1. Introduction
Mustafa E-Services Private Limited (“MEPL”, “we”, “us”) is committed to protecting the privacy and personal data of our users and clients. This Privacy Policy explains how we collect, use, process, and safeguard your personal data in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.
2. Data Fiduciary
MEPL acts as the Data Fiduciary for the personal data collected through this Platform.
Registered Address: Hakimi Mansion, Behind Bangalore Bakery, Kasturba Road, Chandrapur, Maharashtra 442402.
3. Data We Collect
We may collect the following categories of personal data:
- Identity Data: Name, PAN, Aadhaar number, Director Identification Number (DIN), and other KYC documents.
- Contact Data: Email address, phone number, and physical address.
- Financial Data: Bank account details, transaction history, and tax-related information.
- Service Data: Documents uploaded for filings (e.g., invoices, bank statements, incorporation documents).
- Technical Data: IP address, browser type, and usage logs.
4. Purpose of Processing
We process your personal data for the following purposes:
- To provide professional services and complete statutory filings.
- To verify identity and conduct KYC as required by regulatory authorities.
- To communicate service updates, invoices, and compliance alerts.
- To prevent fraud and ensure the security of our Platform.
- To comply with legal obligations under Indian law.
5. Lawful Basis for Processing
Under the DPDP Act 2023, we process data based on:
- Consent: Explicit consent provided by you at the time of data collection.
- Legitimate Uses: Processing necessary for fulfilling a legal obligation or for specific purposes for which you have voluntarily provided data.
6. Data Sharing & Processors
We share data with third parties only to the extent necessary to deliver our services:
- Government Portals: MCA, GSTN, ITD, etc., for statutory filings.
- Service Processors: Cloud storage providers, payment gateways, and communication tools (WhatsApp/Email).
- Professional Associates: Chartered Accountants or Advocates engaged for specific expert opinions.
We ensure that all data processors adhere to strict confidentiality and security standards.
7. Your Rights (Data Principal Rights)
Under the DPDP Act 2023, you have the right to:
- Right to Access: Request a summary of your personal data being processed.
- Right to Correction/Erasure: Request correction of inaccurate data or erasure of data no longer required for the purpose.
- Right to Withdraw Consent: Withdraw your consent at any time, subject to legal or contractual restrictions.
- Right to Grievance Redressal: Approach our Grievance Officer for any concerns.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements (typically 8 years for tax-related records).
9. Security Safeguards
We implement reasonable security practices and procedures, including encryption and access controls, to protect your data from unauthorized access, alteration, or disclosure.
10. Grievance Redressal
If you have any questions or grievances regarding your data, please contact our designated Grievance Officer:
Name: [●]
Email: roc@mustafaco.com
Address: Hakimi Mansion, Behind Bangalore Bakery, Kasturba Road, Chandrapur, Maharashtra 442402.