Privacy policy

Who we are and what this covers

This policy is issued by BizExpress Advisors Private Limited ("BizExpress", "we"), a company registered in India with CIN U74999MH2021PTC358654, with offices in Mumbai and Bengaluru. It covers personal data we collect through bizexpress.in, through WhatsApp, phone and email, and in the course of doing work for you.

We are the data fiduciary for this data under the Digital Personal Data Protection Act 2023 (the DPDP Act). Where we file on your behalf with a government portal such as MCA, the GST portal or the income tax portal, that portal's own policy applies to what it holds.

What we collect and where it comes from

Website forms. When you ask for a price, book a founder call, request a health check, send a partner enquiry or download a checklist, we collect your name, mobile number, email address if you give it, the service you are interested in, and the answers you type or select (for example your state, capital, entity type, preferred day and slot). We also record the page you sent it from, the time, and any campaign tags in the link you arrived on.

WhatsApp, phone and email. Messages, call notes and attachments you send us. WhatsApp messages pass through Meta's servers under Meta's own terms; we do not control that part.

Doing the work. To register a company or file a return we need identity and address proofs (PAN, Aadhaar, passport, utility bills), photographs, bank details, financial records and portal logins. We collect only what the specific filing needs and we tell you which form each item is for.

Analytics. If enabled, we use Google Analytics 4 and Microsoft Clarity to understand how the site is used: pages visited, device type, approximate location from your IP address, and how you move around a page. These tools set cookies or similar identifiers. We do not use them to identify you by name.

Technical logs. Our hosting provider records IP addresses and request details for security and to keep the site running. We keep a short in-memory rate limit by IP address on the lead form to block spam.

Why we use it and on what basis

To reply to you and quote a price: name, number, email and what you asked for. Basis: your consent, given when you submit the form or message us.

To do the work you engaged us for: everything a filing needs. Basis: your consent and the performance of our agreement with you. Some of it is required by law, for example the Companies Act 2013 for director details and the Income-tax Act for tax filings.

To keep records the law requires us to keep, such as engagement letters, invoices and filed returns. Basis: legal obligation.

To improve the website and our services: analytics data. Basis: your consent, given through the cookie notice where one is shown, and our legitimate use of aggregated, non-identifying statistics.

To send you reminders about due dates and updates about your file on WhatsApp and email. Basis: your consent. You can ask us to stop at any time and we will.

We do not sell personal data. We do not use it for advertising to third parties. We do not make decisions about you by automated means alone.

Who we share it with

Service providers who process data for us, under contract, only to the extent needed: our hosting provider (Netlify) which stores form submissions, our email provider (Resend) which sends notifications, Google (Google Sheets for our lead log, and Google Analytics if enabled), Microsoft (Clarity, if enabled), Meta (WhatsApp), and [payment gateway to be confirmed] for payments.

Government portals and authorities, when filing on your behalf or when required by law: the Ministry of Corporate Affairs, the GST Network, the Income Tax Department, the Trade Marks Registry, the Reserve Bank of India's reporting portals, banks for account opening, and any authority that lawfully demands it.

Professional partners we engage for part of your work, for example a practising professional who certifies a form, or a notary. We tell you when this happens and share only what that step needs.

We do not share your data with incubators, co-working spaces or other partners who referred you, beyond confirming that you became a client where a referral arrangement exists.

Where it is stored and how long we keep it

Form submissions and lead records are stored with our hosting provider and in a Google Sheet accessible only to named BizExpress staff. Working files are kept in our document systems with access limited to the person on your file and their lead.

Some providers store data outside India. Where they do, we rely on their contractual commitments and on the transfer rules the Central Government notifies under the DPDP Act.

• Enquiries that do not become work: 12 months from the last contact, then deleted.
• Client files, filed returns and supporting documents: 8 years from the end of the financial year they relate to, in line with the Companies Act and income tax record-keeping periods, then deleted unless you ask us to keep them or the law requires longer.
• Portal logins you share with us: only for the duration of the engagement; we ask you to change them when it ends.
• Analytics data: as configured in the tool, currently [14 months] for Google Analytics.
• WhatsApp chats: on our devices for the duration of the engagement plus 12 months, then deleted from our side.

Your rights under the DPDP Act

You can ask us what personal data we hold about you and how we use it. You can ask us to correct, complete or update it. You can ask us to erase it once the purpose is over and no law requires us to keep it. You can withdraw consent at any time for anything we do on the basis of consent, and we will stop, although we may then be unable to complete work that depends on it.

You can nominate a person to exercise these rights on your behalf if you are unable to. You can raise a grievance with us, and if we do not resolve it, with the Data Protection Board of India.

To exercise any of these rights, write to hello@bizexpress.in from the email address we hold for you, or message us on WhatsApp from your registered number. We respond within [7] working days and resolve most requests within [30] days.

Cookies and analytics choices

The site works without cookies. Analytics cookies are set only if Google Analytics or Microsoft Clarity is enabled for the site and, where a consent notice is shown, only after you accept. You can block or clear cookies in your browser at any time; the site will still work.

We do not use advertising cookies or retargeting pixels.

Children

Our services are for businesses and adults. We do not knowingly collect personal data of anyone under 18. A director or shareholder must be an adult, so this does not arise in the ordinary course. If you believe a child's data has reached us, tell us and we will delete it.

Security

Access to client data is limited to the people working on your file. We use two-factor authentication on our accounts, encrypted storage with our providers and encrypted transport for the website. Portal credentials you share are stored in a password manager, not in chat threads. No system is perfectly secure, and if a breach affects your data we will tell you and the Data Protection Board as the DPDP Act requires.

Grievance officer and contact

Grievance officer: [Name to be confirmed], BizExpress Advisors Private Limited, Mumbai. Email hello@bizexpress.in. Phone 7204027810. Hours Mon to Sat, 10am to 7pm IST.

We may update this policy. The date at the top changes when we do, and material changes are notified to current clients by email or WhatsApp.