F
FilingHub

Privacy Policy

Last Updated: 13 May 2026

Introduction

Website: https://filingsimple.com

IMPORTANT NOTICEThis Privacy Policy is a legally binding document. By accessing or using the FilingHub website or services, you unconditionally agree to the collection, use, storage, and sharing of your information as described herein. Please read this Policy carefully before proceeding.

1. Introduction and Identity of Data Fiduciary

Who we are and how to reach us.

FilingHub Corporate Advisors ("FilingHub", "Firm", "We", "Us", "Our") is a professional consultancy providing GST advisory, income tax, MCA compliance, business registrations, accounting, and related services through its digital platform at https://filingsimple.com . FilingHub operates as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and is committed to protecting the personal data of every Data Principal (user, client, visitor) who interacts with our platform.

This Privacy Policy governs all personal data collected, processed, stored, transferred, or otherwise handled by FilingHub in connection with:

• Your use of and access to the FilingHub website;

• Your registration or account creation on our platform;

• Your engagement with us for any service (consultancy, filing, compliance, registration, etc.);

• Your communication with our team via email, WhatsApp, phone, or any other channel;

• Payment transactions carried out on or through our platform.

2. Legal Framework and Applicable Laws

This Policy is framed in compliance with all applicable Indian laws governing data privacy and digital commerce.

This Privacy Policy is drafted in accordance with and regulated by the following laws, rules, and guidelines:

• Digital Personal Data Protection Act, 2023 (DPDP Act) — the primary statute governing processing of digital personal data in India;

• Information Technology Act, 2000 (IT Act) — governs electronic records, digital signatures, and cybercrimes;

• Information Technology (Amendment) Act, 2008 — extends provisions on data protection and cybersecurity;

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) — prescribes standards for collection and handling of sensitive personal data;

• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (IT Rules 2021) — imposes obligations on online platforms regarding user data and grievance redressal;

• Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020 — protect consumer rights in online transactions;

• Indian Contract Act, 1872 — governs the validity and enforceability of digital agreements and consent;

• Reserve Bank of India (RBI) Guidelines on Payment Aggregators and Payment Gateways — applicable to payment data processing;

• Goods and Services Tax Act, 2017 — to the extent data is processed for GST compliance purposes;

• Income-tax Act, 1961 — to the extent data is processed for litigation purposes under the Act;

• Income-tax Act, 2025 — to the extent data is processed for tax filing purposes;

• Companies Act, 2013 — to the extent data relates to MCA and ROC filings;

• Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI) — governs commercial communication via SMS and voice.

3. Key Definitions

Terms used in this Policy carry the meanings assigned below, consistent with the DPDP Act, 2023.

"Data Principal"

Any individual whose personal data is processed. Where the individual is a minor or a person with disability, it includes their parent or lawful guardian.

"Data Fiduciary"

FilingHub Corporate Advisors — the entity that determines the purpose and means of processing personal data.

"Data Processor"

Any third party that processes personal data on behalf of FilingHub (e.g., cloud hosting providers, payment gateways).

"Personal Data"

Any data about an individual who is identifiable by or in relation to such data.

"Sensitive Personal Data"

Financial data (bank account, credit/debit card details), PAN, Aadhaar, passwords, biometric data, health data, and official identifiers as specified under SPDI Rules 2011 and DPDP Act 2023.

"Processing"

Any operation performed on personal data — collection, recording, storage, use, sharing, transmission, disclosure, erasure, or destruction.

"Consent"

A free, specific, informed, unconditional, and unambiguous indication of agreement by a Data Principal to the processing of their personal data.

"Consent Manager"

A registered intermediary under the DPDP Act that enables Data Principals to give, manage, review, and withdraw consent.

"Significant Data Fiduciary"

A Data Fiduciary notified by the Central Government based on volume and sensitivity of data processed — FilingHub will comply if so notified.

4. Categories of Personal Data Collected

We collect only such personal data as is necessary and proportionate to the purpose for which it is collected.

4.1 Identity and Contact Information

• Full legal name, date of birth, gender;

• Residential and business address;

• Email address and mobile/telephone number;

• Photograph (where required for regulatory purposes).

