Privacy Policy

1. Who we are

MN & Co., Chartered Accountants (“MN & Co.”, “we”, “us”) operates this website. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), MN & Co. acts as the Data Fiduciary in respect of personal data collected through this website.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you as a Data Principal.

2. Information we collect

We only collect personal data that you choose to provide to us, namely:

• Contact form: your name, email address, phone number, the service you are interested in, and your message.
• Newsletter sign-up: your email address.
• Direct communication: any information you share when you contact us by email, phone, or WhatsApp.

We do not require you to create an account, and we do not knowingly collect data from children.

3. How we use your information

We use the personal data you provide only to:

• respond to your enquiry and provide the professional services you request;
• communicate with you about your engagement or query;
• send you updates and resources, where you have subscribed to our newsletter; and
• meet our legal, regulatory, and professional obligations.

4. Consent and lawful basis

We process your personal data on the basis of the consent you give when you submit a form or contact us, and for the specified, lawful purposes set out above. You may withdraw your consent at any time by writing to us (see Grievance Redressal below); withdrawing consent does not affect processing carried out before the withdrawal.

5. Sharing and disclosure

We do not sell or rent your personal data. We may share it only with trusted service providers who help us operate this website or deliver our services, and only to the extent necessary, or where disclosure is required by law, regulation, or a competent authority.

6. Data retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, to maintain our professional records, and to comply with applicable legal and regulatory requirements. When data is no longer required, we take reasonable steps to erase or anonymise it.

7. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• request correction or completion of inaccurate or incomplete data;
• request erasure of your personal data, subject to legal retention requirements;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance regarding our handling of your personal data.

To exercise any of these rights, please contact our Grievance Officer below.

8. Cookies and third-party content

This website does not use advertising or tracking cookies. Some pages embed third-party content — such as Google Maps (on the contact page) and calculator tools (on the tools page) — which may set their own cookies and are governed by the privacy policies of those providers. Web fonts are loaded to display the site correctly.

9. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The latest version will always be available on this page.