Privacy Policy

1. Who we are

Agarwal M & Co. — Chartered Accountants (“we”, “us”, “our”) operates this website, mayuragr.com. We are the data fiduciary / controller responsible for your personal data. Our office is at Sunder Complex, Gandhi Park Road, Tinsukia – 786 125, Assam, India.

2. What we collect

We collect only what we need to respond to you and operate the site:

• Details you give us via the contact form — name, email, phone, organisation (if provided), the service you’re interested in, and your message.
• Technical data needed to deliver and secure the site — such as your IP address and basic request logs, kept transiently by our hosting/CDN and spam-protection providers. We do not run advertising or analytics tracking.

3. Why we use it, and our lawful basis

We use your information to respond to your enquiry, provide the services you ask about, and keep the site secure. Our lawful bases are your consent (which you give when you submit the form) and our legitimate interests in operating and protecting the site. You can withdraw consent at any time (see your rights below).

4. Cookies & analytics

We use the minimum necessary and run no advertising or analytics cookies. Your light/dark theme choice is stored locally in your browser (localStorage) and never leaves your device. When you submit the contact form, our spam-protection provider (hCaptcha) may set cookies strictly to confirm you are human. If we ever add analytics, we will ask for your consent first and update this policy.

5. Who we share it with

We do not sell your data. We share it only with trusted providers who help us run the site and respond to you:

• Cloudflare — website hosting and content delivery (Cloudflare Pages).
• Web3Forms — securely delivers your contact-form enquiry to our email.
• hCaptcha (Intuition Machines, Inc.) — protects the form from spam and abuse.

Each processes data on our behalf under its own data-processing terms.

6. International transfers

The providers above may process limited data on servers outside India (for example in the EU or the United States). Where that happens, the transfer is governed by those providers’ data-processing terms and the standard contractual safeguards they apply.

7. How long we keep it

We keep enquiry details only as long as needed to respond and for our records — ordinarily up to 24 months — after which we delete or anonymise them. You can ask us to erase your data sooner (see your rights above).

8. Your rights

Under the DPDP Act and the GDPR (where it applies to you), you can ask us to:

• access the personal data we hold about you;
• correct or update inaccurate data;
• erase your data, or restrict how we use it;
• withdraw consent you previously gave;
• receive a copy of your data, or lodge a grievance / complaint.

To exercise any of these, email us at contact@mayuragr.com. We’ll respond within the timeframes required by law.

9. Grievance / Data Protection contact

For any privacy questions or grievances under the DPDP Act, you can reach our grievance contact:

Grievance Officer, Agarwal M & Co.
Email: contact@mayuragr.com · Phone: +91 99902 56722

TODO·add the Grievance Officer’s name & designation

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the review date shown above.