Your information, handled responsibly.
This Privacy Policy explains how CA Vistaar may collect, use, store, disclose and protect personal information when you visit our website, submit an enquiry or use our services.
Introduction
CA Vistaar, referred to in this Privacy Policy as “CA Vistaar”, “we”, “us” or “our”, provides online taxation, accounting, registration, compliance, payroll and business-advisory service coordination.
By accessing this website, submitting an enquiry, voluntarily providing information or engaging our services, you acknowledge that you have reviewed this Privacy Policy.
Where consent is required, information will be processed based on the consent provided by you or another lawful ground available under applicable Indian law.
Scope of this Privacy Policy
Where and when this policy applies.
This Privacy Policy applies to personal information collected through:
- The CA Vistaar website at cavistaar.in.
- Website enquiry and contact forms.
- Phone calls, WhatsApp, RCS, SMS and email communications.
- Online consultation and service coordination.
- Documents and information voluntarily supplied for an agreed service.
- Customer-support and grievance communications.
Information We May Collect
Categories of information relevant to enquiries and services.
Depending on your interaction and selected service, we may collect the following categories of information.
Identity Information
Name, date of birth, identity details and other information required for an agreed professional service.
Contact Information
Mobile number, email address, city, postal address and preferred communication channel.
Enquiry Information
Required service, enquiry details, messages, consultation notes and support requests.
Business Information
Business name, entity type, registration information, financial year and authorised-person details.
Financial and Tax Information
Accounting records, invoices, tax information, bank statements and supporting documents supplied for an agreed assignment.
Technical Information
IP address, browser type, device information, website activity, referring page and cookie data, where collected.
How We Collect Information
Information may be collected directly or through service interactions.
Information may be collected through the following methods:
- When you complete and submit a website enquiry form.
- When you contact us by phone, WhatsApp, RCS, SMS or email.
- When you request a quotation, consultation or professional service.
- When you supply documents for taxation, accounting or compliance work.
- When an authorised representative provides information on your behalf.
- Automatically through website logs, cookies or analytics tools where enabled.
- From publicly available or government-authorised sources where lawfully required for the service.
You are responsible for ensuring that information supplied by you is accurate, complete and lawfully provided.
How We May Use Information
Purposes connected with your enquiry and requested services.
Respond to Enquiries
To understand your requirement and communicate applicable services, documents and next steps.
Provide Services
To coordinate taxation, accounting, registration, compliance or advisory assignments.
Verification
To verify identity, authority, documents and information relevant to the requested service.
Customer Support
To provide updates, answer questions and manage support or grievance requests.
Payments and Records
To coordinate quotations, payments, invoices, transaction records and accounting requirements.
Legal Compliance
To comply with applicable laws, regulatory requests, professional obligations and lawful directions.
Security and Fraud Prevention
To detect misuse, suspicious activity, fraud, security incidents or unauthorised access.
Service Improvement
To review website performance, improve workflows and understand general customer requirements.
Communication and Marketing Consent
RCS, SMS, WhatsApp, email and voice-call communication.
Where you provide communication consent, CA Vistaar may contact you using the mobile number, email address or other contact details supplied by you.
Communications may include:
- Responses relating to your enquiry.
- Document checklists and service requirements.
- Service activation, processing and completion updates.
- Customer-support and grievance communication.
- Payment, renewal or compliance reminders.
- Information regarding relevant services and offers.
- Promotional communication where you have provided applicable consent.
Withdrawal and Opt-Out
You may withdraw promotional communication consent at any time by emailing info@cavistaar.in, contacting us by phone, using an unsubscribe facility where available, or replying with an opt-out request through the relevant channel.
Cookies and Technical Information
Website functionality, security and performance information.
Our website may use cookies, log files or similar technologies for functionality, security, preferences and website-performance measurement.
| Category | Possible Purpose | Control |
|---|---|---|
| Essential Cookies | Website operation, session management, security and basic functionality. | These may be required for the website to function correctly. |
| Preference Cookies | Remember settings, choices or display preferences. | May be managed through browser settings. |
| Analytics Data | Understand general website usage, traffic and performance. | Subject to the tools enabled on the website. |
| Security Logs | Detect suspicious activity, misuse, technical errors or unauthorised access. | Maintained where reasonably necessary for security and troubleshooting. |
You may control or delete cookies through your browser settings. Disabling essential cookies may affect website functionality.
Information Sharing and Disclosure
Limited sharing for services, operations and legal requirements.
We do not intend to sell personal information as a standalone commercial product. Information may be shared only where reasonably necessary, including with:
- Professionals or consultants involved in the agreed assignment.
- Accounting, compliance, payroll or document-processing service providers.
- Website-hosting, cloud, communication and technology providers.
- Payment gateways, banks or payment-processing partners.
- Government departments, statutory bodies and regulatory authorities where required.
- Auditors, legal advisers and professional advisers.
- Law-enforcement or competent authorities pursuant to lawful requests.
- A successor or acquiring organisation in connection with a lawful business restructuring.
Service providers may be permitted to process information only for defined operational purposes and subject to applicable contractual, confidentiality or legal requirements.
Data Security
Reasonable safeguards for information under our control.
We seek to use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information being processed.
- Access restrictions based on operational requirements.
- Password, device and account-security practices.
- Secure hosting and communication measures where available.
- Backup, monitoring and incident-management processes.
- Confidentiality expectations for personnel and service providers.
- Periodic review of information-processing practices.
Where a personal-data incident occurs, we may investigate, take reasonable containment steps and provide notifications where required under applicable law.
Data Retention
Information is retained according to purpose and legal requirements.
Personal information may be retained only for as long as reasonably necessary for the purpose for which it was collected, the duration of an active service relationship, dispute resolution, security, record keeping or legal and regulatory obligations.
| Information Type | General Retention Approach |
|---|---|
| General Enquiries | Retained for a reasonable follow-up period and deleted or anonymised when no longer required. |
| Service and Customer Records | Retained during the engagement and for an appropriate period afterward for records, support and legal requirements. |
| Tax, Accounting and Compliance Records | Retained according to applicable statutory, professional, contractual or dispute-related needs. |
| Communication Preferences | Retained as necessary to record consent, withdrawal or opt-out status. |
| Technical and Security Logs | Retained for a reasonable security, fraud-prevention and troubleshooting period. |
Information may be deleted, anonymised or securely archived when it is no longer required, subject to applicable law and operational limitations.
Your Privacy Rights and Choices
Requests are handled subject to applicable law and verification.
Depending on the applicable law and circumstances, you may request to exercise the following rights:
Access Information
Request information regarding personal data being processed and its general use.
Correction and Update
Request correction of inaccurate or incomplete personal information.
Erasure
Request deletion of information that is no longer necessary, subject to legal retention requirements.
Withdraw Consent
Withdraw consent for future processing where processing is based on your consent.
Raise a Grievance
Submit a privacy complaint or concern through our grievance-contact channel.
Nomination
Nominate another person to exercise applicable rights where permitted under applicable law.
Submitting a Request
Send your request to info@cavistaar.in with the subject line “Privacy Request”. We may request reasonable information to verify your identity, authority and the nature of the request.
Certain requests may be restricted where information must be retained for legal compliance, fraud prevention, contractual records, professional obligations, legal claims or the rights of another person.
Children’s Personal Information
Services are generally intended for adults and business users.
Our website and general enquiry services are primarily intended for adults, professionals and business users. We do not knowingly seek independent promotional consent from children.
Where a taxation or compliance service concerns a person below the legally applicable age, the enquiry and information should be submitted by a parent, lawful guardian or properly authorised representative.
A parent or guardian who believes that a child has independently supplied personal information may contact us at info@cavistaar.in.
Third-Party Websites and Platforms
External services operate under their own terms.
Our website may contain links to government portals, payment gateways, WhatsApp, email services, maps, professional resources or other third-party websites.
We do not control the privacy, security or content practices of independent third parties. You should review the relevant privacy policy and terms before submitting information through an external platform.
Hosting and Cross-Border Processing
Technology providers may operate from different locations.
Website hosting, cloud storage, email, analytics, communications or support services may involve infrastructure or service providers operating in India or other permitted jurisdictions.
Where information is processed outside your location, we seek to use service arrangements and safeguards appropriate to the information and applicable legal requirements.
Changes to this Privacy Policy
The policy may be updated as services or legal requirements change.
We may revise this Privacy Policy to reflect changes in our services, technology, operational practices, legal requirements or regulatory guidance.
The revised version will be published on this page with an updated effective date. Material changes may also be communicated through reasonable channels where appropriate.
Privacy and Grievance Contact
Contact us regarding privacy questions or complaints.
For privacy-related questions, correction or deletion requests, consent withdrawal, communication preferences or complaints, contact CA Vistaar using the details below.
Grievance and Privacy Contact
Please provide sufficient information to identify the relevant enquiry or service and clearly explain your request. We may verify your identity before processing the request.
Where a grievance remains unresolved, you may use other remedies available under applicable Indian law and approach the competent authority where legally permitted.
Policy Drafting Notice
This Privacy Policy provides general information about CA Vistaar’s intended data-handling practices. It does not constitute legal advice or guarantee compliance for every business process. Actual practices, vendor arrangements, consent records and internal procedures should remain consistent with this policy and applicable law.