Who we are

The Tax Co is a partnership firm providing tax, compliance and advisory services from Hyderabad. Its registered office is Plot No. 0414/11, Phase 2, TNGOs Colony, Gachibowli, Hyderabad 500032. This policy covers what happens to your information when you use thetaxco.in or contact us through the channels it lists. Once you become a client, the engagement letter and its confidentiality terms take over.

The law we follow

The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Under G.S.R. 843(E) dated 13-11-2025, the Act's main duties and individual rights take effect eighteen months later, in May 2027; the corrigendum of 10-12-2025 did not move that date. Until then we treat the Act's standards as our own policy. The Information Technology Act, 2000 and the 2011 rules on sensitive personal data continue to apply.

What we collect

Contact form: your name, email address and message, plus your business or role and phone number if you choose to give them. Framer, which hosts the site, emails each submission to us, stores it in the form-submissions panel of our Framer account and writes a copy to a Google Sheet in the firm's Google account. Those records, and whatever you send us afterwards, are the only copies.

Booking: the call link opens Cal.com on its own page. Cal.com asks for your name, email, the time you choose and any note you add, and holds the booking in our Cal.com account and calendar. The introductory call is twenty minutes and is not recorded or transcribed.

WhatsApp, Instagram and X: if you message us there, the message travels through that platform's servers under its own privacy policy, which we do not control. We read it and reply; we do not export your contact into any list.

Whichever channel you use, keep the first message short. Do not send passwords, one-time passwords, identity documents or bank details.

Cookies and analytics

The site sets no cookies and runs no advertising or third-party tracking. The only measurement is Framer's built-in analytics, which counts visits, page views and referral sources without cookies or persistent identifiers: Framer combines your IP address and browser with a secret that changes daily, so a visit cannot be linked to you the next day. That is why there is no cookie banner. Framer's hosting still handles the technical data needed to serve and secure a page, such as your IP address in transit.

What we use it for

To read and answer your enquiry, arrange the call, understand how the site is used and keep it secure. An enquiry is not consent to marketing; we do not add you to any mailing list. If we ever need your information for a new purpose, we will tell you and ask first. You can choose not to give us information, but we may then be unable to reply or arrange the call.

Who else handles it

Framer hosts the site and delivers form submissions. Google holds the Google Sheet copy of those submissions. Cal.com handles bookings. Hostinger hosts our email. WhatsApp, Instagram and X carry messages sent through them. Within the firm, enquiries are read only by the partners and the person handling your matter.

These providers may process data outside India, including in the European Union and the United States, under their own security commitments; see Framer's privacy statement, Google's privacy policy and Cal.com's privacy policy. We may disclose information where Indian law requires it. Using a provider does not reduce our responsibility to you.

How long we keep it

If an enquiry does not become an engagement, we delete the email, the Sheet row, the Framer submission, the chat and any booking record within one month of our last exchange with you. If it does, the details move to your client file and are kept for the period set by the engagement letter and by tax and professional record rules. Framer's traffic count is aggregated and stays for as long as Framer keeps site analytics.

Your rights

You can ask what we hold about you, how we use it and who we share it with; ask us to correct, update or erase it; or withdraw consent for a consent-based use. Write to mail@thetaxco.in from the address you used, with enough detail to find the record. We may ask you to confirm your identity in a proportionate way; do not send identity documents unless we have agreed a secure route.

Withdrawing consent does not undo earlier lawful processing and may mean we cannot continue with your request. Where the law requires us to keep something, we will say so. Once the DPDP provisions commence, these become statutory rights, including grievance redressal and the right to nominate someone to act for you in case of death or incapacity.

Grievances

Email mail@thetaxco.in with the subject "Privacy grievance". The partners are responsible for this policy and will reply within thirty days; the DPDP Rules, 2025 set ninety days as the outer limit. Once the Data Protection Board of India's complaint process is running, you may go to the Board after using ours.

Security and children

Our mailbox, Framer and Cal.com accounts use two-step verification. No online system is fully secure; if a breach affects your information, we will tell you and the Board as the law requires.

The site is meant for adults. If you are under eighteen, ask a parent or lawful guardian to write to us first, describing the enquiry without sending your records. Information sent by a child without authority will not be acted on and will be deleted when we notice it.

Changes and contact

When our practices or the law change, we update this policy and its date. A new version is not consent for a new use.

Questions: mail@thetaxco.in or +91 83330 27478. Hyderabad, Monday to Friday, 10:00–18:00 IST.