Privacy Policy.
How Palivela Devdas and Associates collects, uses and protects personal data received through this website, in conformity with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the confidentiality obligations of the Chartered Accountants Act, 1949.
The personal data the firm processes through this website.
The firm collects only the personal data you voluntarily provide and the technical data necessary to operate the website securely.
Information you provide
Information you voluntarily provide through the contact form or other communication — typically your name, email address, telephone number and the subject and content of your enquiry.
Communication content
The text and any attachments contained in messages you send to the firm, including emails, contact form submissions and documents shared during a professional engagement.
Technical and access data
Standard technical data automatically collected by the hosting infrastructure for security and reliability — including IP address, browser type, operating system, referrer URL and timestamps.
Cookies and similar technologies
This website uses only strictly necessary cookies required for the website to function. No third-party tracking, analytics, or advertising cookies are used without your consent.
Engagement information
If you become a client of the firm, additional personal and business information is collected as required for the engagement — held separately under the engagement letter and ICAI confidentiality obligations.
Why and on what basis the firm processes your data.
Personal data is processed only on the lawful basis set out under the DPDP Act, 2023 and only for the limited purposes described.
Consent
Where you submit information through the contact form, your express consent (via the consent checkbox) is the lawful basis under section 6 of the DPDP Act, 2023.
Legitimate use
For responding to enquiries and providing information you have requested, the firm may rely on legitimate use under section 7 of the DPDP Act, 2023.
Legal obligations
Personal data may be processed where required to comply with the Chartered Accountants Act, 1949, ICAI directions, the Income-tax Act, 1961, the GST law and other applicable Indian laws.
Purpose limitation
Information is used only for the purpose for which it was collected — primarily to respond to your enquiry or perform a professional engagement. It is not used for marketing, profiling or unrelated purposes.
How long the firm holds your data, and with whom.
The firm does not sell or rent personal data. Limited sharing and retention follow strict ICAI confidentiality requirements.
Sharing with third parties
The firm does not sell or rent personal data. Data may be shared only with service providers operating the website infrastructure (such as hosting and email-delivery providers), under confidentiality obligations, strictly to operate this website. Data may also be disclosed where required by law or court order.
Retention and security
Enquiry data is retained only for as long as necessary to respond and thereafter for record-keeping (typically not exceeding 6 months unless a professional engagement follows). The website is hosted with TLS encryption, access controls and appropriate security measures.
Your rights under the DPDP Act, 2023.
The DPDP Act recognises specific rights for the data principal — the person whose personal data is being processed.
Right to access
You may request a summary of the personal data the firm processes about you, the purpose, and the third parties with whom it has been shared.
Right to correction
You may request correction of inaccurate or misleading personal data, completion of incomplete data, or updating of outdated data.
Right to erasure
You may request erasure of your personal data, subject to legal and ICAI record-retention requirements that override the right.
Right of grievance
You may raise a grievance about the firm's handling of your personal data through the grievance officer below.
Cookies, grievances and policy updates.
Practical information on how this website uses cookies, where to raise a grievance, and how the firm communicates updates to this policy.
For grievances or queries about your personal data, write to the firm at info@paliveladevdas.com. The firm will respond within the timelines prescribed by the DPDP Act.
Cookies and tracking
This website uses only strictly necessary cookies required for the site to function. No third-party tracking, analytics, advertising or social-media cookies are used. Visit-level data captured by the hosting infrastructure (such as IP address) is retained briefly for security purposes.
Updates to this policy
The firm may update this Privacy Policy from time to time to reflect changes in the law or in data-handling practices. The latest version is always available on this page, with the effective date indicated. Continued use after an update constitutes acceptance of the revised policy.
Data outside India
Where service providers used by the firm are located outside India (such as for email delivery or hosting), data transfers are made in accordance with the DPDP Act and only with providers that maintain appropriate security and confidentiality safeguards.
Need to exercise a right?
Write to the firm to access, correct or erase your personal data, withdraw consent, or raise a grievance about how your data is handled.