4.2 Government-Issued Identifiers (Sensitive Personal Data)

• Permanent Account Number (PAN);

• Aadhaar (collected only where legally required and with explicit consent);

• GST Identification Number (GSTIN);

• Corporate Identification Number (CIN), Director Identification Number (DIN);

• Import Export Code (IEC), FSSAI License Number;

• Passport, Voter ID, Driving Licence (as applicable for specific services).

4.3 Financial and Tax Data (Sensitive Personal Data)

• Bank account details (account number, IFSC code) / CANCEL CHEQUE.

• Payment instrument details processed through secure third-party payment gateways (not stored by FilingHub);

• Income details, TDS certificates, Form 16, balance sheets, profit and loss statements;

• GST returns, tax challans, and related financial documents;

• Invoice and transaction records related to services rendered.

4.4 Business Information

• Company or LLP name, registered address, nature of business;

• Director/partner details and shareholding information;

• Memorandum and Articles of Association, partnership deeds;

• Licenses, registrations, and statutory certificates.

4.5 Technical and Usage Data

• IP address, browser type and version, operating system;

• Pages visited, time spent, clickstream data;

• Cookies and tracking technologies (see Section 10);

• Device identifiers and geolocation data (where enabled by the user).

4.6 Communication Data

• Records of correspondence via email, WhatsApp, telephone, or chat;

• Feedback, queries, complaints, and survey responses;

• Call recordings (where legally permissible and with prior notice).

5. Purpose and Legal Basis for Processing

FilingHub processes your personal data only for specified, legitimate purposes. We rely on one or more of the following legal bases under the DPDP Act, 2023.

5.1 Consent (Section 6, DPDP Act)

Processing is based on your free, informed, and specific consent — provided at the time of account creation, service engagement, or communication sign-up. You may withdraw consent at any time (see Section 12).

5.2 Legitimate Uses (Section 7, DPDP Act)

Processing without consent where necessary for:

• Compliance with a judgment, order, or decree of a court or tribunal;

• Response to a medical emergency threatening life;

• Employment-related processing covered under applicable labour law;

• Processing to provide benefits or services to Data Principals by the State.

5.3 Specific purposes for which your data is processed

• Creating and managing your FilingHub account and service profile;

• Providing contracted services — GST filing, income tax returns, MCA compliance, business registrations, accounting, etc.;

• Processing payments and issuing invoices, receipts, and refunds;

• Filing returns, applications, and communications with statutory authorities (Income Tax Department, GST Network, MCA Portal, FSSAI, MSME, etc.) on your behalf and with your authorisation;

• Complying with mandatory reporting obligations under Indian tax, corporate, and financial laws;

• Communicating service updates, document requests, filing reminders, and deadlines;

• Sending marketing communications and newsletters (with opt-in consent only);

• Investigating complaints, handling disputes, and legal proceedings;

• Improving our website, services, and user experience through analytics;

• Fraud prevention, identity verification, and information security;

• Maintaining statutory records and audit trails as required by applicable law.

6. Sharing and Disclosure of Personal Data

We do not sell your personal data. We share it only as necessary and as described below.

6.1 Statutory Authorities and Government Portals

Filing of tax returns, GST returns, MCA forms, and other applications necessarily involves submission of your data to government portals including the Income Tax e-Filing Portal, GST Network (GSTN), MCA21, TRACES, EPFO, ESIC, and similar authorities. Such sharing is carried out with your explicit authorisation as part of the contracted service.

6.2 Data Processors (Third-Party Service Providers)

FilingHub engages third-party data processors who act under our instructions and under written data processing agreements ensuring adequate data protection:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud, Azure);

• Payment gateway providers (e.g., Razorpay, Paytm, CCAvenue) — payment card data is processed directly by them and not stored by FilingHub;

• Communication service providers for SMS, email, and WhatsApp notifications;

• Accounting and document management software vendors;

• Legal and compliance software platforms.

6.3 Professional Advisors

Our auditors, legal counsel, and insurers may access your data to the extent necessary for their professional functions, subject to confidentiality obligations.

6.4 Legal Obligations and Law Enforcement

We may disclose your data where required by law, court order, regulatory direction, or to prevent fraud, protect rights, or ensure compliance with applicable statutes. We will notify you of such disclosure where legally permissible.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of the Firm's business, your data may be transferred to the successor entity, subject to equivalent privacy protections. We will notify you of any such transfer.

6.6 Cross-Border Transfers

Where your personal data is transferred outside India (e.g., to cloud servers located abroad), such transfers are carried out in compliance with Section 16 of the DPDP Act and any Rules or whitelist of countries notified by the Central Government. We implement standard contractual clauses or equivalent safeguards for such transfers.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes stated in this Policy and as required by applicable law. If you has not availed our services for continuous period of more than 6 months that data will be deleted and the below mentioned period will not prevail

The following minimum retention periods apply

Tax & GST Records

Retention Period: 8 years | Legal Basis: Income-tax Act, CGST Act

MCA / Company Records

Retention Period: 8 years | Legal Basis: Companies Act, 2013

Financial / Accounting Records

Retention Period: 8 years | Legal Basis: Companies Act / IT Act

Client Identity Data

Retention Period: Duration of engagement + 5 years | Legal Basis: DPDP Act, Contract Act

Payment Transaction Logs

Retention Period: 8 years | Legal Basis: RBI Guidelines

Communication Records

Retention Period: 3 years | Legal Basis: DPDP Act

Website Usage / Logs

Retention Period: 1 year | Legal Basis: IT Rules 2021

Aadhaar-related Data

Retention Period: As required or until consent withdrawn | Legal Basis: Aadhaar Act, DPDP Act

Upon expiry of the applicable retention period, personal data is securely erased, anonymised, or destroyed in a manner that prevents reconstruction.

8. Rights of Data Principals (DPDP Act, 2023)

Under the DPDP Act, 2023, you have the following rights, which we are obligated to honour subject to applicable conditions.

8.1 Right to Access Information (Section 11)

You have the right to obtain from FilingHub: (a) a summary of the personal data we process about you; (b) the identities of all Data Processors and third parties with whom your data has been shared; and (c) any other information regarding your data processing.

8.2 Right to Correction and Erasure (Section 12)

You have the right to: (a) correct inaccurate or incomplete personal data; (b) update your personal data; and (c) request erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations that may override this right.

8.3 Right to Grievance Redressal (Section 13)

You have the right to have your grievances regarding data processing addressed within a reasonable timeframe. Please refer to Section 14 for our grievance redressal mechanism.

8.4 Right to Nominate (Section 14)

You may nominate another individual (a "Nominee") to exercise your rights in the event of your death or incapacity.

8.5 Right to Withdraw Consent (Section 6(4))

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal. Note: withdrawal of consent from core service-related processing may result in FilingHub's inability to provide the relevant service.

8.6 Right to Complain to the Data Protection Board

If your grievance is not resolved by FilingHub to your satisfaction, you may lodge a complaint with the Data Protection Board of India, once established under the DPDP Act.

8.7 How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to our Grievance Officer at the contact details provided in Section 14. We will respond within the timeframe stipulated under the DPDP Act and applicable Rules.

9. Children's Personal Data

FilingHub does not knowingly collect, process, or store personal data of children (individuals below the age of 18 years) without verifiable parental or guardian consent, as required under Section 9 of the DPDP Act, 2023.

Our services are primarily designed for adult individuals and business entities. If we become aware that we have inadvertently collected personal data of a minor without verifiable parental consent, we will promptly delete such data and, where applicable, deactivate the associated account.

FilingHub does not engage in behavioural monitoring or targeted advertising directed at children.

10. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar technologies to enhance your browsing experience, analyse usage patterns, and deliver relevant communications.

Types of cookies used

• Strictly Necessary Cookies

Essential for website functionality (session management, security, login). These cannot be disabled.

• Performance/Analytics Cookies

Help us understand how visitors interact with the website (e.g., Google Analytics). These are anonymised where possible.

• Functional Cookies

Remember your preferences (language, region, display settings).

• Marketing/Targeting Cookies

Used to serve relevant advertisements and track campaign effectiveness. These are activated only with your consent.

