Privacy Policy & Enterprise Data Charter

1. Introduction & Commitment to Data Privacy

At Finkasha Services Private Limited ("Finkasha", "we", "our", or "us"), we recognize that the financial information of high-growth enterprises (₹5 Cr to ₹50 Cr+ turnover) and their C-suite executives, Chartered Accountants, and promoters constitutes the lifeblood of their competitive advantage. We are committed to maintaining uncompromising standards of data privacy, confidentiality, and integrity.

This Privacy Policy explains how Finkasha collects, uses, processes, safeguards, and disposes of personal and corporate data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable Indian financial regulatory standards.

2. Categories of Information We Collect

Depending upon whether you visit our digital platform, submit our interactive Cash Leakage Diagnostic tool, schedule a paid consultation, or engage our Fractional CFO advisory retainers, we collect:

3. Purpose & Legal Basis for Data Processing

Finkasha processes personal and corporate financial data solely for legitimate, explicit, and pre-determined professional purposes:

• Scheduling, coordinating, and delivering paid strategic financial consultations.
• Performing quantitative cash leakage diagnostics and working capital optimization analyses.
• Executing Fractional CFO retainers, cash flow forecasting, and monthly MIS dashboard generation.
• Delivering financial planning, MIS reporting, budgeting, and compliance advisory engagements.
• Fulfilling legal obligations under Indian tax, corporate, and digital data protection statutes.

4. Security Standards & Safeguarding Protocols

We implement comprehensive technical and organizational measures to ensure your enterprise financial data is insulated against unauthorized access, loss, or leakage:

• Data Encryption: All data transmitted through our web portal is encrypted in transit utilizing modern Transport Layer Security (TLS 1.3 / HTTPS).
• Role-Based Access Controls: Client financial records are restricted exclusively to senior advisory personnel assigned directly to your engagement.
• Zero Data Monetization: We do NOT sell, rent, monetize, or trade your enterprise financial information, contact records, or consultation notes to any third-party marketing networks.
• Mutual Non-Disclosure: Our advisory team is bound by strict confidentiality and non-disclosure obligations enforceable under Indian law.

5. Data Retention & Secure Disposal

Finkasha retains corporate and personal information only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory accounting and legal limitation requirements under Indian law. Upon expiration or formal termination of an advisory contract, and upon written request by the Client, all proprietary financial worksheets, raw data files, and diagnostic records shall be securely purged and destroyed from our active repositories.

6. Your Rights as a Data Principal (DPDP Act 2023)

In accordance with the provisions of the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

• Right to Access: The right to obtain a summary of your personal data processed by Finkasha.
• Right to Correction & Completion: The right to correct inaccurate data or update outdated enterprise contact details.
• Right to Erasure: The right to request deletion of personal information where processing is no longer required by law.
• Right of Grievance Redressal: The right to readily register a grievance with our designated Data Protection & Grievance Officer.

7. Data Protection Grievance Redressal Officer

As mandated by the Information Technology Act 2000 and DPDP Act 2023, the details of our designated Grievance Officer are set forth below: