Our Privacy Policy

We collect only the information necessary to provide you with our services. This includes:

We use your information for the following legitimate purposes:

• Service Delivery: To process your incorporation or compliance request, prepare filings on MCA21, GST Portal, TRACES, and the Income Tax Portal on your behalf.
• Communication: To keep you updated on your engagement status via WhatsApp, email, or phone — and to respond to your queries promptly.
• Legal & Regulatory Compliance: To fulfil obligations under the Companies Act, 2013, LLP Act, 2008, Prevention of Money Laundering Act (PMLA), and other applicable laws.
• Billing & Payments: To raise invoices, collect fees, and maintain proper financial records as required under Indian law.
• Platform Improvement: To analyse usage patterns (in aggregated, anonymised form) to improve our website experience.
• Marketing: Occasionally, to send you relevant updates about our services — only if you have not opted out. You may unsubscribe from any email at any time.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Government Portals: Your KYC data and incorporation details are submitted to MCA21, GST Portal, TRACES, and Income Tax Portal as required to complete your filing. This is the core purpose of our service.
• Authorised CA & CS Professionals: Our empanelled Chartered Accountants and Company Secretaries receive your data strictly to perform the subscribed services, under confidentiality obligations.
• Payment Processors: Payment reference details are processed by our payment gateway partner. We do not store full card numbers or UPI IDs.
• Cloud Infrastructure: Our platform uses reputable, India-compliant hosting and storage providers. All stored data is encrypted at rest.
• Legal Obligation: If required by a court order, government authority, or regulatory directive, we may disclose your information. We will notify you where legally permitted to do so.

Our website uses cookies and similar technologies to deliver a better experience. We use the following types:

You can control or disable cookies through your browser settings. Disabling non-essential cookies will not affect your ability to use our services, but may limit the personalisation of your experience.

We retain your personal data only for as long as it is necessary for the purposes described in this policy, or as required by law:

• KYC & Incorporation Documents: Retained for a minimum of 8 years after project completion, as required under the PMLA and Companies Act, 2013.
• Financial Records: Retained for 7 years for tax and audit compliance purposes.
• Contact & Marketing Data: Retained until you unsubscribe or request deletion, whichever occurs first.
• Website Analytics Data: Retained in anonymised/aggregated form for up to 26 months.

After the applicable retention period, your data is securely deleted or anonymised.

We implement technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse:

• All data transmitted to and from our website is protected by SSL/TLS encryption (HTTPS).
• Documents shared with us are stored in encrypted cloud storage with access controls limited to the assigned CA team.
• Our team members undergo data security awareness training and are bound by confidentiality agreements.
• We do not store payment card details — all payment processing is handled by PCI-DSS compliant gateways.
• Access to client data internally follows a need-to-know principle — only the assigned CA and support staff access your files.

You have the following rights regarding your personal data held by ComplyClub. To exercise any of these rights, write to us at privacy@complyclub.com. We will respond within 30 days.

Please note that some rights may be limited where processing is required to fulfil a legal obligation or complete a contracted service.

Our services are intended exclusively for individuals who are 18 years of age or older and are seeking to register a business entity in India. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently received information from a person under the age of 18, we will delete such data immediately. If you believe we have collected information from a minor, please contact us at privacy@complyclub.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify active clients via email or WhatsApp where the changes are significant.
• Post a prominent notice on our website homepage for 30 days following the update.

Continued use of our platform after a policy update constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our designated Privacy Officer: