Your data, your rights

Privacy Policy

How we handle personal data under the Digital Personal Data Protection Act, 2023.

Last updated: 12 October 2026

This privacy notice explains how LMS FinTax ("we", "us") collects and uses your personal data when you visit www.lmsfintax.com or contact us, in line with the Digital Personal Data Protection Act, 2023 (DPDP Act). LMS FinTax is the Data Fiduciary for this data.

1. Personal data we collect

  • Details you give us through the contact form, email or WhatsApp: name, business name, city, email address, phone number, industry, number of outlets, turnover band, the services you are interested in and your message.
  • How you found us: the source you select, and campaign tags in the page link (UTM parameters, Google or LinkedIn click IDs), the page you landed on and the referring site. These are stored in your browser for up to 90 days so we can attribute your enquiry.
  • Website usage data: pages viewed, clicks and device information collected by Google Analytics through Google Tag Manager, once enabled, and only if you accept analytics cookies.

2. Why we use it

  • To reply to your enquiry and discuss the services you asked about, by phone, email or WhatsApp.
  • To prepare a proposal and, if you become a client, to deliver the agreed services.
  • To understand which pages and campaigns bring enquiries and to improve the website.

We process enquiry data on the basis of the consent you give on our contact form. We do not sell your personal data and we do not use it for unrelated marketing.

3. Who we share it with

We use service providers who process data on our behalf: Hostinger (website hosting and form delivery) and Google (email, and website analytics once enabled, only if you accept analytics cookies). We may also disclose data where required by law or by a government authority.

Our website and enquiry records are hosted by Hostinger in India. Enquiry emails are processed by Google (Gmail). These providers may store data on servers outside India. We use only providers in countries not restricted by the Government of India under section 16 of the Digital Personal Data Protection Act, 2023.

4. How long we keep it

Enquiry details, including the backup copy of form submissions kept on our web host (stored outside the public website folder), are deleted 12 months after your last contact with us, or within 30 days of a request to withdraw consent or erase data, unless you become a client. Backup copies, and emails moved to deleted items, are deleted within a further 30 days. Our hosting provider's automatic backups, which we cannot delete, are overwritten within a further 6 weeks. Client records are kept for 8 years (pending confirmation by LMS FinTax), or longer if tax and professional laws require it.

5. Your rights

Under the DPDP Act you may: ask for a summary of the personal data we hold about you; ask us to correct, complete, update or erase it; withdraw your consent at any time (this does not affect processing already carried out); nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance with us. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

To exercise any of these rights or to withdraw consent, email support@lmsfintax.com with the subject "Withdraw consent" or "Data request". Withdrawing consent is as easy as giving it: once we receive your email, we will stop contacting you and delete your enquiry data within 30 days, unless the law requires us to keep it. Our hosting provider's automatic backups, which we cannot delete, are overwritten within a further 6 weeks. We will reply within 30 days.

6. Grievance contact

Grievance Officer: LMS FinTax, Bhuleshwar, Mumbai, Maharashtra 400002. Phone: +91 9395489365. Email: support@lmsfintax.com. We will acknowledge your grievance within 7 days and resolve it within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

7. Cookies and similar technologies

Our site stores campaign attribution (for example, which advert or link brought you here) in your browser's local storage so we can understand where enquiries come from. It also stores your cookie choice in local storage for 6 months.

Once enabled, analytics cookies (Google Analytics, through Google Tag Manager) are used only if you click "Accept" on our cookie banner. Until then, and if you click "Reject", analytics storage stays off. We do not use advertising cookies, and advertising signals are always off.

You can change your choice at any time with the "Cookie settings" link at the bottom of every page, or by clearing your browser's site data.

8. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.

See also our Terms & Conditions.