You may manage or disable non-essential cookies through your browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

11. Information Security and Data Protection Measures

FilingHub implements industry-standard technical, organisational, and administrative measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• SSL/TLS encryption for all data in transit;

• AES-256 encryption for sensitive data at rest;

• Multi-factor authentication for platform access;

• Role-based access controls limiting data access to authorised personnel on a need-to-know basis;

• Regular security audits, penetration testing, and vulnerability assessments;

• Secure data centres with physical access controls;

• Employee training on data protection and confidentiality obligations;

• Incident response and breach notification procedures.

In the event of a personal data breach that is likely to cause harm to Data Principals, FilingHub will notify the Data Protection Board of India and affected individuals as required under the DPDP Act and in accordance with applicable timelines.

Notwithstanding the foregoing, no system of data transmission or storage can be guaranteed to be 100% secure. FilingHub does not accept liability for breaches attributable to events beyond its reasonable control.

12. Consent and Opt-Out Mechanisms

12.1 Providing Consent

Consent is obtained at the time of: (a) account registration through a tick-box affirming acceptance of this Policy; (b) engagement initiation through signing of an engagement letter or service agreement; (c) marketing communications sign-up through explicit opt-in checkboxes (pre-ticked boxes are not used).

12.2 Withdrawing Consent

You may withdraw consent at any time by: (a) emailing our Grievance Officer; (b) using the "Unsubscribe" link in any marketing email; (c) contacting us through the details in Section 14. Note that withdrawal may affect our ability to provide certain services.

12.3 Consent Records

FilingHub maintains records of consent given by each Data Principal — including the timestamp, the purpose for which consent was given, and the version of this Policy in force at the time — in compliance with the DPDP Act.

13. Third-Party Websites and Links

Our website may contain hyperlinks to third-party websites, tools, or resources. This Privacy Policy does not apply to such third-party websites. FilingHub is not responsible for the privacy practices, content, or security of any external sites. We encourage you to read the privacy policies of any third-party website you visit.

14. Grievance Redressal — Contact Our Grievance Officer

In accordance with the DPDP Act, 2023, the IT Act, 2000, and the IT Rules 2021, FilingHub has appointed a Grievance Officer for data protection matters.

Grievance Officer Contact Details

• Name

[Grievance Officer Name]

• Designation

Grievance Officer — Data Protection

• Organisation

FilingHub Corporate Advisors

• Postal Address

Delhi, India

• Response Time

Within 48 hours of receipt (acknowledgement); resolution within 30 days.

For any data protection concerns — including requests to access, correct, erase, or port your personal data, or to withdraw consent — please contact the Grievance Officer using the details above.

If your grievance is not resolved to your satisfaction within 30 days, you may approach the Data Protection Board of India upon its constitution under the DPDP Act.

15. Amendments to This Privacy Policy

FilingHub reserves the right to update or modify this Privacy Policy at any time to reflect changes in law, regulatory guidance, business operations, or technology. Amended versions will be published on our website with a revised "Effective Date". Where changes are material, we will provide prominent notice on our website and, where required by law, seek fresh consent.

We encourage you to review this Policy periodically. Continued use of our website or services after the publication of a revised Policy constitutes your acceptance of the updated terms.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts located in Delhi, India.

17. Miscellaneous

17.1 Severability

If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

17.2 Entire Agreement

This Policy, read together with FilingHub's Terms and Conditions and any applicable engagement letter or service agreement, constitutes the complete agreement between FilingHub and you with respect to the processing of your personal data.

17.3 Language

This Policy is written in English. In case of any discrepancy between translated versions and the English version, the English version shall prevail.

CLIENT ACKNOWLEDGEMENT

By accessing the FilingHub website or using our services, you confirm that you have read, understood, and agree to this Privacy Policy in its entirety. You confirm that you are of lawful age and legal capacity to enter into binding agreements under Indian law. You consent to the collection, processing, storage, and sharing of your personal data as described herein. If you are acting on behalf of a company or organisation, you represent that you have the authority to bind that entity to this Policy.

© 2026 FilingHub Corporate Advisors. All rights reserved.

https://filingsimple.com | grievance@filinghub.in