Privacy Notice | Anil Khatri and Associates

This notice applies to anyone who sends personal data to Anil Khatri and Associates ("the firm", "we") through this website. It sets out what data is collected, through which parts of the site, and the purposes for which it is used. It also states how long the data is kept, how it is protected and what rights you have. The notice is written for the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Under that law, the firm is the Data Fiduciary for the data described here.

What we collect

Through the contact form: your name, email address and telephone number, the name of your business if you give it, and your message. Stored with these are the page from which the form was sent and any campaign tags in the link you followed to reach it. Your browser type is also recorded, together with a one-way coded form (hash) of your IP address that is used only to block spam and misuse. The form asks only for what we need in order to reply.

Through the question assistant: the questions you type. If you choose to send a question to the firm, the name, telephone number and email address you give are also collected. The section "The question assistant" below gives the detail.

Automatically: our hosting provider keeps short-lived technical logs (such as IP address, browser type and the pages requested) so that the site runs securely and spam and attacks can be blocked. Visits are counted by our website analytics without cookies and without identifying you.

Financial records, identity documents and tax details are not requested through the website. Please do not send them through the form.

Why we use it

To reply to your enquiry and, if you ask, arrange a meeting.
To answer questions put to the question assistant, and to identify questions that our pages do not yet answer.
To keep a record of enquiries received.
To keep the website secure and free of spam.

Your data is not used for marketing. No newsletter is sent to anyone who has not asked for one, and we do not sell your data or share it for use by anyone else.

When you submit the form, you consent to the firm using the data you give for the purposes listed above. Consent may be withdrawn at any time by writing to getintouchwithcaanil@gmail.com. Anything done before withdrawal is unaffected, although we may then be unable to respond to your enquiry.

Who processes it for us

Cloudflare hosts the website. It also stores form submissions and provides spam protection. Enquiry alerts are sent by email through our email provider. If the firm switches on the AI part of the question assistant, Anthropic PBC processes the questions described under "The question assistant". These service providers process data only on our instructions. Some of the processing may take place outside India, in countries to which transfer is not restricted under the Act.

Once you become a client, your information is handled under the engagement letter and under the professional confidentiality that the ICAI Code of Ethics requires.

How long we keep it

Enquiries that do not lead to an engagement are kept only for as long as the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 allow for the purpose of collection; they are then deleted. The hosting provider sets the short period for which technical logs are kept. Where the law requires a longer period for any data, we keep it for that period only.

The question assistant

"Ask a question" is a question tool on the website, and it opens only when you click it. Its answers are drawn from the firm's own website pages. They are general information and do not amount to advice on your situation.

Please do not type ID numbers or personal financial details into it. Before a question is searched, stored or sent to the AI service provider, the tool removes anything that resembles a PAN, Aadhaar number, GSTIN, bank account number, IFSC code, telephone number or email address. You are told when something has been removed. Because the removal is automatic, it may miss some items.

What is stored. Each question is stored after that removal, with the answer given. If the tool's checks hold back an AI answer, the held-back text is kept for the firm to review. The record also holds the pages the answer came from, the time and the page you asked from. A one-way coded form (hash) of your IP address is kept as well, solely to limit misuse; the IP address itself is not stored. On your first question a spam check (Cloudflare Turnstile) runs. After it, your browser keeps a short code in its session storage for two hours so that the check need not be repeated. This code is not a cookie and holds no personal details. Closing the tab clears it.

Sending a question to the firm. You may choose "Send this question to the firm". The tool fills in the question with the removal already made, but what is sent is the text you finally submit. That text is saved with the other enquiries, along with any name, telephone number and email address you give. The page you were on, your browser type and the coded form of your IP address are saved too. From then on, these are handled as this notice describes for the contact form. Before sending, you must confirm that you have read this notice.

AI service provider. Some questions are not answered directly by the firm's pages. In that case the tool may send the question, after the removal described above, to an AI service provider, Anthropic PBC, together with extracts from the firm's own website pages, and Anthropic writes a short answer from those extracts. Your name, contact details and IP address are not sent. This processing takes place outside India. Anthropic acts as a service provider to the firm and processes the question under its commercial terms. The firm switches this part on only by a deliberate setting. While it is off, answers come only from the firm's pages and no question is sent to Anthropic.

How long it is kept. Each question record is deleted automatically once it is more than 90 days old, and the deletion runs regularly while the site is in use. The counters used to limit misuse hold the coded form of your IP address; they are deleted after two days. Questions sent to the firm are kept as enquiries for the period stated under "How long we keep it".

Basis. Your question is used to answer it, since that is the purpose for which you gave it. If you do not want it used, do not send it. You may also write to getintouchwithcaanil@gmail.com and ask us to erase it.

Children. The question tool is intended for adults. Please do not use it if you are under 18.

How we protect it

Data is sent over an encrypted connection. It is stored in a separate database used only for enquiries, and only people in the firm who need it in order to reply can see it. If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected, as the law requires.

Your rights

The Act gives you the right to:

ask for a summary of the personal data we hold about you and of how we have used it;
ask us to correct, complete, update or erase it;
withdraw your consent;
nominate another person to exercise your rights if you die or become unable to do so;
raise a grievance with us and, if you are not satisfied, with the Data Protection Board of India.

Requests to exercise any of these rights should be sent to getintouchwithcaanil@gmail.com. We may need to confirm your identity before we act.

Grievances

Questions and grievances about personal data should be addressed to Anil Khatri, Anil Khatri and Associates, Office at Plot 08, Eden Complex, Gangapur Road, Nashik 422222, email getintouchwithcaanil@gmail.com, telephone +91 98220 35365. Each grievance will be acknowledged promptly. A response will follow within the period the Rules allow, which is at most 90 days.

Changes

Any new version of this notice will be published here with its date.

Last updated: 1 October 2026.