Privacy Policy

Introduction

WizBiz Pvt. Ltd. ("WizBiz," "we," "our," or "us") is committed to protecting the privacy and confidentiality of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our financial services, including income tax filing, GST compliance, loan facilitation, banking solutions, insurance services, and NRI consultancy.

By accessing our website or availing our services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our website or services.

This policy complies with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

Information We Collect

We collect various types of information to provide and improve our financial services. The categories of information we collect include:

Personal Information

When you register on our platform, submit an inquiry, or use our services, we may collect personal information such as:

• Full name, date of birth, and gender

• Residential address and correspondence address

• Email address and phone number

• PAN (Permanent Account Number) and Aadhaar number

• Passport details (for NRI services)

• Digital signatures and photographs

• Employment and occupation details

• Bank account details for refund processing

Financial Information

As a financial services provider, we necessarily collect sensitive financial information:

• Bank account statements and transaction history

• Income details and salary slips

• Investment portfolio details (mutual funds, stocks, fixed deposits)

• Tax return documents and Form 16

• Loan statements and credit history

• GST returns and invoices

• Property documents for NRI transactions

• Insurance policy details

Device and Usage Information

We automatically collect certain information when you visit our website:

• IP address, browser type, and operating system

• Pages visited, time spent, and navigation patterns

• Referring URL and exit pages

• Device type and screen resolution

• Location information (approximate based on IP address)

How We Use Your Information

We use the collected information for the following purposes:

• To provide and manage the financial services you have requested

• To process tax filings, GST returns, and other compliance documents

• To facilitate loan applications and insurance services through partner institutions

• To verify your identity and prevent fraud

• To communicate with you regarding your applications, filings, and inquiries

• To send updates about your service requests and deadlines

• To improve our website, services, and customer experience

• To comply with legal and regulatory obligations

• To send service-related notifications, including emails and WhatsApp messages

Legal Basis for Processing

We process your personal and financial information based on the following legal grounds:

• Consent: You have provided explicit consent for processing your data for specific services

• Contractual Necessity: Processing is required to fulfil the terms of service you have engaged us for

• Legal Obligation: We are required to process certain information to comply with tax laws, anti-money laundering regulations, and other legal requirements

• Legitimate Interests: Processing for fraud prevention, IT security, and business improvement purposes

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website.

We use the following types of cookies:

• Essential Cookies: Required for the basic functioning of our website

• Analytical Cookies: Help us understand user behaviour and improve our services

• Functional Cookies: Remember your preferences and settings

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our website.

Data Sharing and Third Parties

We share your information only when necessary to provide our services and as permitted by law. We do not sell, rent, or trade your personal information for marketing purposes.

Service Providers

We may share your information with trusted third-party service providers including:

• Banks and financial institutions for loan processing and account services

• Insurance companies for policy issuance and claims

• Tax consultants and CA firms for specialised tax advisory

• Government portals including Income Tax Department, GST portal, MCA portal

• Payment gateways for fee collection

• Cloud storage and IT infrastructure providers

• Legal and compliance advisors

All third-party service providers are contractually bound to maintain the confidentiality and security of your information.

Service-Specific Data Handling

Income Tax Services

For income tax filing services, we collect Form 16, investment proofs, bank statements, and previous tax returns. This data is used exclusively for preparing and filing your income tax returns. Data is retained for 8 years as required by the Income Tax Act, 1961.

GST Services

For GST compliance services, we collect business invoices, purchase records, and bank statements. This information is used for GST return preparation and filing. Data is retained for 8 years as mandated by GST laws.

Loan Services

For loan facilitation, we collect income documents, credit history, property papers, and identity proofs. This information is shared with partner banks and NBFCs solely for loan processing purposes.

Banking Services

For banking solutions, we collect KYC documents, account details, and transaction records. This data is used to facilitate account opening, remittances, and other banking services through our partner financial institutions.

Insurance Services

For insurance services, we collect health information, asset details, and beneficiary information. This is shared with insurance partners for policy issuance and claims processing.

NRI Services

For NRI services, we collect passport details, visa information, foreign bank account details, and residency proofs. This sensitive data is handled with the highest security and used exclusively for NRI-specific financial services.

Document Upload Security

All documents uploaded through our platform are protected using industry-standard encryption protocols:

• 256-bit SSL/TLS encryption for all data transmission

• AES-256 encryption for stored documents

• Role-based access control for our internal team

• Automatic purge of temporary files after processing

• Secure document viewing portals with time-limited access

Encryption and Confidentiality

We employ comprehensive encryption and confidentiality measures:

• End-to-end encryption for sensitive data transmission

• Multi-factor authentication for accessing our internal systems

• Regular security audits and vulnerability assessments

• Strict confidentiality agreements with all employees and contractors

• Data minimisation principles in all our processes

• Dedicated data protection officer overseeing compliance

Data Security

We implement a comprehensive security framework to protect your information from unauthorised access, alteration, disclosure, or destruction. Our security measures include secure data centres with 24/7 monitoring, firewalls, intrusion detection systems, regular security training, data encryption both at rest and in transit, and regular backup and disaster recovery procedures.

Disclaimer: While WizBiz takes reasonable and appropriate security measures to protect your personal and financial information, we cannot guarantee absolute security of data transmission over the internet. By using our services, you acknowledge that no method of electronic transmission or storage is 100% secure. We are not responsible for any breach of security beyond our reasonable control, including but not limited to unauthorised access to your data through third-party services, internet failures, or cyberattacks targeting the broader network infrastructure.

Data Retention

We retain your personal and financial information only as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory requirements:

• Tax-related documents: 8 years as required by the Income Tax Act, 1961

• GST records: 8 years as required by GST laws

• KYC documents: As long as the business relationship exists, plus 5 years thereafter

• Loan-related documents: Until the loan is closed, plus 7 years thereafter

• Insurance records: Until the policy term ends, plus 5 years thereafter

• Communication records: 3 years from the date of last interaction

Once retention periods expire, your data is securely deleted or anonymised.

User Rights

Access and Correction Rights

You have the right to access the personal information we hold about you, request correction of inaccurate or incomplete data, request deletion of your data subject to legal retention requirements, object to or restrict processing of your data, request portability of your data, and withdraw consent at any time. To exercise any of these rights, please contact us. We will respond to your request within 30 days as per applicable laws.

Marketing Communications

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in our emails, replying "STOP" to our WhatsApp messages, or contacting us directly. Please note that even if you opt out of marketing communications, we may still send you service-related communications regarding your active engagements with us.

International Data Transfers

For NRI services, your data may need to be transferred to or accessed from countries outside India. When we transfer your data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses with receiving parties and compliance with applicable data protection laws of the destination country.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such information promptly.

Third-Party Links

Our website may contain links to third-party websites, including government portals, banking partners, and insurance providers. We are not responsible for the privacy practices or content of these third-party sites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date, sending an email notification for significant changes, and displaying a notice on our website for a reasonable period.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

WizBiz Pvt. Ltd.
Email: privacy@wizbiz.in
Phone: +91-XXX-XXX-XXXX
Address: [Registered Office Address], Srinagar, Jammu & Kashmir, India