Privacy Policy

Last updated: 5 May 2026. This Privacy Policy explains how Swati K & Co. (“we”, “us”, the “Firm”) handles personal information collected when you visit www.swatikandco.com, submit any form, schedule a meeting via Outlook Bookings, or otherwise interact with us through this site.

1. What information we collect

• Information you provide voluntarily — name, email address, phone number, message content, and (in the case of careers applications) cover note and resume file. This is collected when you submit the contact form, the careers form, the floating “Talk to us” widget, or schedule a meeting via Outlook Bookings.
• Technical information — IP address, browser user-agent string, page-request timestamp, and the page from which a form was submitted. This is logged by our hosting environment for security and rate-limiting (3 submissions per IP per hour). Logs are stored as a flat file on the server.
• No cookies are set by this website itself. Embedded third-party iframes (Google Maps, Outlook Bookings) may set their own cookies under their own privacy policies.

2. How we use your information

• To respond to your enquiry, schedule a meeting, or process a careers application.
• To detect and prevent abuse of the contact form (rate limiting and spam filtering via a hidden honeypot field).
• To maintain a record of communications, as required for our internal client-engagement process and for tax / regulatory record-keeping.

We do not sell your data, share it with marketing partners, or use it for advertising purposes.

3. Where your data goes

• Form submissions are emailed to [email protected] and stored in our internal mailbox under standard ICAI client-confidentiality norms.
• An auto-reply containing your submission is sent back to your email address as a record of receipt.
• A summary log entry (timestamp, name, email, phone, IP, user-agent) is appended to a server-side CSV file. This is used internally for record-keeping and is not shared with any third party.
• If you book a meeting via the “Open Outlook Bookings” link, that booking flow is hosted by Microsoft and governed by their privacy practices.

4. How long we keep your data

• Email correspondence is retained for the duration of an active client engagement plus seven years thereafter, in line with ICAI working-paper retention requirements.
• The flat-file submission log is rotated annually; entries older than three years are deleted unless an active engagement requires longer retention.
• You may request deletion of your data at any time by writing to [email protected]; we will action requests within 30 days.

5. Your rights

Under India’s Digital Personal Data Protection Act 2023 and applicable foreign data-protection laws (GDPR for EU residents, etc.), you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (subject to retention obligations under tax and audit laws).
• Withdraw consent for future marketing communications (we don’t do marketing, but if you opt into a newsletter in future, you can opt out).
• Lodge a complaint with the Data Protection Board of India or your local data-protection authority.

6. Security

The site uses HTTPS (TLS) for all traffic. Form submissions are validated server-side. Internal access to client communications is restricted to partners and engagement staff under standard CA-firm confidentiality protocols. We do not store passwords, payment information, or sensitive personal data (Aadhaar, PAN, financial-account numbers) via the website — sensitive material is collected through secure channels during engagement.

7. Third-party services

• Outlook Bookings — if you book a meeting, Microsoft processes that data under its privacy statement.
• Google Maps embed on the contact page may set cookies governed by Google’s privacy policy.
• Google Fonts are served from fonts.gstatic.com; no cookies are set.

8. Children’s privacy

This site is not directed at children under 18 and we do not knowingly collect personal data from them.

9. Changes to this policy

We may update this policy as our practices evolve or as Indian data-protection law develops. The “Last updated” date at the top reflects the latest revision. Material changes will be flagged on the homepage.

10. Contact

Questions about this policy? Write to [email protected] or call +91 6262 333 777. Postal address: No 8/2, 3rd Floor, 2nd Main Road, Kamalanagar, Chamrajpet, Bengaluru 560018, Karnataka, India.