Privacy & Client Data Confidentiality Policy
Srivastava Kumar & Co. is committed to upholding the highest standards of confidentiality, professional privilege, and data security under the Chartered Accountants Act, 1949, and the Digital Personal Data Protection (DPDP) Act, 2023.
Statutory Confidentiality
Client financial records, income filings, audit working papers, and trust structures are protected under the professional confidentiality mandate of the ICAI Code of Ethics and SA 230.
Zero Public Web Storage
Interactive tools on this public portal (such as the NRI Tax Residency Calculator) execute 100% locally in your browser. No personal financial data is stored on web servers.
1. Scope and Applicability
This Privacy Policy applies to all digital interactions with Srivastava Kumar & Co., including our public web portal (skcca.com) and client management systems. It governs the handling of personal identifiers, business financials, and statutory filing data entrusted to us.
2. Digital Personal Data Protection (DPDP) Principles
Purpose Limitation: We collect and process client financial information solely for executing agreed professional services (Statutory Audits, Tax Filings, Trust Structuring, ROC compliance) under formal Engagement Letters.
No Commercial Sharing or Sale: We do not sell, rent, monetize, or disclose client personal or business information to any external commercial marketing entities under any circumstances.
Data Retention & Erasure: Client records are retained strictly in accordance with statutory limitation periods prescribed under the Companies Act 2013, the Income Tax Act 1961, and ICAI Quality Control standards (SQC 1).
3. Electronic Safeguards & ISO 27001 Security
Our electronic infrastructure employs multi-factor authentication, encrypted communications, and isolated database architectures. Access to client working files is strictly restricted to authorized audit teams and partners assigned to the engagement.
4. Exclusion of Progressive Web App (PWA) & Offline Caching
To guarantee maximum client confidentiality on multi-user and shared workstations, the platform explicitly excludes Progressive Web App (PWA) installation, background web app manifests, and offline Service Worker caching. All sessions remain strictly live and ephemeral over encrypted HTTPS.