Privacy Policy

1. Business Identity & Controller Details

This Privacy Policy governs the processing of personal and business information by Sukirti Gaur, an independent professional accounting and bookkeeping support service operating from:

Sukirti Gaur acts as the data controller for information submitted through this website, and as a data processor or service provider for financial documentation provided under specific client service engagements.

2. Categories of Information We Collect

We collect and process only the information strictly necessary to communicate with you and perform agreed accounting support services:

• Enquiry Information: When you complete our website enquiry form, you provide your full name, email address, country, requested services, and written requirements. You may optionally provide a company name, phone number, and business classification.
• External Messaging Communications: Our website enquiry form prepares your details for transmission via WhatsApp. When you send the message, your WhatsApp profile name, phone number, and message history become accessible to us in WhatsApp.
• Client Engagement Financial Records: If you engage our services, you may share operational financial records such as vendor invoices, sales registers, customer bills, payroll timesheets, and electronic bank or credit card statements.
• Technical & Consent Data: Our website stores your cookie consent choice locally on your device (in browser local storage). We do not deploy invasive third-party cross-site trackers.

3. Purpose and Legal Bases for Processing

Where data protection laws such as the EU/UK General Data Protection Regulation (GDPR) or similar global standards apply, we process information under the following legal bases:

• Pre-contractual Steps & Contract Performance (Art. 6(1)(b) GDPR): Responding to your enquiries, preparing service proposals, agreeing on scope, and delivering the requested accounting support.
• Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring website operational security, preventing fraud, maintaining accurate business correspondence records, and resolving disputes.
• Consent (Art. 6(1)(a) GDPR): Where you explicitly activate optional analytical storage or consent to specific messaging channels.
• Legal Compliance (Art. 6(1)(c) GDPR): Complying with applicable Indian commercial, taxation, and record retention obligations.

4. Client Accounting Records Handling & Confidentiality

Accounting documentation shared under an engagement is treated as strictly confidential. We apply the following operational standards:

• Data Minimization: We request only records directly required to perform the agreed bookkeeping, reconciliation, or reporting tasks.
• No Credential Storage: We NEVER ask for or store your bank account passwords, login credentials, or payment execution authorization.
• Access Restrictions: Access to client files is restricted solely to authorized work execution.
• No Sale of Data: We never sell, lease, or monetize client personal or commercial data under any circumstances.

5. Third-Party Service Processors & International Transfers

To deliver remote accounting services, we utilize standard industry cloud infrastructure:

• WhatsApp (Meta Platforms): Used for voluntary customer messaging and enquiry handoff when initiated by you.
• Email & Cloud Storage Providers: Secure enterprise email (Google Workspace) and client-approved cloud folders (Google Drive, Microsoft OneDrive, Dropbox) for exchanging statements and registers.
• Web Hosting: Secure modern hosting platforms with encrypted HTTPS data transmission in transit.

Because Sukirti Gaur is located in India, information provided by clients in the US, Canada, Australia, Singapore, or the EU is transferred to and processed in India for the purpose of executing the requested services.

6. Data Retention and Deletion

We retain personal information only for as long as necessary to fulfill the purposes for which it was gathered:

• General Enquiries: Retained for up to 12 months following last correspondence if no engagement is formed.
• Client Engagement Accounting Deliverables: Retained for the duration of the engagement and up to 5 years following completion to support audit trails, dispute resolution, and regulatory obligations, unless earlier deletion is agreed in writing.

7. Your Data Protection Rights

Depending on your jurisdiction (including the EU, UK, Canada, Australia, and Singapore), you may have the following legal rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer legally justified.
• Right to Restriction: Request limitation of processing under specific circumstances.
• Right to Data Portability: Receive your provided data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time without affecting lawful prior processing.
• Right to Lodge a Complaint: Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact Sukirti Gaur at sukirtigaur55@gmail.com.

8. Updates to this Policy

We may review and update this Privacy Policy from time to time to reflect operational or regulatory changes. The date of the most recent revision will always be displayed at the top of this page.