ITR E-Filing Logo
Data Protection & Privacy

Privacy Policy

At ITR E-File, we prioritize the security and confidentiality of your personal and financial information. This policy explains how we collect, use, and protect your data in compliance with Indian laws.

Last updated: September 25, 2025

By using our services, you consent to the practices described in this policy. We comply with all applicable Indian laws, including the Information Technology (Reasonable Security Practices) Rules, 2011 and ICAI’s Code of Ethics.

Information We Collect

Personal Information

  • Full name, contact details (email, phone, address)
  • Government-issued IDs (PAN, Aadhaar, GSTIN, etc.)
  • Financial data (income, expenses, investments, bank details)
  • Business/employment information

Technical Information

  • IP address, browser/device details, and usage analytics
  • Cookies and tracking technologies (see [Cookies Section](#cookies))
  • Location data (with explicit consent)

How We Use Your Information

Service Delivery

  • Processing tax filings, audits, and compliance documents
  • Providing financial advisory and consulting services
  • Communicating service updates and regulatory changes

Legal & Operational Needs

  • Compliance with Indian tax laws and ICAI regulations
  • Fraud prevention and security monitoring
  • Improving services (anonymized analytics)

Information Sharing & Disclosure

Authorized Recipients

  • Government agencies (Income Tax Department, GSTN, MCA)
  • Banks/financial institutions (for loan/financial services)
  • Professional advisors (auditors, lawyers) under confidentiality agreements
  • Service providers (cloud hosting, payment processors) with strict data protection clauses

We Never Share For

  • Unauthorized marketing or third-party sales
  • Purposes unrelated to our professional services
  • Any use without explicit consent or legal obligation

Data Security Measures

Technical Safeguards

  • 256-bit SSL encryption for all data transmissions
  • Firewalls, intrusion detection, and regular security audits
  • Multi-factor authentication for system access
  • Encrypted storage for sensitive documents

Administrative Protocols

  • Strict access controls (need-to-know basis)
  • Annual privacy training for all staff
  • Confidentiality agreements with employees and vendors
  • Secure disposal of physical/electronic records

Your Privacy Rights

Your Entitlements

  • Access, correct, or update your personal data
  • Request deletion (subject to legal retention requirements)
  • Opt-out of marketing communications
  • Withdraw consent for non-essential processing

How to Exercise Rights

  • Email: privacy@itrefile.com
  • Call: +91-9876543210 (Mon-Fri, 9 AM - 6 PM)
  • Visit our office with valid ID

Data Retention Policy

We retain your information only as long as necessary for legal, operational, or compliance purposes:

Data CategoryRetention PeriodLegal Basis
Tax Returns & Financial Records
7 years
Mandated by Income Tax Act, 1961 and Companies Act, 2013
Audit Documentation
8 years
As per ICAI auditing standards and regulatory requirements
Client Communication
3 years
For service quality and dispute resolution
Marketing Data
Until consent withdrawn
Used only with explicit opt-in consent

Cookies & Tracking Technologies

We use cookies to enhance your experience. You can manage your preferences via browser settings:

Essential Cookies

Required for core functionality (login, security, session management). Cannot be disabled.

Analytics Cookies

Help us improve services by analyzing usage patterns. Can be opted out via browser settings.

Marketing Cookies

Used for targeted advertising and campaign tracking. Requires explicit consent.

Contact Us

For privacy-related queries or to exercise your rights, contact us:

Phone

+91-9876543210

Mon-Fri, 9 AM - 6 PM

Email

privacy@itrefile.com

Response within 24-48 hours

Office

119, 1st floor, Aggarwal Plaza,
Rohini sector-5, New Delhi - 110085

Your Privacy is Our Priority

At ITR E-File, we are committed to protecting your data with the highest standards of security and confidentiality. This policy is effective from September 25, 2025.