Introduction
Welcome to O S G & CO LLP (“Firm”, “Company”, “we”, “our”, or “us”).
We are a professional services firm providing chartered accountancy, taxation, audit, advisory, business setup, corporate compliance, financial consulting, and related professional services in India and the United Arab Emirates (UAE).
We are committed to protecting the privacy and confidentiality of the personal data entrusted to us and processing such data responsibly, lawfully, fairly, and transparently.
This Privacy Policy describes how we collect, use, process, store, disclose, transfer, and safeguard personal data when you access our website or engage our services.
This Privacy Policy has been prepared keeping in view, among others:
- India’s Digital Personal Data Protection Act, 2023 and applicable Information Technology laws and rules.
- The UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
- Other applicable privacy and data protection laws based on the jurisdiction in which services are provided.
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope
This Privacy Policy applies to:
- Visitors to our website.
- Existing and prospective clients.
- Representatives of corporate clients.
- Vendors and service providers.
- Job applicants.
- Individuals communicating with us through email, telephone, WhatsApp, social media, or other digital platforms.
Information We Collect
Personal Information
- Name
- Residential and business address
- Email address
- Telephone number
- Nationality (where legally required)
- Government-issued identification (PAN, Aadhaar where permissible, Passport, Emirates ID, Visa details, etc.)
- Date of birth (where necessary)
- Signature
- Photograph (where applicable)
Financial & Business Information
- Bank details
- Tax identification numbers
- GSTIN
- TRN (UAE)
- Corporate documents
- Financial statements
- Accounting records
- Payroll information
- Beneficial ownership details
- KYC documents
Technical Information
- IP address
- Browser details
- Device information
- Cookies
- Operating system
- Website analytics
- Session information
Legal Basis for Processing
Depending upon applicable law, we process personal data on one or more of the following grounds:
- Your consent.
- Performance of a contract.
- Compliance with legal and regulatory obligations.
- Legitimate business interests.
- Protection of legal rights.
- Prevention of fraud and financial crime.
- Professional obligations applicable to chartered accountants and regulated professionals.
Cookies and Similar Technologies
Our website may use cookies, web beacons, pixels, analytics tools, and similar technologies to enhance user experience, understand website usage, improve website functionality, and support security.
Users may configure their browser settings to refuse or delete cookies. Certain website features may not function properly if cookies are disabled.
Where legally required, we will seek your consent before placing non-essential cookies on your device.
Cross-Border Data Transfers
As we operate in both India and the UAE, personal data may be transferred between our offices, affiliates, professional advisers, cloud infrastructure providers, and authorised service providers located in India, the UAE, or other jurisdictions where necessary for providing services.
Where cross-border transfers occur, we implement reasonable contractual, organisational, and technical safeguards to protect personal data in accordance with applicable laws.
Sharing of Personal Information
We do not sell personal data.
We may disclose your information to:
- Government authorities where legally required
- Regulatory authorities
- Professional advisers
- Banks
- Payment service providers
- Cloud hosting providers
- IT service providers
- Legal advisers
- Auditors
- Affiliates and business partners
All third parties are required to maintain appropriate confidentiality and security standards.
Data Security
We implement reasonable technical and organisational measures, including:
- SSL encryption
- Secure servers
- Firewall protection
- Access controls
- Password protection
- Regular backups
- Employee confidentiality obligations
- Cybersecurity monitoring
However, no internet transmission is completely secure.
Data Retention
We retain personal information only for as long as necessary to:
- Provide our professional services.
- Comply with applicable legal, taxation, accounting, audit, and regulatory requirements.
- Resolve disputes.
- Enforce contractual rights.
- Maintain business records and backups.
Retention periods may vary depending on the nature of the engagement and statutory requirements in India, the UAE, or any other applicable jurisdiction. Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or destroyed unless continued retention is required by law.
Artificial Intelligence (AI) and Technology
We may use artificial intelligence (“AI”), machine learning tools, document automation software, cloud-based accounting platforms, and other digital technologies to improve the efficiency, accuracy, and quality of our professional services.
Such technologies are used only under appropriate human oversight and are not relied upon as the sole basis for professional advice or decision-making. Where third-party technology providers process personal data on our behalf, they are required to maintain appropriate confidentiality, security, and contractual safeguards.
Anti-Money Laundering (AML) and Know Your Customer (KYC)
As part of our legal and professional obligations, we may collect and verify identity documents and other information for client due diligence, anti-money laundering (AML), counter-terrorist financing (CTF), sanctions screening, beneficial ownership verification, and fraud prevention.
Failure to provide required information may prevent us from accepting or continuing an engagement.
Data Breach Response
We maintain procedures to identify, investigate, contain, and respond to any actual or suspected personal data breach.
Where required under applicable law, affected individuals and competent regulatory authorities will be notified within the prescribed timeframes. We also take appropriate remedial measures to minimise potential harm and strengthen our security controls.
Information Security
We implement commercially reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.
These measures may include:
- Encryption of sensitive information in transit and, where appropriate, at rest.
- Secure cloud infrastructure.
- Multi-factor authentication.
- Role-based access controls.
- Firewall and intrusion detection systems.
- Endpoint protection.
- Secure backup and disaster recovery procedures.
- Periodic security reviews and vulnerability assessments.
- Confidentiality obligations for personnel and contractors.
While we strive to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.
Your Privacy Rights
Subject to applicable law, individuals may have the right to:
- Access personal information.
- Obtain details regarding processing.
- Request correction or updating.
- Request erasure where legally permissible.
- Withdraw consent.
- Restrict processing.
- Object to processing.
- Request portability where applicable.
- Nominate another person to exercise rights where permitted by law.
- Lodge complaints before the competent authority.
Marketing Communications
We will send marketing communications only where legally permitted or where you have consented.
You may unsubscribe at any time using the unsubscribe link or by contacting us.
Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for their privacy practices or content.
Users should review the privacy policies of those websites.
Professional Confidentiality
As a Chartered Accountancy firm, we owe professional confidentiality obligations to our clients.
Accordingly:
- Client records are treated as confidential.
- Information is disclosed only where required by law, court order, regulatory authority, professional standards, or with client authorisation.
- Our employees, partners, consultants, and contractors are bound by confidentiality obligations.
Website Analytics
We may use analytics services to understand website usage.
Analytics may collect:
- Device information
- Browser information
- Pages visited
- Session duration
- Referring website
- Geographic region (non-identifiable)
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects unless required by law or with your consent.
Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time.
The latest version will always be available on this website.
Continued use of the website constitutes acceptance of any revisions.
Governing Law
This Privacy Policy shall be governed by the laws applicable to the jurisdiction in which the relevant services are provided.
Where services are rendered in India, the applicable laws of India shall apply.
Where services are rendered in the United Arab Emirates, the applicable laws of the UAE shall apply.
Nothing in this Privacy Policy limits any statutory rights available under applicable data protection legislation.
Disclaimer Regarding Professional Advice
The information available on this website is provided solely for general informational purposes and does not constitute accounting, auditing, taxation, legal, financial, or professional advice.
Accessing this website or communicating with us through it does not create a client-professional relationship. Professional advice should always be obtained after considering the specific facts and circumstances of each matter.
