Data Protection & Confidentiality Policy

We at Taxellence Consultant India Private Limited commit to the highest standards of data protection, confidentiality and security. This policy describes how we protect client data across regions.

1. Confidential Information

2. Data Access & Control

We maintain audit logs, role-based access, and data segregation to ensure that only permitted staff or systems access sensitive data.

3. Data Retention & Deletion

We retain data for the minimum period needed for legal, regulatory or client purposes. After expiration, data is permanently destroyed or anonymized.

4. Third-Party Processors

We use trusted, contractually bound third-party service providers (e.g., payment gateways, cloud services) who comply with equivalent data protection standards.

5. Breach Notification & Incident Handling

In case of data breach or unauthorized access, affected clients shall be notified within 72 hours, along with our mitigation and remediation plans, as per applicable law.

6. Regional Standards

India

We align with India’s DPDP / IT Act norms and maintain compliance with emerging Indian data protection laws.

United States / UK / Europe

For clients from these regions, we commit to GDPR, UK DPA, or equivalent standards. International transfers are governed by legal safeguards (SCCs, binding corporate rules etc.).

MENA / APAC

In MENA/APAC jurisdictions, we follow regional data laws (e.g. PDPA, DIFC, CCPA-type models) and tailor compliance for local regulations.

7. Changes & Updates

We may update this policy periodically as laws evolve. Clients will be informed of significant changes via email or notification.