How we handle your personal data.

1. Who we are

MDVB & Associates LLP is a firm of Chartered Accountants registered with the Institute of Chartered Accountants of India (firm registration no. W101206), at Office No. 302, C4, 3rd Floor, EPIC, Kesnand Road, Wagholi, Pune 412207, India. We decide how and why the personal data described here is used. For any privacy question, write to md@mdvbca.com.

2. What we collect

• Enquiry and call-booking forms: your name, email address, phone number (if given), firm or company, the topic, your message, and for call requests your chosen time and your device's time zone.
• Email, phone and WhatsApp: your contact details and whatever you choose to tell us.
• Documents you send us through the Send documents page, such as tax and accounting records.
• Job applications: your CV and the details in your application.
• Technical data: our website platform may record basic technical information such as IP address, browser type and pages visited, and may use cookies (see section 8).

Please don't put financial records or other sensitive details in the enquiry or call-booking forms. Existing clients can use the Send documents page instead.

3. Why we use it

• To reply to your enquiry, arrange a call and send you a quote. For visitors in the UK and EU, our legal basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
• To carry out work you have engaged us for, using the documents you send us.
• To consider job applications.
• To keep records of our correspondence, as our professional obligations require.
• We don't sell your personal data, and we don't add you to a mailing list unless you ask us to.

4. Who we share it with

We share personal data only with service providers who help us run this website and our communications, and only as far as needed:

• Wix.com, which hosts this website.
• FormSubmit (formsubmit.co), which delivers form submissions and attached files to our email inbox and sends you an automatic confirmation.
• Calendly (Calendly LLC), which shows our available times and books calls. Its booking calendar loads on our Book a call page only when you click to show it, and Calendly's own privacy policy and cookies apply to your booking.
• Google Analytics (Google LLC), only if you accept analytics cookies (see section 8).
• Our email provider, and WhatsApp if you choose to message us there.
• Professional advisers, regulators or authorities where the law requires it.

5. International transfers

We are based in India, so if you contact us from the UK, EU or US, your data will be processed in India. Our service providers may also process data in other countries, including the United States. Where UK or EU law applies, we rely on appropriate safeguards for these transfers, such as standard contractual clauses or equivalent terms.

6. How long we keep it

If an enquiry doesn't lead to an engagement, we delete it within 24 months. We keep job applications for up to 12 months unless you ask us to delete them sooner. If you become a client, we keep records for as long as the engagement lasts and afterwards for the period required by law and our professional rules.

7. Your rights

UK and EU visitors: under the UK GDPR and EU GDPR you can ask for access to your data, correction, deletion, restriction of processing or a copy in a portable format, and you can object to processing based on legitimate interests. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Visitors in India: under the Digital Personal Data Protection Act, 2023, you can ask for a summary of the personal data we hold, ask us to correct, complete, update or erase it, withdraw consent you have given, nominate another person to exercise your rights, and raise a grievance with us. If we don't resolve it, you can approach the Data Protection Board of India.

To exercise any right, email md@mdvbca.com. We may need to confirm your identity before acting on a request.

8. Cookies

Our website platform uses cookies that are needed for the site to work and for security.

With your consent, we also use Google Analytics to understand how visitors use the site, such as which pages are visited and roughly where visitors are. It sets cookies named _ga and _ga_* and sends this information to Google, including in the United States. We don't load Google Analytics until you click Accept, and the site works the same if you decline. You can change your choice at any time with Cookie settings at the bottom of every page.

9. Security

We use reasonable technical and organisational measures to protect personal data, and our team is bound by the confidentiality requirements of the ICAI Code of Ethics. No method of sending data over the internet is completely secure.

10. Changes and contact

We may update this policy from time to time; the date at the top shows the latest version. Questions and grievances go to CA Mayur Deokar, Partner, at md@mdvbca.com or the address above.