Who is responsible

VPRP & Co LLP, Chartered Accountants, B-013 Western Edge II, Borivali East, Mumbai 400066, is responsible for the website information it collects. VPRP's privacy contact answers questions and rights requests at contact@vprpca.com.

Information collected

We may collect your name, contact details, company, role, company type, turnover band, service requirement, form answers, scorecard results, calendar inputs, brochure requests, campaign source and anything in a message or uploaded document. Careers applications may include education, employment and resume information. Technical logs may include IP address, browser, device and security data.

Why it is used

To respond to enquiries, assess service fit, deliver requested reports or brochures, manage appointments and applications, maintain records, protect forms from misuse, measure website performance and, only where separately chosen, send updates.

Service providers and sharing

Website hosting, Google analytics and spam protection, email and the booking calendar may process information for VPRP. Client work may also involve digital-signature vendors, stamp-paper vendors and government portals. VPRP does not sell personal information and does not share client information outside the described service or a legal requirement without consent.

Retention

Enquiries, scorecard and planning-tool submissions that do not become clients are kept for 24 months after the last contact. Unsuccessful job applications are kept for 12 months. Update-list details remain until unsubscribe. Website security logs are kept for at least one year. Client records are kept for the periods required by law and ICAI obligations.

Your choices and requests

Write to contact@vprpca.com to ask what information VPRP holds, request correction or deletion, withdraw consent, unsubscribe or raise a grievance. Withdrawal is designed to be as easy as giving consent. Every updates email must carry an unsubscribe link.

Grievances and the Data Protection Board

VPRP will respond to privacy grievances within a reasonable period not exceeding 90 days. After using VPRP's grievance process, a person may make a complaint to the Data Protection Board of India through the official mechanism made available by the Board.

Language

You may request the notice or consent information in English or a language in the Eighth Schedule to the Constitution by writing to contact@vprpca.com.

Security and transfers

VPRP uses reasonable administrative and technical controls to restrict access. Some technology providers may process information outside India; VPRP uses providers and safeguards appropriate to the service and applicable law.

Effective date and changes

Effective 6 November 2026. This policy may change with the website, providers or legal obligations. The page will show the revised date.

DPDP timing.

The Digital Personal Data Protection Rules were notified on 13 November 2025. Most operative duties referenced here commence 18 months later. VPRP is applying these practices early.