Privacy Policy

1. Introduction and Scope

Khan Consultants ("we", "us", "the Firm") is committed to protecting the privacy and personal data of every individual who visits our website or engages our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it.

This Policy is issued in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data We Collect

Information you provide directly: Full name, date of birth, gender, mobile number, email address, postal address, identity documents (Aadhaar, PAN, passport), family data relevant to the service, payment receipts, and correspondence via WhatsApp, email, or in person.

Information collected automatically: IP address, browser type, pages visited, device type — collected via Google Analytics 4 for aggregate website improvement purposes only, not linked to your identity.

Cookies: Strictly necessary cookies (session) and analytics cookies (up to 2 years). You may disable analytics cookies via your browser settings.

3. How We Use Your Data

We use your personal data only to: provide the services you have instructed; communicate with you about your matter; submit applications to KMC and government bodies on your behalf; send service updates; improve our website; comply with legal obligations; and maintain records for five years.

We will never sell, rent, or trade your personal data to any third party for marketing purposes.

4. Data Sharing

We share your personal data only with: government authorities (KMC, West Bengal government offices) to whom we submit applications; technology service providers under strict confidentiality obligations; legal or regulatory authorities where required by law; and professional advisers subject to professional confidentiality.

We do not transfer your personal data outside the Republic of India.

5. Data Security

We implement appropriate technical and organisational measures including: secure HTTPS encryption; password-protected digital records; restricted need-to-know access; and secure destruction of physical documents after the retention period.

In the event of a data breach likely to result in risk to your rights, we will notify you and the relevant authority as required by the DPDP Act, 2023.

6. Data Retention

Client files and documents are retained for 5 years from closure of matter. Website analytics data is retained for 26 months. Financial records are retained for 8 years as required by Indian tax law. After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights

Under the DPDP Act, 2023, you have the right to: access a copy of your personal data; request correction of inaccurate data; request erasure where data is no longer necessary; lodge a complaint with our Grievance Officer; and nominate another person to exercise your rights.

To exercise any right, contact our Grievance Officer. We will respond within 30 days.

8. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. Where a minor is the subject of a document application (e.g., a birth certificate for a child), the data is provided by and processed under the authority of the parent or legal guardian.

9. Grievance Officer

Grievance Officer: Khan Consultants Management Address: 26/1 Rafi Ahmed Kidwai Road, Esplanade, Kolkata – 700 016 Email: [email protected] Response time: Within 30 days of receipt of complaint

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this website with a revised effective date. We encourage you to review this Policy periodically.