Privacy policy

Privacy policy

What we collect, why, and how to get it back or removed

Written against the Digital Personal Data Protection Act, 2023. Last reviewed 30 October 2026.

Last reviewed 30 October 2026 Google Analytics cookies — only with your consent Written against the DPDP Act, 2023

The short version

This website asks for your consent once, on arrival, for a single purpose: Google Analytics cookies that count visits, the pages read, and the broad geography visits come from — country and city level, never your identity. Decline, and no cookie is set and nothing about your visit is recorded; the site works identically either way. There is no advertising and there are no tracking pixels, whatever you choose.

The only personal data this site collects is what you type into one of its two forms — the contact form, and the NRI assessment form — and it is used to prepare and send you a reply. Analytics, if you consented to it, reaches us only as totals: how many people visited, which pages they read, and roughly from where — never who. Google Analytics recognises a returning browser by a random identifier kept in its cookie, not by your name or contact details; Google says Google Analytics 4 does not log or store IP addresses; and Google processes this data for us under its analytics terms. The cookies last up to two years unless you clear them, or change your choice below.

— the question is asked again, and your new answer replaces the old one.

Who we are

GSTserve Advisory Services LLP, A3, 2nd Floor, Nedumchalil Building, Civil Line Road, Padivattom, Ernakulam – 682024, Kerala, India. We are the data fiduciary for the information described here. Questions about this policy, or any request under it, go to info@gstserve.com or +91 80860 75699.

What we collect, and why

  • From the contact form: your name, email, phone if you give it, what your enquiry is about, anything you write in the message field, and how you heard about us. Used to answer your enquiry and to understand which of our channels people actually come from.
  • From the NRI assessment form: the same, plus your country of residence, the district your property is in, how the property came to you, the year of acquisition, the stage the sale has reached, and the expected or actual date of sale. Used to prepare the written preliminary position we promise in reply.
  • If you become a client: the documents and information a specific engagement needs — identity and tax identifiers, title documents, ledgers, bank statements, statutory correspondence. Used to do the work you have engaged us to do, and for no other purpose.
  • From the web server: ordinary request logs kept by the hosting provider for security and fault diagnosis, including IP address. We do not use these to profile visitors.

Your consent is asked for on each form, unticked by default, against the purpose stated on that form. That is the basis on which we hold enquiry data. Client data is held on the basis of the engagement between us and the legal obligations that attach to it.

Who it is shared with

Enquiry data is not shared with anyone. Client data is disclosed only where a filing you have approved requires it — to the tax department, the GST portal, the Ministry of Corporate Affairs, or a similar authority — or where the law compels disclosure. We do not sell data, we do not share it for marketing, and we do not pass it to any other professional firm.

If your matter requires a professional we cannot be — a chartered accountant’s certificate, for instance — you appoint that person yourself and decide what to give them. We take no referral fee.

Where it is processed, and by whom

Work is done from our office in Padivattom, Ernakulam. Documents move through a controlled shared folder with access limited to the people working on your matter — not over WhatsApp, not through personal email. Our email and file storage run on established business platforms; those providers process data on our instructions and for no purpose of their own.

How long it is kept

  • Enquiries that do not become engagements: up to twelve months, then deleted.
  • Client records: for the duration of the engagement and then for as long as the relevant tax and company law require records of that filing to be available — which for most Indian filings runs several years beyond the year concerned.
  • Documents you lend us: returned or deleted on request at any time, subject only to anything we are legally required to retain.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct anything inaccurate or incomplete, ask us to erase it, withdraw a consent you have given, or nominate someone to exercise these rights if you are unable to. Write to info@gstserve.com. We will acknowledge within two working days and act as quickly as the request allows.

Withdrawing consent is as easy as giving it: one email, no form, no reason needed. It stops us using your data for the purpose you consented to. It cannot undo a filing already made with your approval, and it does not override a retention obligation the law places on us.

If you are not satisfied with how we have handled a request, you may complain to the Data Protection Board of India.

Changes to this policy

If this policy changes materially — in particular if analytics or any other tracking is ever added to this site — the change is made here first, with the date updated, before anything new goes live.

Analytics cookies, asked for properly. Nothing set without your consent.

If anything on this page is unclear, or you want to know exactly what we hold about you, ask us and you will get a plain answer within two working days.

Ask us