or a regulator requires.

I never sell, rent or trade your personal data.

Use of AI tools

Some work uses AI and automation software to read and match data faster. It is used only for your work; where the tool allows, I use settings that stop your data being used to train it; and every output is checked by me before it is used.

Storage and transfer outside India

Some providers above may store data on servers outside India. This is done only as permitted under Indian law, and I will follow any restriction the Government notifies.

How I keep it safe

Reasonable security safeguards: password-protected and encrypted devices and accounts, two-step login, limited access, secure backups, and records of access kept as required by law. No system is perfectly secure, but I take care to prevent loss, misuse or unauthorised access.

If a data breach happens

If your personal data is ever affected by a breach, I will inform you and the Data Protection Board of India as the law requires — explaining what happened, its likely impact and the steps you can take.

How long I keep it

• Enquiries that do not go ahead — deleted within 12 months of our last contact.
• Client records — kept as long as tax, company and professional laws require (usually 8 years, longer if a case is pending), then deleted or destroyed safely.

Your rights

• Get a summary of the personal data I hold about you and who it was shared with.
• Have it corrected, completed, updated or erased (subject to records I must keep by law).
• Withdraw consent at any time.
• Have your grievance resolved.
• Nominate a person to exercise these rights if you die or become unable to.

Email arungta.arc@gmail.com with the subject “Privacy request”. I may ask you to verify your identity, and I will respond within 30 days.

Complaints

Please contact me first — I will try to resolve it quickly. If you are not satisfied, you may complain to the Data Protection Board of India through its online portal, once the relevant provisions are in force.

Your duties

Please share accurate information, do not use someone else’s identity, and do not file false or frivolous complaints — these are your duties under the DPDP Act.

Cookies and third-party services

The site sets one small cookie to remember your language (English or Hindi). It uses Google Maps (office location), Google Translate (Hindi view), Google Fonts and, if enabled, Google Sheets (to receive enquiries), and links to WhatsApp, LinkedIn, Instagram, YouTube and government websites. These services may set their own cookies and follow their own privacy policies. You can block or clear cookies in your browser.

Children

This website is not meant for anyone under 18. I process a minor’s data only for their own work and only with a parent’s or lawful guardian’s verifiable consent.

Language and changes

This notice can be read in Hindi using the language switch; on request I will provide it in any language listed in the Eighth Schedule of the Constitution. I may update this policy; the latest version and date will always be on this page.