Privacy Policy

1. Information We Collect

In the course of providing corporate advisory, company incorporation, tax filing, secretarial retainership, and legal services, we collect personal and business information necessary to execute government filings and regulatory compliance:

• Identity & KYC Data: Promoter name, PAN Card, Aadhaar Card, Passport, Voter ID, Director Identification Number (DIN), and Digital Signature Certificate (DSC) data.
• Contact Information: Official email address, phone numbers, registered business address, and residential address proofs.
• Financial & Business Records: Bank statements, Income Tax Return (ITR) data, GST returns, financial ledgers, audit reports, shareholding patterns, and cap-table details.
• Technical & Website Usage Data: IP address, browser metadata, page visit analytics, and contact form submission logs.

2. Purpose & Legal Basis of Processing

We process your data strictly for legitimate professional and statutory purposes:

• Executing company incorporation and filing SPICe+, RUN, and INC-20A forms with the Ministry of Corporate Affairs (MCA21).
• Filing Income Tax Returns (ITR), GST Returns (GSTR-1, 3B, 9), and executing statutory tax audits under Section 44AB.
• Preparing Secretarial returns (AOC-4, MGT-7), maintaining statutory registers, and managing Director KYC (DIR-3 KYC).
• Submitting FDI and cross-border filings on the Reserve Bank of India (RBI) FIRMS portal under FEMA guidelines.
• Communicating critical compliance deadlines, tax notices, and regulatory updates.

3. Data Security & Encryption Standards

We implement bank-grade 256-bit SSL encryption, restricted role-based access control, and encrypted cloud storage for all client KYC documents and financial ledgers. Access to sensitive corporate documents is restricted exclusively to the assigned Chartered Accountant, Company Secretary, or Legal Counsel executing your file.

4. Information Sharing & Third-Party Disclosure

MARCS does NOT sell, rent, or trade client personal or business data to third-party advertisers. Data is shared strictly with authorized statutory government portals:

• Government Regulatory Authorities: Ministry of Corporate Affairs (MCA), Income Tax Department (ITD), GST Council, Reserve Bank of India (RBI), DPIIT, and Intellectual Property India (CGPDTM).
• Certified Service Partners: Licensed Digital Signature Certificate (DSC) Certifying Authorities (CAs) and banking partners for account opening assistance.
• Legal Obligations: When compelled by valid judicial orders, law enforcement, or statutory investigation notices under Indian law.

5. Data Retention & Erasure

Statutory corporate and financial records are retained in accordance with the Companies Act 2013 and Income Tax Act 1961 guidelines (typically 8 financial years). Non-essential transient records are securely erased upon completion of the engagement upon client request.

6. Cookies & Web Analytics

Our website uses minimal operational cookies and analytics tags (such as Meta Pixel and PageSense) to measure user engagement and optimize web page response times. You can modify your browser settings to disable non-essential cookies.

7. Grievance Redressal & Contact Officer

For data protection inquiries, access requests, or grievance redressal under the DPDP Act 2023, please contact our Data Protection Desk: