This Privacy Policy explains how CS Khushbu S. Joshi & Associates ("we", "our", "us") collects, uses, shares and protects personal data of visitors to cskhushbujoshi.netlify.app ("the website") and clients availing our Company Secretary services ("services"). By using the website or our services, you consent to the practices described below.
1. Who we are
CS Khushbu S. Joshi & Associates is a practising Company Secretary firm in Nagpur, Maharashtra, founded by CS Khushbu S. Joshi (ACS), an Associate Member of the Institute of Company Secretaries of India (ICSI). Our registered office is at Plot No. 5, Flat No. A302, Empire Estate, near Parivartan Square, Shri Hari Nagar, Manewada, Nagpur – 440027.
2. Information we collect
Information you provide to us
- Identification: name, PAN, Aadhaar, photograph, date of birth.
- Contact: phone number, email address, postal address.
- Business information: company / LLP / firm details, MCA filings, financials, board resolutions.
- Professional engagement details: scope, fees, signed engagement letters.
- Payment information: bank details, UPI ID, GST number.
Information collected automatically
- Server logs (IP address, browser, device, referring URL, pages visited).
- Cookies (session, preference and analytics cookies if enabled).
3. How we use your information
- To provide CS, MCA, ROC, IPR and related professional services.
- To file documents on regulatory portals (MCA21, IP India, RBI FIRMS, GST, IT) on your behalf.
- To communicate engagement updates, regulatory deadlines and statutory reminders.
- To raise invoices, accept payments and meet our own statutory obligations.
- To respond to your enquiries and free-consultation requests.
- To improve the website experience and content (where you have consented to analytics).
4. Legal basis (DPDP Act 2023)
We process your personal data based on (i) your explicit consent, (ii) the performance of our professional engagement contract with you, (iii) compliance with legal obligations under the Companies Act, 2013, the LLP Act, 2008, the ICSI Code of Conduct, Income Tax Act and other applicable laws, and (iv) our legitimate interests in providing and improving our services.
5. Sharing your data
We do not sell or rent personal data. We share data strictly:
- With government authorities and statutory portals (MCA, ROC, RBI, GST, IT, ICSI) as required to deliver the engagement.
- With AD Category-I banks for routine banking authorisations as required for the engagement.
- With sub-contracted Certifying Authorities (eMudhra, Capricorn, Pantasign) for DSC issuance.
- With our IT, accounting, courier and cloud-storage vendors strictly under confidentiality obligations.
- If required by a court order, regulator, or law-enforcement agency.
6. Confidentiality & professional duty
As a practising Company Secretary, CS Khushbu S. Joshi is bound by the ICSI Code of Conduct and the duty of professional secrecy. All client information is treated as strictly confidential and is used only for the engagement scope you have signed off.
7. Data retention
We retain personal data for the duration of the engagement plus a statutory retention period of 8 years (or longer if required by tax / company law). Engagement letters, working papers and final deliverables are retained for the period mandated by ICSI Auditing Standards (CSAS).
8. Your rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Withdraw consent (which may affect our ability to deliver the engagement).
- Request erasure subject to statutory retention obligations.
- Lodge a grievance with our Data Officer at cs.khushbujoshi@gmail.com.
9. Security
We implement reasonable technical and organisational measures including TLS encryption, access controls, secure cloud storage, anti-virus protection and confidentiality clauses with vendors. However, no internet transmission is 100% secure and you share information at your own risk.
10. Cookies
We use only essential cookies for site functionality. Any analytics cookies will be loaded only with your consent.
11. Third-party links
This website may contain links to third-party sites (e.g., MCA, ICSI, government portals, social media). We are not responsible for their privacy practices — please review their policies separately.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Continued use of the website or services constitutes acceptance of the revised policy.
13. Contact us
For privacy queries or data-subject requests:
Email: cs.khushbujoshi@gmail.com
Phone: +91 90790 29004
Postal: CS Khushbu S. Joshi & Associates, Empire Estate, near Parivartan Square, Manewada, Nagpur – 440027, Maharashtra, India.
14. Digital Personal Data Protection Act, 2023
For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), CS Khushbu S. Joshi & Associates is the Data Fiduciary in respect of personal data collected through this website.
- Purpose limitation: Personal data submitted through the website enquiry form (such as your name, phone, email and message) is collected and processed solely to respond to and act on your enquiry. It is not used for advertising or unsolicited marketing, and is not sold or shared with third parties for their own purposes.
- Consent: Such data is processed on the basis of the explicit consent you provide at the time of submission. Providing the data is voluntary; without it we may be unable to respond to your enquiry.
- Withdrawal of consent: You may withdraw your consent at any time — as easily as it was given — by writing to cs.khushbujoshi@gmail.com. Withdrawal does not affect processing already carried out, and certain data may be retained where law requires.
- Your rights as a Data Principal: access to a summary of your data, correction or completion, erasure (subject to statutory retention), nomination, and grievance redressal.
- Grievance redressal: CS Khushbu S. Joshi acts as the contact for data-protection grievances and can be reached at cs.khushbujoshi@gmail.com / +91 90790 29004. Grievances are acknowledged within 2 working days and addressed within a reasonable period.
- Children's data: The website and services are intended for businesses and professionals; we do not knowingly collect personal data of children.
- Retention: Website enquiry data is retained only as long as necessary to address the enquiry and any resulting engagement, after which it is deleted or anonymised, save for statutory retention obligations.