Privacy Policy

1. Introduction

GoodAdvisor ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website (goodadvisor.in) and use our services.

This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023 of India. For users in the European Union, this policy also addresses your rights under the General Data Protection Regulation (GDPR).

By using our platform, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use our website or services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Full name
• Email address
• Phone number
• Business name and type
• PAN number and GST number (for service delivery)
• Billing address and city
• Documents uploaded for service processing

2.2 Automatically Collected Information

When you access our website, we may automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website address
• Cookies and similar tracking technologies

2.3 Payment Information

Payment transactions are processed through Razorpay. We do not store your complete credit/debit card details. Payment processing is handled securely by our payment gateway partner in compliance with PCI DSS standards.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain and deliver our services
• To process your orders and payment transactions
• To communicate with you regarding your orders and services
• To send you service-related notifications and updates
• To respond to your enquiries and provide customer support
• To improve and personalize your experience on our platform
• To send marketing communications (with your consent)
• To comply with legal obligations and regulatory requirements
• To detect and prevent fraud or unauthorized access

4. Information Sharing & Disclosure

We may share your information with:

• Service Professionals: Chartered Accountants, Lawyers and Company Secretaries assigned to work on your service requirements.
• Payment Processors: Razorpay for processing payment transactions securely.
• Government Authorities: When required for filing applications, registrations and compliances on your behalf.
• Legal Requirements: When required by law, regulation, legal process or governmental request.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection practices

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. Types of cookies we use:

• Essential Cookies: Required for basic website functionality and security.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Enable enhanced features and personalisation.
• Marketing Cookies: Used to deliver relevant advertisements (with your consent).

You can manage cookie preferences through your browser settings or our cookie consent mechanism. Disabling certain cookies may affect the functionality of our website. For detailed information about each cookie we use and how to manage your preferences, please see our Cookie Policy.

7. Data Retention & Processing

We retain your personal information for as long as your account is active or as needed to provide you services. We also retain data as necessary to comply with legal obligations, resolve disputes and enforce agreements. Our data retention practices comply with the DPDP Act, 2023.

7.1 Retention Periods

• Account data: Retained for the duration of your account and up to 3 years after account deletion, unless longer retention is required by law.
• Financial records & transaction data: Retained for a minimum of 8 years as required by the Income Tax Act, 1961 and the Companies Act, 2013.
• Service documents: Documents uploaded for service delivery are retained for 5 years after service completion, unless you request earlier deletion.
• Communication records: Messages, support tickets and correspondence are retained for 3 years after the last interaction.
• Analytics data: Anonymised analytics data may be retained indefinitely for improving our services.

7.2 Data Processing

Your personal data is processed on servers located in India. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, pseudonymisation, access controls and regular security audits. Data processing is limited to what is necessary for the purposes specified in this policy.

7.3 Data Deletion

Upon account deletion or upon your request, we will delete or anonymise your personal data within 30 days, except where retention is required by law. You may request data deletion by contacting us at privacy@goodadvisor.in.

8. Your Rights

Under the DPDP Act, 2023 and applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: Request a summary of your personal data being processed and the processing activities undertaken.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements and contractual obligations.
• Right to Portability: Request transfer of your data in a structured, commonly used and machine-readable format.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Opt-out: Opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting notification preferences in your account settings.
• Right to Nominate: Under the DPDP Act, you have the right to nominate a person who may exercise your rights in the event of your death or incapacity.
• Right to Grievance Redressal: File a complaint with our Grievance Officer or, if unresolved, with the Data Protection Board of India.

To exercise these rights, please contact us at privacy@goodadvisor.in. We will respond to your request within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Grievance Officer

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your privacy concerns and data protection grievances:

The Grievance Officer shall acknowledge your complaint within 24 hours and resolve it within 15 days. For our full grievance redressal process, please refer to our Grievance Redressal Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: