Privacy Policy

Introduction

Redfin Associates Private Limited ("Redfin Associates", "we", "us" or "our") operates the website redfinassociates.com. We're a business advisory firm based in Hyderabad, India, offering services across business setup, accounting, taxation, payroll and advisory.

We take your privacy seriously. This policy explains, in plain language, what information we collect through this website, why we collect it, and what you can do about it. It applies to visitors to our website — not to the separate engagement terms that govern our work with clients.

By using this website, you agree to the practices described here. If you don't agree, please don't use the site.

Information We Collect

We only collect what we actually need. There are three ways information reaches us:

Information you give us directly. When you fill in our contact form or subscribe to our newsletter, we collect:

• Your name
• Your email address
• Your phone number
• Your company name (optional)
• The service you're interested in
• Anything you write in the message field

Information collected automatically. Like most websites, our hosting and security systems record basic technical data when you visit — your IP address, browser type, device type, the pages you viewed, and the date and time of your visit. This is standard server logging used to keep the site running and secure.

Information from cookies. See Section 6 below.

How We Use It

We use the information you give us to:

• Respond to your enquiry and answer your questions
• Arrange and conduct a consultation with you
• Send you a proposal or scope of work, if you ask for one
• Send you our newsletter, if you've subscribed to it
• Keep our website secure and working properly
• Meet our own legal and regulatory obligations

We do not sell your personal information. We don't rent it, trade it, or share it with advertisers. We also won't add you to our newsletter just because you filled in the contact form — that's a separate opt-in.

Why We're Allowed To Use It

Under India's Digital Personal Data Protection Act, 2023, we need a lawful reason to process your personal data. Ours are:

• Your consent — you chose to fill in our form or subscribe to our newsletter. You can withdraw this at any time.
• Legitimate business use — responding to an enquiry you sent us, and keeping our website secure.
• Legal obligation — where a law or regulator requires us to retain or disclose certain records.

Sharing Your Information

We share your information only in these limited situations:

• Service providers we rely on — for example our website host, our email provider, and our newsletter platform. They can only use your data to provide their service to us, and they're bound to keep it confidential.
• Our own professional advisers — such as our lawyers or auditors, where genuinely necessary.
• When the law requires it — if we receive a valid order from a court, regulator or government authority.
• If our business changes hands — in a merger, acquisition or restructuring, your data may transfer to the new entity, which would remain bound by this policy.

Some of our service providers may store data on servers outside India. Where that happens, we take reasonable steps to ensure your information stays protected to a comparable standard.

Cookies

Cookies are small text files a website stores on your device. We use them sparingly:

• Essential cookies — needed for the site to function and stay secure. These can't be switched off.
• Preference cookies — remember basic choices so your experience is consistent.

You can block or delete cookies through your browser settings. Note that blocking essential cookies may stop parts of the site from working properly.

How We Protect It

We use reasonable technical and organisational measures to protect your information — including an encrypted (HTTPS) connection, access controls so only the people who need your data can see it, and secure, reputable service providers.

That said, no method of transmitting data over the internet is completely secure. We can't guarantee absolute security, and any information you send us online is sent at your own risk.

If a data breach occurs that affects your personal data, we'll notify you and the Data Protection Board of India as required under the DPDP Act.

How Long We Keep It

We keep your information only as long as we need it:

• Enquiries that don't become engagements — usually up to 24 months, in case you come back to us.
• Newsletter subscribers — until you unsubscribe.
• Client records — for as long as required by Indian tax, company and professional regulations, which is typically at least 8 years.
• Server logs — typically a short rolling period set by our host.

Once we no longer need your data, we delete it or anonymise it.

Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access — ask what personal data we hold about you and how we're using it
• Correction — ask us to fix anything inaccurate or incomplete
• Erasure — ask us to delete your data, where we're not legally required to keep it
• Withdraw consent — change your mind at any time; this won't affect anything we did before you withdrew it
• Grievance redressal — raise a complaint with us and get a response
• Nominate — nominate someone to exercise your rights if you die or become incapacitated

To exercise any of these, email us at info@redfinassociates.com. We'll respond within a reasonable period, and normally within 30 days. We may need to verify your identity first.

If you're not satisfied with our response, you can escalate to the Data Protection Board of India.

Children's Privacy

Our services are for businesses and are not directed at children. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us their information, please contact us and we'll delete it.

Third-Party Links

Our website may link to other sites — a regulator, a government portal, or a resource we've referenced. We don't control those sites and aren't responsible for their privacy practices. Once you leave our site, we'd encourage you to read the privacy policy of wherever you land.

Changes to This Policy

We may update this policy from time to time — for example if we start using a new tool, or if the law changes. When we do, we'll revise the "Last updated" date at the top of this page. If the change is significant, we'll make it more obvious. Please check back occasionally.

Contact Us

If you have any questions about this policy, or want to exercise your rights, get in touch: