Legal
Privacy Notice
How H Vagadiya & Co. collects, uses, and protects personal data submitted through this website, under the Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025.
What Data We Collect
Only the data you submit through a form on this site — for example, name, email, phone number, the details of your enquiry, and, for careers applications, the documents you upload. We do not collect more than is needed for the stated purpose of each form.
Purpose of Collection
- Request a Consultation — To schedule and prepare for a preliminary discussion of your requirement.
- Contact / Business Enquiry — To respond to your message or enquiry.
- Newsletter — To send educational circulars, only if you opt in.
- Careers Application — To process your application for a role at the firm, including any resume and mark sheets you upload.
Retention Period
24 months from the date of submission, unless a longer period is required by law.
Third Parties
Where a third-party service provider is used (for example, an email delivery service), it is listed here: Google Workspace. We do not sell personal data.
Your Rights & Withdrawal of Consent
You may request access to, correction of, or erasure of your data, and may withdraw consent at any time, by contacting the Grievance Officer below. Withdrawal does not affect the lawfulness of processing before withdrawal.
Grievance Officer
Harshit C Vagadiya · harshit@hvagadiyaandco.info · +91•••••••997
To submit a DPDP request or grievance, use the Data Principal / Grievance Form.
Cookies & Analytics
Essential cookies run the site. Analytics cookies are only set if you accept them via the cookie banner; declining is fully respected and does not affect site functionality.
Security
This site is served over HTTPS. Submitted form data is stored in an access-controlled database with row-level security, and uploaded documents are held in a private storage bucket that only authorised firm personnel can open through short-lived signed links.
Breach Notification
The firm maintains an internal process for responding to any compromise of the form database, consistent with DPDP breach-notification requirements as they come into force.