Privacy Policy

01

Your Privacy Matters to Us

Initium is a CA-led finance firm serving founders and fast-growing businesses across India. We provide bookkeeping, accounting, tax and compliance, CFO support, M&A advisory, and India entry services.

This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or get in touch with us. It applies to website visitors, individuals who submit enquiries, and clients who engage our services.

We are committed to handling your information responsibly and in full compliance with applicable Indian law, including the Digital Personal Data Protection Act (DPDPA), 2023.

02

What Information We Collect

Personal Information

When you contact us, fill out a form, or engage our services, we may collect:

• Full name
• Email address
• Phone number
• Company name and designation
• Nature of your business or enquiry

Technical Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent on site
• Referring URL

Communication Data

• Messages submitted via our contact or enquiry forms
• Email correspondence
• Notes from calls or consultations you initiate with us

How We Obtain Your Information

• Directly from you: through forms, emails, calls, or meetings
• Through referrals: when a mutual contact refers you to us
• From publicly available sources: such as LinkedIn or company websites, where relevant to a business enquiry

We do not collect sensitive financial data such as bank account details, PAN, Aadhaar, or tax credentials through our public website forms. Such information is only shared directly within a formal, secure client engagement.

03

How We Use Your Information

We collect information for specific, defined purposes only:

• To respond to your enquiries: so our team can get back to you promptly
• To provide our services: bookkeeping, tax, CFO, advisory, or India entry support you have engaged us for
• To improve our website: understanding how visitors use our site helps us make it more useful
• To send relevant updates: newsletters, resources, or service updates, only if you have opted in
• To maintain security: monitoring for fraud, misuse, or unauthorised access
• To meet legal and regulatory obligations: where applicable under Indian law

We do not use your information for automated decision-making or profiling.

04

How We Protect Your Data

We take the security of your information seriously, especially given the financial nature of the work we do. Our measures include:

• Data stored on secure, access-controlled servers
• All website communication encrypted via HTTPS
• Internal access restricted to authorised team members only
• Regular review of security practices in line with industry standards

While no system is completely immune to risk, we take every reasonable step to protect your personal information from unauthorised access, loss, or misuse.

05

Who We Share Your Information With

We do not sell, rent, or trade your personal data. We may share your information in limited, defined circumstances:

• Trusted service providers: hosting, analytics, or tools that process data on our behalf under confidentiality obligations
• Professional advisors: lawyers, auditors, or bankers subject to strict confidentiality requirements
• Legal or regulatory authorities: only when required by law, a court order, or a statutory obligation under Indian regulation
• A successor entity: in the event of a merger, acquisition, or restructuring of Initium, you will be notified of any material changes

Your information is never shared with third parties for marketing purposes.

06

Call and Meeting Recordings

We may record calls, video meetings, or consultations conducted as part of our sales process, onboarding, or ongoing service delivery, such as CFO reviews or advisory sessions. Recordings may include participant names, audio, and video where cameras are enabled.

We use recordings for:

• Service delivery and follow-up notes
• Internal training and quality improvement
• Process analysis and service enhancement

Recordings are retained for up to 3 years unless you request earlier deletion. We will inform you at the start of any call if it is being recorded.

07

Cookies and Website Analytics

Our website uses cookies and analytics tools to understand how visitors interact with our content. This includes:

• Session cookies: to maintain basic website functionality
• Analytics tools: to track page visits, traffic sources, and usage patterns in aggregate
• Performance monitoring: to identify and resolve technical issues

This data is collected in aggregate and is not used to personally identify you. You can manage or disable cookies in your browser settings, though this may affect certain website features.

Do Not Track: Our website does not currently respond to browser "Do Not Track" signals. We will update this policy if our practices change.

08

How Long We Keep Your Data

We retain personal information only for as long as it is needed:

• Enquiry and contact data: for a reasonable period to manage follow-ups and relationships
• Client records: for the engagement duration and as required under Indian tax and regulatory law, typically 6 to 8 years for financial records
• Call recordings: up to 3 years
• Marketing engagement records: deleted when you opt out or within a reasonable period of inactivity

You may request deletion of your data at any time, subject to any legal retention obligations we are bound by.

09

Anonymised and Aggregated Data

We may use anonymised or aggregated data, from which no individual can be identified, for purposes such as industry benchmarking, internal reporting, or improving our service delivery frameworks. Once de-identified, this data is no longer considered personal information and is not subject to this policy.

10

Managing Your Communication Preferences

• Marketing emails and newsletters: opt out at any time by clicking "unsubscribe" in any email we send
• Transactional communications: service updates, invoices, and compliance reminders will continue regardless of marketing opt-out preferences
• SMS: opt out by replying STOP or contacting us directly

We will not share your contact details with any third party for marketing purposes.

11

Your Rights Over Your Data

Under the Digital Personal Data Protection Act (DPDPA), 2023, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: request erasure of your data where there is no legal obligation to retain it
• Withdraw consent: opt out of marketing communications at any time
• Grievance redressal: raise a complaint with us, and if unresolved, escalate to the Data Protection Board of India

To exercise any of these rights, contact us at the details below. We will respond within 7 business days.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify you via email or a prominent notice on our website. The date at the top of this page will always reflect when it was last revised. Continued use of our website after any update constitutes acceptance of the revised policy.

13

Third-Party Links

Our website may contain links to third-party websites, client portals, tools, or resources. These links are provided for your convenience and do not constitute an endorsement by Initium.

Each third-party website operates under its own privacy policy. We have no control over and are not responsible for how those websites collect, use, or protect your information. We encourage you to review the privacy policy of any third-party site you visit.