Privacy Policy

1. Privacy Commitment & Scope

CraftEgon Corporate Services (CCS) respects and safeguards the privacy of our clients, directors, shareholders, and website visitors. This Privacy Policy details how we collect, store, process, and protect your personal and corporate financial data across our legal technology infrastructure.

2. Information We Collect

To successfully process incorporation, tax filings, and corporate licenses, we collect the following categories of information:

• Identity & KYC Data: Permanent Account Number (PAN), Aadhaar, Passport, Voter ID, and Director Identification Numbers (DIN).
• Contact & Demographic Data: Legal name, email address, mobile/WhatsApp telephone number, registered office address, and utility bills.
• Corporate Records: Proposed company names, shareholding structures, capitalization figures, Memorandum and Articles of Association.
• Financial & Tax Data: Bank account statements, cancelled cheques, GSTIN numbers, turnover details, and previous tax assessments.
• Digital Credentials: Class 3 Digital Signature Certificate (DSC) files and PINs (processed strictly for authorized statutory portal signing).

3. Purpose of Processing & Lawful Basis

We process your data exclusively for statutory fulfillment, including:

• Uploading statutory web forms to the Ministry of Corporate Affairs (SPICe+, DIR-3 KYC, AOC-4, MGT-7).
• Submitting GST registrations (REG-01) and monthly returns (GSTR-1, GSTR-3B).
• Filing corporate income tax returns (ITR-6) and withholding tax statements (24Q, 26Q).
• Transmitting trademark applications (TM-A) to the Trade Marks Registry.
• Facilitating client communication, statutory deadline reminders, and invoicing.

4. Data Sharing & Third-Party Disclosures

Zero Commercial Selling: CCS does not sell, rent, or lease your personal or corporate data to third-party telemarketers or advertisers.

Data is disclosed solely to:

• Statutory & Government Portals: MCA V3, GSTN, TRACES, Income Tax Department, IP India, EPFO, and ESIC.
• Empanelled Regulated Professionals: Qualified Chartered Accountants, Company Secretaries, and Trademark Attorneys engaged in executing your specific mandate.
• Cloud & Infrastructure Providers: Secure Tier-4 data centers within India operating under strict non-disclosure agreements.

5. Data Security & Encryption Standards

We deploy bank-grade security protocols, including 256-bit SSL encryption in transit, AES-256 encryption at rest, role-based access controls, and document watermarking to prevent unauthorized disclosure or leakage of client KYC documents.

6. Grievance Redressal Officer

In accordance with Information Technology Act, 2000 and rules made thereunder, inquiries or grievances regarding your data may be addressed to: