Privacy Policy

1. Scope

This Policy applies to information collected through kosha.services, enquiry forms, consultation requests, email or phone interactions, and documents shared with us for providing compliance services. It does not apply to websites, applications, or services that we do not own or control.

2. Information We Collect

• Contact and enquiry details such as name, work email, phone number, company name, team size, service needs, and messages submitted through our forms.
• Business and compliance information you provide for service delivery, including registration details, employee or payroll information, GST, TDS, income tax, accounting, ROC, legal, and corporate documents.
• Billing and transaction information, including invoices, payment status, tax information, and records needed for accounting and statutory compliance.
• Technical and usage information such as IP address, browser type, device details, referral page, form submission metadata, logs, and website interaction data.
• Communications exchanged with us by email, phone, support channels, or messaging tools.

3. How We Use Information

• To respond to enquiries, schedule consultation calls, and provide proposals.
• To deliver HR, labour, GST, accounting, income tax, TDS, legal, and corporate compliance services.
• To prepare filings, reports, registers, notices, advisory notes, and other service deliverables requested by you.
• To manage billing, accounting, tax records, service administration, and customer support.
• To improve our website, service workflows, forms, communication quality, and operational security.
• To comply with applicable laws, statutory obligations, audits, government requests, and dispute resolution needs.

4. Legal Bases and Consent

Where applicable, we process personal information based on your consent, our contractual need to provide requested services, our legitimate interest in running and securing our business, and legal obligations that apply to tax, accounting, labour, corporate, and regulatory records. You may withdraw consent where processing depends on consent, but this may limit our ability to provide some services.

5. Sharing and Disclosure

We do not sell personal information. We may share information only as needed with our team members, professional advisers, technology vendors, payment or communication providers, government portals, statutory authorities, banks, auditors, or other parties required for lawful service delivery. Where a third party processes information for us, we expect appropriate confidentiality and security safeguards.

6. Cookies and Third-Party Tools

Our website may use cookies, pixels, embedded scripts, CDNs, analytics, engagement, and form processing tools to operate the website, remember preferences, secure submissions, understand performance, and respond to enquiries. You can control cookies through your browser settings, but disabling some cookies may affect website functionality.

7. Security

We use reasonable administrative, technical, and organizational measures to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and you should share sensitive documents only through channels you consider appropriate for the sensitivity of the information.

8. Data Retention

We retain information for as long as necessary to provide services, maintain records, comply with legal or statutory obligations, resolve disputes, enforce agreements, and support audits. When information is no longer needed, we will delete, archive, or anonymize it in accordance with our operational and legal requirements.

9. Your Rights

Subject to applicable law, you may request access, correction, update, deletion, restriction, withdrawal of consent, or a copy of personal information we hold about you. We may need to verify your identity and may retain certain records where required by law, accounting rules, tax rules, audits, or legitimate dispute management needs.

10. Data Transfers

Information may be stored or processed in India or in other locations where our service providers operate. When cross-border processing occurs, we use reasonable safeguards appropriate to the nature of the data and applicable law.

11. Children

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children through this website. If you believe a child has provided information to us, please contact us so we can review and delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. The latest version will be posted on this page with an updated effective date.

13. Contact