Privacy policy

Who we are

GXG Corp is a chartered accountancy practice at Choolaimedu, Chennai 600094, Tamil Nadu, India. For anything you submit through this website we are the data fiduciary under the Digital Personal Data Protection Act, 2023.

Questions about this policy, or a request about your data, go to info@gxgcorp.com or +91 89396 11550.

What we collect, and why

We only collect what you type in. There are two places you can do that.

The consultation form. Your name, and optionally your email, phone, company and a description of what you need. We use it for one thing: to reply to your enquiry and, if you become a client, to carry out the engagement.

The compliance calendar signup. Your email address and the entity type you chose. We use it to send the monthly calendar and nothing else. We ask you to confirm the address by clicking a link before anything is sent, and every email carries a one-click unsubscribe.

We do not buy contact lists, and we do not sell, rent or share yours.

Cookies and measurement

This site sets no advertising cookies and runs no advertising trackers.

We use privacy-friendly analytics to count page views and see which pages are useful. It records the page, referrer, country, and browser and device type. It does not build a profile of you and does not follow you to other websites.

Your browser's local storage is used for two small things: remembering that you have already seen the opening animation, and preventing a form being submitted twice by accident. Neither leaves your device.

Who else touches your data

We keep the number of processors deliberately small:

• Supabase — stores enquiries and calendar subscriptions.
• Resend — delivers the notification and calendar emails.
• Our website host, which serves these pages.
• CARTO — serves the map tiles on our contact page, using OpenStreetMap data. It sets no cookies and does not profile you; like any server, it sees the IP address that requests a tile. We chose it over an embedded Google map precisely so that visiting our contact page does not hand you to an advertising network.

Each acts only on our instructions. If you contact us on WhatsApp using the button on this site, that conversation is governed by WhatsApp's own privacy terms as well as this policy.

How long we keep it

Enquiries that do not become engagements are kept for up to 24 months, so we have context if you come back to us.

Calendar subscriptions are kept until you unsubscribe.

Client records are kept for as long as the engagement runs, and afterwards for the period the Income Tax Act, the Companies Act and ICAI guidance require us to retain working papers.

Your rights

Under the DPDP Act 2023 you may ask us to confirm what personal data we hold about you, correct anything inaccurate, erase it where we are not required to keep it, and withdraw consent you previously gave.

Write to info@gxgcorp.com and we will respond within 30 days. If you are not satisfied with how we handle it, you may complain to the Data Protection Board of India.

Grievance contact: the partner responsible for data protection, at info@gxgcorp.com.

Security

Data is transmitted over HTTPS and held in access-controlled systems with row-level security, so a given account can reach only the records it is entitled to. Access to client credentials is logged and reviewable. No system is perfect, and we will tell you and the Board promptly if a breach affects your data.

Children

This site is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes

If this policy changes materially we will update the date below and, where the change affects how we use data you have already given us, tell you directly.