Privacy Policy

Effective Date: 26.09.2026
Last Updated: 26.06.2026

Comply Rakshak (“Comply Rakshak”, “we”, “us”, or “our”) is committed to protecting the privacy and security of the personal information entrusted to us by our users, clients, visitors, and business partners.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you access or use our website, mobile or desktop applications, online portals, communication channels, and related services (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of the Services.

This Privacy Policy should be read together with our Terms of Use and other applicable policies.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through:

• Our website and web applications;

• Mobile and desktop applications, if applicable;

• Client portals and dashboards;

• Emails, telephone calls, SMS, WhatsApp and other communication channels;

• Documents and information submitted by clients for compliance or professional services;

• Any other digital or offline interaction with Comply Rakshak in connection with our Services.

This Policy applies to individuals, businesses, companies, LLPs, partnerships, proprietorships, professionals, and other users interacting with Comply Rakshak.

2. Information We Collect

Depending on the Services you use, we may collect the following categories of information.

2.1 Identity and Contact Information

This may include:

• Full name;

• Business/entity name;

• Date of birth, where required;

• Email address;

• Mobile or telephone number;

• Residential or business address;

• PAN and other identification details;

• Government-issued identification information where required for a particular service;

• Designation and professional information.

2.2 Business and Compliance Information

Where required to provide compliance, corporate, tax, legal-support, or related services, we may collect:

• Company, LLP, partnership or proprietorship details;

• Incorporation and registration information;

• CIN, LLPIN, GSTIN and other registration numbers;

• Director, partner, shareholder or proprietor information;

• Statutory and regulatory records;

• Financial and accounting information provided for a requested service;

• Contracts, agreements, certificates and other business documents;

• Information required for statutory filings and regulatory submissions.

2.3 Documents and Service Information

We may collect documents and information voluntarily submitted by you, including:

• KYC documents;

• Incorporation documents;

• Financial documents;

• Tax-related documents;

• Statutory registers and records;

• Board/shareholder-related documents;

• Licences, registrations and certificates;

• Compliance records;

• Any other information reasonably necessary to provide the Services requested by you.

2.4 Transaction and Payment Information

We may collect:

• Details of Services purchased;

• Order and engagement information;

• Invoices and receipts;

• Payment status;

• Transaction reference numbers;

• Limited payment-related information received from payment service providers.

Where payments are processed through third-party payment gateways, payment card or banking credentials may be processed directly by the relevant payment provider in accordance with its privacy policy.

2.5 Technical and Usage Information

When you access our digital platforms, we may automatically collect certain technical information, such as:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Approximate location derived from technical information, where applicable;

• Date and time of access;

• Pages or features accessed;

• Referring website;

• Cookies and similar technologies;

• Application and system logs.

3. How We Collect Information

We may collect personal information:

• Directly from you when you register or create an account;

• When you request or purchase our Services;

• When you submit forms, documents or information;

• During communications with our team;

• Through our website, applications or client portal;

• Through cookies and similar technologies;

• From authorised representatives acting on your behalf;

• From third-party service providers where reasonably necessary to provide the Services;

• From publicly available or government sources where legally permissible and necessary for the Services.

You are responsible for ensuring that information and documents submitted to us are accurate, complete, current, and lawfully provided.

4. Purpose of Processing Personal Data

We may process personal data for purposes including:

4.1 Providing Services

To:

• Deliver the Services requested by you;

• Process applications, registrations and filings;

• Prepare documents and compliance records;

• Communicate with you regarding your engagement;

• Coordinate with relevant professionals, authorities and service providers.

4.2 Account and Customer Management

To:

• Create and manage user accounts;

• Verify your identity;

• Maintain client records;

• Process orders and engagements;

• Provide customer support;

• Respond to queries and requests.

4.3 Regulatory and Legal Compliance

We may process and retain information where necessary to:

• Comply with applicable laws and regulations;

• Fulfil statutory and regulatory obligations;

• Respond to lawful requests from government or regulatory authorities;

• Prevent, detect or investigate fraud, misuse or unlawful activity;

• Maintain records required under applicable law.

4.4 Service Improvement

We may use information to:

• Improve our website, applications and Services;

• Understand usage patterns;

• Identify technical issues;

• Develop new products and features;

• Improve customer experience;

• Maintain the security and reliability of our systems.

4.5 Communications and Marketing

Subject to applicable law and your preferences, we may contact you regarding:

• Service-related communications;

• Compliance reminders;

• Important regulatory updates;

• Product or service announcements;

• Educational content;

• Offers or marketing communications.

You may opt out of promotional communications at any time through the available unsubscribe mechanism or by contacting us.

5. Legal Basis for Processing

Depending on the circumstances and applicable law, Comply Rakshak may process personal data:

• To provide Services requested by you;

• To perform or take steps necessary for an agreement with you;

• To comply with applicable legal or regulatory obligations;

• With your consent, where consent is required;

• For legitimate and lawful business purposes, where permitted by applicable law;

• To protect the security, rights and property of Comply Rakshak, our users, or others.

Where processing is based on consent, you may withdraw your consent subject to applicable legal requirements and limitations.

6. Sharing and Disclosure of Personal Data

We do not sell your personal data.

We may disclose or share information where reasonably necessary for providing the Services or fulfilling lawful obligations, including with:

6.1 Professional Service Providers

Where required, information may be shared with authorised professionals such as:

• Chartered Accountants;

• Company Secretaries;

• Lawyers;

• Tax professionals;

• Compliance professionals;

• Other consultants or specialists engaged to provide the requested Services.

