Privacy Policy

1. Introduction

BizMitra ("we", "our", or "us"), operating in Panjim (Panaji), Goa, India, respects the privacy of business owners and visitors to our website. This Privacy Policy describes how we collect, use, and protect the information you provide when using our website or contacting us regarding our accounting and compliance services.

2. Information We Collect

We collect only the information reasonably necessary to respond to your service requests and deliver accounting support:

• Enquiry & Consultation Information: Full name, business/firm name, email address, mobile/telephone number, business sector, preferred contact method, and message content submitted through our online forms.
• Technical & Security Data: Cryptographically hashed IP addresses (for rate-limiting and abuse prevention), browser user-agent strings, and submission timestamps. We do not store plain-text IP addresses in our public enquiry records.
• Client Financial Documentation (Under Contract Only): Books of accounts, bank statements, sales/purchase registers, and tax credentials shared privately through encrypted drives once an engagement is formalized. We never collect banking passwords, PINs, OTPs, or credit card CVVs through our public website.

3. How We Use Your Information

Your details are used strictly for legitimate business purposes:

• To evaluate your business accounting requirements and provide consultation proposals.
• To schedule telephone, WhatsApp, virtual, or in-person consultation meetings in Panjim, Goa.
• To prevent automated spam, brute-force attacks, and abusive form submissions.
• To execute agreed bookkeeping and compliance obligations under mutual contract.

4. Confidentiality & Information Sharing

We do not sell, rent, monetize, or disclose your personal or company information to third-party marketing brokers. Information is shared only under the following limited conditions:

• Independent Professional Collaborators: With qualified practicing Chartered Accountants, tax advocates, or auditors engaged to handle reserved statutory functions with your explicit knowledge and authorization.
• Statutory Authorities: If formally required by applicable Indian law, court order, or official departmental summons.

5. Cookies & Local Storage

Our website utilizes minimal, essential session cookies necessary for security (CSRF protection tokens) and session state. We do not use intrusive third-party cross-site behavioral tracking cookies.

6. Security Commitments

We apply reasonable and standard security safeguards, including HTTPS encryption in transit, PDO parameterized queries to prevent injection, role-based access restrictions, and password hashing (`password_hash`). However, as with all internet transmissions, no system can be represented as 100% invulnerable, and we encourage clients to transmit sensitive documents exclusively through agreed secure channels.

7. Data Retention & Your Rights

Enquiry records are retained only as long as necessary to fulfill the communication purpose or comply with statutory retention standards. You may request review, correction, or deletion of your contact details by writing to our designated email address.

8. Contact for Privacy Matters

For questions regarding this policy, please reach out to: