Policies
Privacy policy
How MOJ Consulting Group collects, uses, stores and protects personal data — on this website and in the course of delivering our services.
On this page
1. Who we are
This website is operated by MOJ Consulting Group, First & Second Floor, No. 4/1 and 1/2, Brunton Road, Off M. G. Road, Opposite Old Passport Office, Bengaluru, Karnataka 560025, India (“MOJ Consulting Group”, “we”, “us”, “our”).
For data protection purposes we are the data fiduciary in respect of personal data we collect through this website and in the course of managing our own client relationships. Questions about this policy should go to nikhilsshah@mojconsultinggroup.com.
2. What this policy covers
This policy covers personal data we collect when you visit this website, enquire about our services, or engage us as a client. Section 11 deals separately with data belonging to your business and your employees that we process while performing accounting and payroll work for you, because our role there is different.
3. Information we collect
Information you give us
- Your name, business name, work email address and phone number, and anything you choose to write in an enquiry form or send us by email, WhatsApp or telephone.
- Where you become a client: the contact, billing and engagement details needed to set up and administer your account.
Information collected automatically
- Standard technical information logged when you load a page: IP address, browser and device type, operating system, referring page, pages viewed and the time of your visit.
- Information collected through cookies and similar technologies — see section 5.
What we never ask for through this website
We do not ask for and do not want your bank account credentials, net-banking or portal passwords, payment card numbers, one-time passwords, or any government identity number, submitted through this website or by email. We will never request them from you by email or message. Please do not send them.
4. How we use it
| Purpose | Basis |
|---|---|
| Responding to your enquiry and arranging a scoping call | Your consent, given when you submit the form |
| Preparing a proposal and, if you accept it, delivering the agreed services | Performance of our contract with you |
| Invoicing, payment collection and maintaining our own statutory records | Legal obligation and our legitimate business interest |
| Keeping the website secure and diagnosing faults | Our legitimate interest in operating a secure site |
| Understanding, in aggregate, how the website is used and how visitors find it | Your consent to non-essential cookies, where applicable |
We do not sell personal data. We do not rent, trade or otherwise make personal data available to third parties for their own marketing. We do not send marketing email to people who have not asked to hear from us, and every marketing message we do send carries a working unsubscribe link.
5. Cookies and website analytics
This website uses cookies and similar technologies in two categories:
- Strictly necessary. Required for the site to load and function securely, and to remember your cookie preference. These cannot be switched off.
- Analytics and advertising measurement. Used to understand in aggregate how visitors reach and move through the site, and to measure the performance of our advertising. These are set only where you have consented, or where consent is not required in your jurisdiction.
You can block or delete cookies through your browser settings at any time. Blocking non-essential cookies does not affect your ability to use this site or to contact us.
6. Advertising
We advertise our services online, including through Google Ads and comparable business advertising platforms. Where we do, those platforms may set cookies or use similar technologies to measure whether an advertisement led to a visit or an enquiry, and to limit how often the same advertisement is shown.
Our advertising promotes only our bookkeeping, payroll and compliance services to businesses. It does not promote any financial product or service, does not make claims about financial returns or tax outcomes, and is not directed at consumers or at children. We do not use sensitive personal data for advertising, and we do not build advertising profiles about identified individuals.
You can control personalised advertising from Google through Google My Ad Center.
7. Who we share information with
We share personal data only where it is necessary, and only with:
- Service providers who operate infrastructure we rely on — website hosting, business email, accounting and payroll software, document storage and communication tools — and who are permitted to use the data only to provide that service to us.
- Statutory authorities, where a filing on your behalf requires it or where disclosure is required by law.
- Professional advisers such as our own auditors or legal advisers, under a duty of confidentiality.
Some of these providers may store data on servers outside India. Where they do, we require appropriate contractual protections for that data. We do not transfer personal data to any country to which such transfer is restricted under applicable Indian law.
8. How long we keep it
- Enquiries that do not become engagements: up to 24 months from last contact, then deleted.
- Client records: for the duration of the engagement and then for as long as required by applicable tax, company and record-keeping law — generally eight years from the end of the relevant financial year.
- Website technical logs: up to 12 months.
9. How we protect it
We apply access controls on a need-to-know basis, multi-factor authentication on business systems and accounting platforms, encryption of data in transit, confidentiality obligations binding on every person who works on an engagement, and a documented process for revoking access when an engagement ends or a team member leaves.
No system is perfectly secure. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by applicable law.
10. Your rights
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may ask us to:
- confirm what personal data of yours we hold, and give you access to it;
- correct data that is inaccurate, incomplete or out of date;
- erase data we no longer have a lawful basis to keep;
- withdraw a consent you previously gave, at any time; or
- stop sending you marketing communications.
Write to nikhilsshah@mojconsultinggroup.com with “Data request” in the subject line. We respond within 30 days. If you are not satisfied with our response, you may complain to the relevant data protection authority.
11. Client data we process on your behalf
When we perform accounting, payroll or compliance work for a client, we handle personal data belonging to that client’s employees, vendors and customers. In that work we act as a data processor on the client’s instructions, not as the fiduciary determining why the data is used.
For that data we:
- process it only for the purposes set out in the engagement letter;
- work, wherever possible, inside the client’s own systems and licences rather than taking copies;
- take only the access necessary to do the work, and only access the client grants;
- do not use it for our own purposes, and never for marketing;
- return or delete it on the client’s instruction when the engagement ends, subject to any record-retention obligation imposed on us by law; and
- notify the client without undue delay of any incident affecting it.
If you are an employee, vendor or customer of one of our clients and want to exercise a right over your data, please contact that business directly. We will support them in responding.
12. Children
Our services are provided to businesses. This website is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, write to us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The current version is always published at this address with the date it took effect shown at the top. Material changes affecting existing clients are notified by email.
14. How to contact us
MOJ Consulting Group
First & Second Floor, No. 4/1 and 1/2, Brunton Road,
Off M. G. Road, Opposite Old Passport Office,
Bengaluru, Karnataka 560025, India
nikhilsshah@mojconsultinggroup.com · +91 97696 94689