Legal
Privacy Policy
How A. N. Lakhani & Co. handles personal data in connection with this website, and the rights available to you under India's data protection framework.
Last updated:
1. Introduction
A. N. Lakhani & Co. ("the firm", "we", "us") respects the privacy of everyone who visits this website. This Privacy Policy explains what personal data we may receive in connection with www.anlakhani.com, how we use it, and the choices and rights available to you.
It is written with reference to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, which were notified on 13 November 2025. Obligations under that framework are being brought into force in stages, and we will continue to align our practices as those provisions commence.
2. About A. N. Lakhani & Co.
A. N. Lakhani & Co. is a firm of Chartered Accountants established in February 2019, practising from its head office in Vadodara and a branch at Vapi, Gujarat.
Where we determine the purpose and means of processing personal data, we act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023.
3. Scope of this Privacy Policy
This policy applies to this website and to enquiries you send us through the contact details published on it.
It does not apply to third-party services you choose to open from our links, such as WhatsApp or Google Maps. Those services are operated by other companies and are governed by their own privacy policies.
It also does not replace the terms of any professional engagement. Personal data and records we handle in the course of client work are governed by the engagement terms agreed with the client, together with our obligations as Chartered Accountants under applicable law and professional standards.
4. Personal Data We May Collect
This website does not have an enquiry form, a login, or any other feature that asks you to submit personal data. Simply browsing the site does not require you to provide any personal information to us.
We receive personal data only when you choose to contact us using the phone number, WhatsApp number or email address published on the site. Depending on what you send, that may include:
- Your name
- Your email address
- Your phone or mobile number
- Any other information you voluntarily include in your enquiry or subsequent communications
Separately from anything you send us, our hosting provider may record standard technical information in server logs — such as IP address, browser and device type, and the pages requested — as an ordinary part of delivering the website and protecting it against malicious traffic. This information is generated by the hosting infrastructure rather than collected by us through any feature of this site, and we do not use it to identify individual visitors. Its retention is governed by the hosting provider's own terms and privacy practices.
Please do not send sensitive personal information — such as financial account credentials, passwords, or identity document copies — through general website enquiries. If such information is genuinely required for professional work, we will tell you the appropriate and secure way to provide it.
5. How We Use Personal Data
Where we receive personal data, we use it to:
- Respond to your enquiry and correspond with you about it
- Provide information about our professional services
- Communicate with you regarding services you have asked about or engaged us for
- Maintain the security, availability and proper functioning of this website
- Comply with applicable legal, regulatory and professional obligations
We do not use personal data received through this website for advertising, profiling or automated decision-making.
6. Lawful Basis and Consent
Under the Digital Personal Data Protection Act, 2023, digital personal data may be processed on the basis of the Data Principal's consent, or for certain legitimate uses recognised by the Act.
When you contact us voluntarily for a specified purpose — for example, to ask about a service — and have not indicated that you object to its use for that purpose, we process the information you provide in order to deal with that enquiry.
Where consent is the appropriate basis for a particular use, we will ask for it, and you may decline or later withdraw it. Where we are required to process or retain personal data to comply with a legal obligation, we will do so to the extent the law requires.
7. Data Minimisation
We seek to collect only the personal data reasonably necessary for the purpose it is being provided for, and no more.
Because this website carries no forms, the information we hold about a website visitor is limited to what that person chooses to send us directly. We would encourage you to keep initial enquiries brief and to share detailed or sensitive information only once it is genuinely needed.
8. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was provided, or for such longer period as is required or permitted under applicable law.
Enquiries that do not lead to an engagement are retained only for as long as there is a reasonable business need to keep them. Records relating to professional engagements are retained in accordance with the record-keeping requirements that apply to us under tax, corporate and professional regulations.
10. Data Security
We take reasonable security safeguards to protect personal data in our possession against unauthorised access, disclosure, alteration or loss, including access controls and confidentiality obligations on our people.
You should be aware that no method of transmitting information over the internet is completely secure. Email and messaging services are operated by third parties, and information sent through them travels outside our systems. Please bear this in mind when deciding what to send us and how.
11. Your Rights as a Data Principal
Subject to the conditions and exceptions set out in the Digital Personal Data Protection Act, 2023 and the rules made under it, you may:
- Obtain a summary of the personal data we process about you and the processing activities undertaken
- Request correction, completion or updating of inaccurate or incomplete personal data
- Request erasure of personal data, where we are no longer required to retain it for the purpose it was collected for or under applicable law
- Withdraw your consent, where consent is the basis on which we are processing your personal data
- Have your grievance considered through the contact route set out in this policy
- Nominate another individual to exercise your rights under the Act in the event of your death or incapacity
These rights apply in the manner and to the extent provided under the Act and the rules made under it. Some requests may be limited where we are required to retain information by law or professional obligation, and we will explain the position if that arises.
To make a request, please write to us using the contact details below. We may need to verify your identity before acting on a request.
12. Withdrawal of Consent
Where we process personal data on the basis of your consent, you may withdraw that consent at any time by writing to us at the address or email given below.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Please note that if you withdraw consent we may no longer be able to respond to your enquiry or continue providing the service concerned, and we may still retain certain information where the law requires us to.
13. Grievance and Privacy Contact
If you have a question, concern or grievance about how your personal data is handled, please contact us:
- A. N. Lakhani & Co.
- Email: ashish@anlakhani.com
- Phone: 96878 48787
- Head Office: 511/512, 5th Floor, Florence Excellence, Vasna - Bhayli Main Road, Vadodara, Gujarat - 391410, India
We will acknowledge and respond to your communication within a reasonable period.
The firm has not been notified as a Significant Data Fiduciary and is accordingly not required to appoint a Data Protection Officer. Privacy queries should be directed to the contact details above.
If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it.
14. Children's Data
This website is intended for a general professional audience and is not directed at children. We do not knowingly collect the personal data of children through this website.
Where the personal data of a child is processed in the course of professional work, we handle it in accordance with applicable law, including the requirement to obtain verifiable consent from a parent or lawful guardian where that applies.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, in the website, or in applicable law. The date at the top of this page indicates when it was last revised.
We encourage you to review this page periodically so that you remain aware of how personal data is handled.
17. Contact Us
For any question about this Privacy Policy or about personal data held by the firm, please contact us:
- A. N. Lakhani & Co.
- Chartered Accountants
- Email: ashish@anlakhani.com
- Phone: 96878 48787
- Head Office: 511/512, 5th Floor, Florence Excellence, Vasna - Bhayli Main Road, Vadodara, Gujarat - 391410, India
- Office hours: Monday – Saturday, 10:30 AM – 7:30 PM