Introduction
Mishra Aman & Company ("the Firm", "we", "us", or "our") is a Chartered Accountant firm providing accounting, taxation, audit, and business advisory services to clients in India and the United Arab Emirates (UAE). We operate mishraaman.com to present our services and facilitate professional enquiries.
When you share information with us — through an enquiry form, a consultation request, or a professional engagement — we handle it with care and professional responsibility. This Privacy Policy explains what personal data we collect, how we use and protect it, and the rights available to you.
This policy applies to all website visitors, enquiry submitters, and engaged clients, whether accessing from India or the UAE. By using this website, you confirm that you have read and understood this Privacy Policy. Read this policy alongside our Terms & Conditions, which govern the broader use of this website and our services.
Information We Collect
We collect only what is necessary for the purpose at hand. The categories below describe the information we may gather.
Personal Contact Information
When you submit an enquiry or contact us directly, we collect your full name, email address, and phone or WhatsApp number (where provided). We use this information solely to respond to your query and initiate communication about our services.
Business & Financial Details
During a query or consultation, you may voluntarily share business details — such as your company name, industry, or the nature of your tax or compliance requirements. We treat all such information as strictly confidential, in line with ICAI professional ethics obligations.
Website Usage Data
When you visit this website, we automatically collect technical data including your IP address, browser type, operating system, referring URL, pages viewed, and visit duration. Analytics tools such as Google Analytics process this data in aggregated, anonymised form to help us improve website content and performance. It is not used to identify you personally.
Communications
If you correspond with us by email or any other channel, we may retain a record of that correspondence — including your contact details and message content — to manage your enquiry and maintain a record of our professional communications.
We do not collect sensitive personal data such as Aadhaar numbers, PAN details, passport numbers, or financial account information through this website. Any such information shared during a formal engagement is governed by the separate engagement agreement and handled under strict confidentiality protocols.
How We Use Your Information
We use the information you provide strictly for the purposes below. We do not use your personal information for automated decision-making or profiling.
Responding to Enquiries
To contact you in response to a query, consultation request, or service enquiry submitted via this website or by email.
Delivering Professional Services
To provide, manage, and fulfil the professional services you engage us for under a formal engagement agreement.
Improving This Website
To analyse aggregated, anonymised usage data and improve the structure, content, and experience of this website.
Legal & Regulatory Compliance
To meet applicable legal and regulatory obligations, including record-keeping requirements under Indian law and UAE regulations where relevant.
Security & Fraud Prevention
To detect and prevent fraudulent activity, spam submissions, or misuse of website forms and communication channels.
Professional Communication
To send service-related updates and responses to queries you have initiated. We do not send unsolicited marketing emails.
Data Sharing
We do not sell your data — ever.
Mishra Aman & Company does not sell, rent, lease, or otherwise commercially transfer your personal or business information to any third party.
We share information with third parties only in these limited circumstances:
Regulatory Authorities
When required by law, court order, or a statutory authority — such as India's Income Tax Department, GST authorities, or the UAE Federal Tax Authority (FTA) — we disclose the minimum information necessary. Where law permits, we will notify the affected individual before disclosure.
Trusted Service Providers
We may engage third-party providers to operate this website and manage enquiries — such as form processors, email delivery services, or analytics tools. These providers access information only as needed for their specific function, are contractually bound to handle it securely and confidentially, and may not use it for any independent purpose.
Professional Co-Consultants
On rare occasions and with your prior knowledge, we may involve a specialist — such as a legal adviser or tax counsel — in delivering a specific service. Any such party is bound by equivalent confidentiality obligations under the engagement arrangement.
Data Security
We protect your personal information against unauthorised access, accidental loss, alteration, and disclosure. Our measures include:
- Encrypted transmission: This website uses HTTPS (SSL/TLS) to secure all data sent between your browser and our server, preventing interception in transit.
- Access controls: Personal information within the Firm is accessible only to authorised personnel who need it to perform their professional duties. All personnel are subject to professional confidentiality obligations.
- Secure third-party processors: We select service providers with established security certifications and contractual data protection obligations.
- Spam filtering: Enquiry forms include technical anti-spam measures to block automated or malicious submissions.
Important: No internet transmission or electronic storage system is 100% secure. If you believe your interaction with us has been compromised, notify us immediately at [email protected].
Data Retention
We retain personal information only as long as needed to fulfil the purpose it was collected for, or as required by applicable legal, regulatory, or professional obligations.
| Data Type | Retention Period | Reason |
|---|---|---|
| Website enquiry form data | Up to 12 months from submission | To manage and follow up on the enquiry |
| Client engagement records | As required by law (typically 8 years in India) | Statutory record-keeping obligations |
| Email communications | Duration of engagement + 2 years | Professional record and dispute reference |
| Website analytics data | Up to 26 months (anonymised) | Website performance monitoring |
After each retention period expires, personal data is securely deleted or anonymised. Where legal obligations require us to keep records beyond a standard period, we comply fully.
Your Rights
You have the following rights regarding the personal information we hold about you. We respond to all requests within 30 days of receipt.
-
Right to Access
You may request a copy of the personal information we hold about you, along with details of how it is used and with whom it has been shared.
-
Right to Correction
If personal information we hold is inaccurate or incomplete, you may request that we correct or update it without undue delay.
-
Right to Deletion
You may request deletion of your personal information where there is no lawful reason for us to retain it. Where a legal or professional obligation requires retention, we will inform you.
-
Right to Withdraw Consent
Where we rely on your consent to process information, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before that point.
-
Right to Raise a Concern
If you believe your personal data has been mishandled, you may raise a concern directly with us or lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of the above rights, send a written request to [email protected]. Include your full name and details of your specific request. We will not charge a fee for reasonable requests and will respond within 30 days.
International Users
Mishra Aman & Company serves clients in India and the UAE. This section explains how we handle data for users in each jurisdiction.
India
Data handling for Indian users is governed by the Information Technology Act, 2000, the IT (Amendment) Act, 2008, and the IT (Reasonable Security Practices) Rules, 2011. The Firm also adheres to ICAI confidentiality requirements. We monitor the Digital Personal Data Protection Act, 2023 and will update our practices as its provisions take effect.
United Arab Emirates
For UAE users and clients, we handle information in accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and applicable UAE regulations. Client data from UAE tax and audit engagements is subject to FTA confidentiality requirements. Cross-border transfers between India and the UAE are made with appropriate safeguards and client awareness.
If you access this website from outside India or the UAE, your information may be transferred to and processed in India. By submitting information through this website, you consent to such transfer in accordance with this Privacy Policy.
Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law in India or the UAE. Any changes will be published on this page with a revised "Last updated" date.
We encourage you to review this policy on each visit. Where a change is material — meaning it significantly affects how your data is used or your rights — we will post a notice on this website. Your continued use of the website after changes are published constitutes acceptance of the updated policy. If you do not agree, please discontinue use of this website and contact us at [email protected] if you have an active professional engagement with the Firm.
Contact Us
For questions, concerns, or requests about this Privacy Policy or the handling of your personal information, contact us using the details below.
Mishra Aman & Company
Chartered Accountants — India & UAE
Email (Privacy Queries)
[email protected]Website
mishraaman.comResponse Time
Within 2 business days
When contacting us about a privacy matter, include your full name, the nature of your query, and — where relevant — the specific information or request you are referring to. This helps us locate your records and respond accurately.