Privacy Policy

Get It Done Tax & Legal Advisory (“Get It Done”, “we”, “us”) is a tax and legal advisory firm operating from Flat No. 502, 21 Business Elites, Near Kala Hanuman Mandir, M.G. Road, Kandivali West, Mumbai 400067, Maharashtra, India. For the personal data described in this policy, we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). That makes us the party responsible for deciding how and why your data is processed.

This policy covers the website you are reading and every enquiry that reaches us through it. Work we take on after you engage us is additionally governed by your engagement letter and by professional confidentiality obligations, which are stricter than this policy.

We collect personal data in three ways:

• What you send through the case form. Your name, email address, phone number, the type of issue, your description of it, and up to five documents you choose to attach (4 MB total). We ask for the minimum needed to give you a useful first answer.
• What you send us directly. If you call, email, or message us on WhatsApp, we receive whatever you include: your number or address, and the contents of the message.
• Standard server logs. Like almost every website, our hosting infrastructure records basic technical details of each visit (IP address, browser type, pages requested) for security and error diagnosis. We run no analytics trackers, advertising pixels, or fingerprinting on this site.

We do not buy data about you, enrich your profile from third parties, or collect anything behind your back.

We process your data for a short list of purposes:

• To respond to you. Reading your enquiry, assessing your matter, and coming back with a clear answer, which is what you contacted us for.
• To do the work. If you engage us, we use your information and documents to prepare replies, filings, appeals, and advice.
• To meet our own legal obligations. Professional record-keeping, accounting, and compliance with Indian law.
• To keep the site running. Security monitoring and error diagnosis from server logs.

The legal basis is your consent, given when you submit the form or contact us, together with the legitimate uses recognised by the DPDP Act. We never use your enquiry data for marketing lists, and we never sell it.

Only a short list of processors handles your data, and each one does a single job:

• Zoho CRM. Enquiries from the case form, including attachments, are stored in Zoho’s customer-relationship system on Indian data centres. Zoho acts on our instructions and cannot use your data for its own purposes.
• Our hosting provider. Serves the website and keeps the standard server logs described above.
• Communication services. If you reach us by WhatsApp, phone, or email, those messages travel through the respective provider under its own terms. You choose the channel; we recommend the case form for sensitive documents.

That is the complete list. Nothing goes to advertising networks or data brokers.

Notices, returns, bank statements, and dispute papers are the raw material of our work, and we treat them accordingly. Documents you upload are read only by the experts working on your matter. They are not circulated beyond your case team, and they are never shared outside the firm except where a filing or representation requires it and you know about it.

Confidentiality does not depend on whether you become a client. A document sent with an enquiry that goes no further is treated with the same care as a client file.

Enquiries that don’t become engagements are kept for up to 24 months, long enough to help if you come back with a recurring notice, and then deleted. You can ask us to delete them sooner at any time.

Client files are kept for the duration of the engagement and then for the retention periods Indian tax and professional law requires, typically eight years for records connected to assessments and appeals. Once a statutory retention period ends, we delete our copy.

Under the DPDP Act 2023 you have the right to:

• Access. A summary of the personal data we hold about you and what we have done with it.
• Correction and erasure. Fixing inaccurate data, and deletion of data we no longer have a legal duty to keep.
• Withdrawing consent. At any time, with effect going forward.
• Grievance redressal. A real response to a complaint, and if we fail you, escalation to the Data Protection Board of India.
• Nomination. Naming someone to exercise these rights for you if you are unable to.

To exercise any of these, email yogesh@getitdoneat1000.comwith the subject line “Data request”. We respond within a week, usually faster.

Everything you send through this site travels over an encrypted connection (TLS). The website itself keeps no database of its own; form submissions pass straight through to Zoho CRM instead of resting on the web server. Access to the CRM is limited to the people who need it, protected by authentication controls, and reviewed as the team changes.

No system is beyond failure, so our approach is to hold less: we collect the minimum, keep the processor list short, and delete data when its retention period ends.

This site runs almost entirely without cookies. We use no analytics, advertising, or tracking cookies of our own. The complete picture, including the one map embed on our contact page, is in the Cookie Policy.

Our services address tax and legal matters for business owners and adults. The site is not directed at children, and we do not knowingly collect children’s data. If you believe a child has sent us personal data, tell us and we will delete it.

When we change this policy, we change the “last updated” date at the top and, for material changes, say so plainly on this page. We will never weaken the confidentiality of documents you have already sent us by a later edit.

For privacy questions, data requests, or complaints under the DPDP Act 2023 or the Information Technology Act 2000, contact our grievance officer at yogesh@getitdoneat1000.com or by post at Flat No. 502, 21 Business Elites, Near Kala Hanuman Mandir, M.G. Road, Kandivali West, Mumbai 400067, Maharashtra. Complaints are acknowledged within 48 hours and answered within the statutory period.