Effective Date: November 2026 | Jurisdiction: Republic of India (Digital Personal Data Protection Act, 2023)

S R Mahajan & Co (“we”, “our”, “us”, or “the firm”) is committed to protecting the privacy, confidentiality, and security of personal and corporate financial data entrusted to us by our clients, prospective clients, and website visitors. As a Chartered Accountancy firm regulated by the Institute of Chartered Accountants of India (ICAI), our data handling practices adhere strictly to statutory professional ethics and Indian data protection regulations.

1. Scope and Applicability

This Privacy Policy explains how we collect, process, store, and protect information collected through our website (https://srmahajan.com/) and during the provision of our professional accounting, Virtual CFO, taxation, and statutory audit engagements.

2. Information We Collect

In the course of providing professional financial and taxation services, we may collect:

• Contact Identification Data: Full name, professional designation, business email address, contact phone number, and company name submitted through our consultation forms.
• Financial and Statutory Documentation: Permanent Account Number (PAN), Tax Deduction Account Number (TAN), Goods and Services Tax Identification Number (GSTIN), financial ledgers, bank statements, audited accounts, and corporate filings provided voluntarily for engagement assessment.
• Technical Website Data: IP addresses, browser types, device operating systems, and anonymous navigation statistics collected automatically to ensure website security and performance.

3. Purpose of Processing and Lawful Basis

We process personal and corporate data solely for legitimate professional purposes, including:

• Evaluating and responding to professional consultation inquiries.
• Fulfilling statutory accounting, tax computation, auditing, and corporate compliance mandates under signed client engagement letters.
• Complying with regulatory obligations under the Income Tax Act 1961, Companies Act 2013, Central Goods and Services Tax Act 2017, and Prevention of Money Laundering Act (PMLA).
• Maintaining rigorous internal quality assurance and data security records.

4. Professional Confidentiality and Non-Disclosure

In accordance with the Code of Ethics established by the Institute of Chartered Accountants of India (ICAI), all financial records, business communications, and personal data are held under absolute professional secrecy. We never sell, rent, monetize, or trade client information to any third party.

Client data is disclosed strictly to authorized regulatory authorities (such as the Income Tax Department, Ministry of Corporate Affairs, or GST Directorate) only when expressly authorized by the client or legally mandated under valid statutory process.

5. Data Security and Technical Safeguards

We deploy robust enterprise safeguards to protect information against unauthorized access, loss, alteration, or interception:

• Encrypted SSL/TLS 256-bit data transmission across our website.
• Restricted role-based access to financial documentation limited to assigned professional audit staff.
• Encrypted cloud repositories and secure archival controls for historical compliance records.

6. Data Retention Period

In accordance with the Companies Act 2013 and Section 149 of the Income Tax Act 1961, statutory accounting records and related audit working papers are retained for a minimum statutory period of eight to ten financial years, after which they are securely expunged or archived.

7. Grievance Officer and Contact Details

If you have any questions regarding our data protection policies or wish to exercise your rights under the Digital Personal Data Protection Act, please contact our designated Grievance Officer:

CA Saket Mahajan, Managing Partner
S R Mahajan & Co, Chartered Accountants
C-23, Prozone Trade Centre, API Corner, Chikhalthana, Chhatrapati Sambhajinagar, Maharashtra 431006
Email: contact@srmahajan.com | Phone: +91 8007705533