Skip to content
Tax StationTax · Audit · Advisory

Privacy Policy

Our work requires you to hand us some of the most sensitive information you hold — PAN details, bank statements, financial records. This policy explains exactly what we collect, why, who ever sees it, and what you can ask us to do with it.

Last updated 19 August 2026

1. Scope of this policy

This Privacy Policy applies to Tax Station (“we”, “us”, “our”), to the website at taxstation.co.in, and to every professional engagement we accept. It is published in accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023.

By engaging us or by submitting information through this website, you confirm that you have read and understood this policy. If you do not agree with it, please do not send us personal information through this website.

2. Information we collect

Information you give us directly

  • Identity details — name, date of birth, PAN, Aadhaar, DIN or DPIN, photograph.
  • Contact details — mobile number, email address, residential and business address.
  • Business details — constitution of the entity, GSTIN, CIN or LLPIN, nature of activity, turnover, details of partners, directors, shareholders and authorised signatories.
  • Financial records — bank statements, invoices, purchase and sales registers, books of account, financial statements, prior returns, loan sanction letters and investment proofs.
  • Portal credentials — where you choose to share GST, income tax, MCA or DGFT login details so that we can file on your behalf.
  • Anything else you send us in the course of an engagement, over email or WhatsApp.

Information collected automatically

  • Basic technical data when you visit this website — IP address, browser type, device type, referring page and pages viewed — used only in aggregate to understand traffic.
  • Your theme preference, stored locally in your own browser. It never leaves your device and is not sent to us.

What this website does not do: the enquiry form on this site does not submit to a server or a database. It composes a message that you send to us yourself over WhatsApp or your own email client. Nothing you type into it is stored on this website. The same is true of the Compliance Check tool — it runs entirely in your browser, and your answers are never transmitted to us unless you choose to send them.

3. How we use your information

  • To prepare, review and file returns, applications and forms on your behalf.
  • To respond to your enquiries and provide a scope and a fee quotation.
  • To communicate with tax, corporate affairs and other government departments in connection with your matter, and to respond to notices and clarifications.
  • To raise invoices, collect professional fees and maintain our own accounting records.
  • To remind you of upcoming statutory due dates and to inform you of changes in law that affect your compliance obligations.
  • To meet our own obligations under applicable law, including record-keeping and any anti-money-laundering or know-your-client requirements that apply to us.

We do not sell your personal information. We do not rent, trade or otherwise make it available to third parties for their own marketing.

4. Lawful basis and consent

We process your information on the basis of the consent you give when you engage us, and where processing is necessary to perform the engagement you have asked us to carry out or to comply with a legal obligation.

You may withdraw your consent at any time by writing to us at info@nam.co.in. Withdrawal takes effect prospectively. It will not affect processing already carried out, it may make it impossible for us to continue an ongoing engagement, and it does not override information we are required by law to retain.

5. Information about your employees

Where you engage us for payroll, PF, ESI or TDS work, you will share personal information about people who are not our clients — your employees. That information is theirs, not yours, and we treat it accordingly.

  • We process it only to run the payroll and make the filings you have engaged us for. We do not use it for anything else.
  • It typically includes name, PAN, Aadhaar, UAN, bank details, salary and attendance, and investment declarations and proofs.
  • It is disclosed only to the authorities the filing requires — EPFO, ESIC, the income tax department and the relevant state authority.
  • It is retained for the period the law requires records to be kept, and then deleted.
  • You are responsible for having a lawful basis to share it with us, and for telling your employees that a professional firm processes their payroll.

The same applies to any personal information you give us about directors, partners, shareholders, nominees or counterparties.

6. When we share information

We disclose your information only in these situations:

  • Government departments and portals — the GST Network, Income Tax Department, Ministry of Corporate Affairs, DGFT, Udyam portal and similar authorities, to the extent required to make the filing you have engaged us for.
  • Banks, NBFCs and financial institutions — only where you have engaged us for a loan, project report, CMA data or subsidy matter, and only with your knowledge.
  • Certifying authorities — for the issue of a Digital Signature Certificate at your request.
  • Intellectual property offices — the Trade Marks Registry, Copyright Office and Patent Office, where you have engaged us for a filing. Note that trademark and patent applications become part of a public register.
  • Professionals associated with your matter — a Chartered Accountant, Company Secretary, valuer or advocate whose certification or opinion your filing requires. They are bound by their own professional confidentiality obligations.
  • Service providers — email, storage and communication providers we use to run our practice, under confidentiality obligations and only to the extent necessary.
  • Where the law requires it — in response to a valid summons, notice, court order or lawful demand from a statutory authority.

7. How long we keep it

We keep your records for as long as the engagement continues, and afterwards for the period we are required to retain them under the Income Tax Act, the GST law, the Companies Act and our own professional obligations — generally eight years from the end of the relevant financial year, and longer where a matter, assessment or proceeding is still open.

Once that period ends and no legal or professional requirement to retain the record remains, we delete or securely destroy it. You may ask us to erase your information earlier and we will do so to the extent the law permits.

8. How we protect it

  • Access to client records is restricted to the personnel working on your matter.
  • Our staff are bound by written confidentiality obligations.
  • Digital records are held on access-controlled, password-protected systems.
  • Physical documents are held in locked storage at our offices.
  • Portal credentials are used only to carry out the work you have engaged us for.

We ask that you do not send passwords, OTPs or banking credentials over unsecured channels. No method of transmission over the internet is completely secure, and while we protect your information using reasonable security practices, we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may ask us to:

  • Confirm what personal information about you we hold, and give you a summary of it.
  • Correct anything that is inaccurate, incomplete or out of date.
  • Erase information we no longer have a legal or professional reason to keep.
  • Stop using your details for reminders or informational messages.
  • Tell you who your information has been shared with in connection with your matter.

Write to info@nam.co.in and we will respond within a reasonable period, ordinarily within thirty days. We may need to verify your identity before acting on a request.

10. Cookies and this website

This website does not set advertising or cross-site tracking cookies and does not run third-party advertising scripts. Your colour theme preference is saved in your browser's local storage so the site remembers it on your next visit; you can clear it at any time through your browser settings.

Fonts used by this site are served from the site itself rather than a third-party font network, so visiting these pages does not disclose your visit to a font provider.

Links to external websites — including WhatsApp, Google Maps, government portals and social media — are provided for your convenience. Once you follow such a link, that site's own privacy policy applies and this one does not.

11. Children

Our services are intended for adults and for businesses. We do not knowingly collect personal information from a child except where it is furnished by a parent or guardian as part of a filing that legitimately requires it, such as a PAN application or a minor's income disclosure.

12. Changes to this policy

We may revise this policy to reflect changes in our practice or in the law. The revised version takes effect when it is published on this page, and the “last updated” date above will change. Where a change materially affects how we handle your information, we will make reasonable efforts to inform ongoing clients directly.

13. Contact and grievances

For any question about this policy, or to raise a grievance about how your information has been handled, contact:

We acknowledge grievances within forty-eight hours and aim to resolve them within thirty days of receipt.

WhatsApp