6.2 Government and Regulatory Authorities

Information may be submitted to or shared with government departments, statutory authorities, regulators, courts, tribunals, or other competent authorities where required for providing the Services or complying with applicable law.

6.3 Technology and Service Providers

We may use trusted third-party providers for:

• Cloud hosting;

• Data storage;

• Payment processing;

• Communication;

• Customer support;

• Analytics;

• Cybersecurity;

• Document management;

• Software and infrastructure services.

Such providers may process information only for authorised purposes and subject to appropriate contractual or legal safeguards.

6.4 Legal and Security Requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law;

• Respond to lawful governmental requests;

• Enforce our agreements and policies;

• Protect our rights or property;

• Detect or prevent fraud, security incidents or unlawful activities;

• Protect the safety of users or the public.

7. Cookies and Similar Technologies

Our website and digital platforms may use cookies, pixels, tags, log files and similar technologies to:

• Enable essential website functionality;

• Remember preferences;

• Understand website usage;

• Improve performance;

• Analyse traffic;

• Enhance user experience;

• Support certain marketing activities, where permitted.

You may be able to manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some Services.

8. Data Security

We take reasonable technical, organisational and administrative measures designed to protect personal data against:

• Unauthorised access;

• Unauthorised disclosure;

• Loss or misuse;

• Alteration;

• Destruction;

• Security breaches.

Depending on the nature of the information and risks involved, security measures may include access controls, authentication mechanisms, encryption or other appropriate safeguards.

However, no method of transmission or electronic storage can be guaranteed to be completely secure. Accordingly, while we take reasonable precautions, we cannot guarantee absolute security of information.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing the requested Services;

• Maintaining business and transaction records;

• Complying with statutory and regulatory obligations;

• Resolving disputes;

• Enforcing agreements;

• Preventing fraud or misuse;

• Protecting our legal rights.

When personal data is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with applicable law and our internal retention practices.

Certain records may need to be retained for longer periods where required by law or regulatory requirements.

10. Your Rights

Subject to applicable law, you may have rights in relation to your personal data, including the right to:

• Request information regarding personal data processed by us;

• Request correction of inaccurate or incomplete personal data;

• Request deletion or erasure of personal data where legally permissible;

• Withdraw consent where processing is based on consent;

• Raise a grievance regarding the processing of your personal data;

• Exercise other rights available under applicable data protection laws.

Requests may be subject to verification requirements to ensure that personal data is disclosed only to the appropriate individual or authorised representative.

11. Withdrawal of Consent

Where we process your personal data based on consent, you may withdraw such consent by contacting us using the details provided in this Privacy Policy.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Please note that withdrawal of consent may affect our ability to provide certain Services where the relevant processing is necessary for those Services or is otherwise required by law.

12. Accuracy of Information

You are responsible for ensuring that information and documents provided to Comply Rakshak are accurate, complete, current and lawfully obtained.

If any information changes, you should promptly notify us or update your account information where such functionality is available.

13. Children’s Privacy

Our Services are primarily intended for individuals who are legally capable of entering into contractual relationships.

We do not knowingly seek to collect personal data from children except where permitted and appropriately authorised under applicable law.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can take appropriate action.

14. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, payment gateways, government portals, or other external services.

Comply Rakshak does not control the privacy practices of such third parties. Your use of third-party websites or services is subject to their respective terms and privacy policies.

We encourage you to review the privacy policies of third parties before providing them with personal information.

15. Cross-Border Data Transfers

Where personal data is processed or stored outside India through our service providers or technology infrastructure, such processing will be undertaken subject to applicable law and appropriate safeguards, where required.

16. Data Breach and Security Incidents

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain, mitigate and respond to the incident and provide notifications where legally required.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our Services;

• Changes in technology;

• Changes in applicable laws or regulations;

• Changes in our data processing practices.

The updated version will be published through the applicable Comply Rakshak platform with the revised “Last Updated” date.

Your continued use of the Services after an updated Privacy Policy becomes effective may be subject to the updated Policy, to the extent permitted by applicable law.

18. Grievance Redressal and Privacy Contact

If you have any questions, concerns, complaints, or requests relating to your personal data or this Privacy Policy, you may contact our privacy/grievance team at:

Comply Rakshak
Email: complyrakshak@gmail.com / info@complyrakshak.com
Website: www.complyrakshak.com

Where applicable, requests and grievances will be handled within the timelines prescribed under applicable law.

19. Governing Law and Dispute Resolution

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India.

Any dispute, controversy, or claim arising out of or relating to this Privacy Policy, including its interpretation, validity, performance, or termination, shall first be attempted to be resolved amicably between the parties.

If the dispute is not resolved amicably, it shall be referred to and finally resolved by arbitration in accordance with the Arbitration and Conciliation Act, 1996, as amended from time to time.

The arbitration shall be conducted by a sole arbitrator mutually appointed by the parties. In the event the parties are unable to mutually agree upon the appointment of the arbitrator, the appointment shall be made in accordance with the applicable provisions of the Arbitration and Conciliation Act, 1996.

The seat and venue of arbitration shall be Delhi, India.

The language of the arbitration proceedings shall be English, unless otherwise mutually agreed by the parties.

Subject to the foregoing arbitration provision and applicable law, the courts at Delhi shall have jurisdiction over matters arising in connection with this Privacy Policy.

20. Contact Us

For questions regarding this Privacy Policy, personal data, privacy-related requests, or grievances, please contact:

Comply Rakshak
Email: complyrakshak@gmail.com / info@complyrakshak.com
Website: www.complyrakshak.com

Effective Date: 26.09.2026
Last Updated: 26.06.2026