CA Devesh Thakur

Contact Us →

Privacy Policy

Effective date: 14 November 2026

This Privacy Policy explains what personal data Devesh Thakur & Co., Chartered Accountants (“the Firm”, “we”, “us”) collects through the website www.cadeveshthakur.com (“the Website”), why it is collected, how it is used and protected, and the rights you have over it.

It is published under Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 made under Sec. 43A of the Information Technology Act, 2000, and is written to meet the notice requirements of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025.

1. Scope

This Policy covers personal data collected through the Website and through the contact channels shown on it (phone, WhatsApp and email). Information that a client gives the Firm in the course of a professional engagement is, in addition, governed by the terms of that engagement and by the duty of confidentiality that applies to Chartered Accountants.

2. Personal data we collect

We collect only the following personal data, and only when you choose to give it:

  • Careers form: full name, mobile number, email address, the category you are applying as, and the résumé / CV you upload, including whatever details you have chosen to put in it.
  • Enquiries by phone, WhatsApp or email: your name, phone number or email address, and the contents of your message.
  • Technical data: the web server may record standard log data such as IP address, browser type, pages requested and date and time, for the security and operation of the Website.

The Website does not ask for passwords, bank or payment details, Aadhaar, PAN or other financial or sensitive personal data. Please do not send such data through the Careers form or in a first enquiry.

3. Purposes for which the data is used

  • Résumé and Careers form data: to consider you for a current or future vacancy at the Firm, including articleship, and to contact you about it.
  • Enquiry data: to reply to your enquiry and, where you ask for it, to arrange a consultation.
  • Technical data: to keep the Website secure, to detect misuse and to correct errors.

We do not use your personal data for advertising, do not sell or rent it, and do not send you promotional messages.

Careers form data is processed on the basis of the consent you give by ticking the consent box before submitting the form. Enquiry data is processed because you have voluntarily provided it for the purpose of receiving a reply. We may also process personal data where a law in force in India requires or permits it.

You may withdraw your consent at any time by writing to the contact person named below. Withdrawal is as easy as giving consent, does not affect processing already carried out, and means we will stop processing the data and erase it unless a law requires us to retain it.

5. Cookies

The Website uses only those cookies that are necessary for it to function. It does not use advertising or cross-site tracking cookies. If analytics or similar tools are introduced in future, this Policy will be updated first and, where consent is required, it will be requested before such cookies are set.

6. Third-party services

Some features rely on services operated by others, which process data under their own privacy policies:

  • WhatsApp: when you choose a WhatsApp link, the conversation takes place on WhatsApp.
  • YouTube: articles may display video thumbnails from, and link to, YouTube.
  • Social media: links to the Firm’s pages on Instagram, Facebook, YouTube and LinkedIn open those platforms.
  • Service providers: the Website host, the email service provider and the form service process data on the Firm’s behalf, only for the purposes described in this Policy.

7. Sharing and disclosure

Personal data is accessed only by the Firm’s partners or proprietor and staff who need it for the purposes stated above. It is not disclosed to any other person except (a) the service providers mentioned above, under an obligation of confidentiality, or (b) where disclosure is required by law or by an order of a court or other authority competent to require it.

8. Storage and transfer outside India

Data is stored on the systems of the Firm and its service providers. Some of these providers may store data on servers outside India. Any such transfer will be made only in accordance with the DPDP Act and any restriction notified by the Central Government.

9. Retention

  • Résumés and Careers form data: retained for up to 12 months from the date of submission and then erased, unless you are engaged by the Firm or you ask for earlier erasure.
  • Enquiry data: retained for as long as needed to deal with the enquiry and for a reasonable period afterwards, and then erased, unless it becomes part of a client record that the Firm is required to keep.
  • Server logs: retained for the period required for security purposes and by applicable law.

10. Security

The Firm follows reasonable security practices and procedures appropriate to the nature of the data, including restricted access, password protection and secure storage of uploaded files. No method of transmission over the internet is completely secure. If a personal data breach affecting you occurs, the Firm will inform you and the Data Protection Board of India in the manner required by the DPDP Act.

11. Your rights

Subject to the DPDP Act, you have the right to:

  • obtain a summary of your personal data being processed and of the processing carried out (Sec. 11);
  • have inaccurate or incomplete personal data corrected, completed or updated, and have your personal data erased (Sec. 12);
  • have your grievance redressed by the Firm (Sec. 13);
  • nominate another individual to exercise your rights in the event of your death or incapacity (Sec. 14); and
  • withdraw your consent at any time.

To exercise any of these rights, write to the contact person named below from the email address or mobile number you gave us, stating your request. We may need to verify your identity before acting on it.

12. Children

The Website and the Careers form are intended for persons who are 18 years of age or older. The Firm does not knowingly collect personal data of a child. If you believe a child has provided personal data, please inform us and it will be erased.

13. Grievance Officer and contact person

Questions, requests and complaints about personal data may be addressed to:

  • Name: CA Devesh Thakur
  • Firm: Devesh Thakur & Co., Chartered Accountants
  • Address: A-2/B, 70-B, Ekta Apartments, Paschim Vihar, New Delhi – 110063
  • Email:
    cadeveshthakur@gmail.com
  • Phone:
    +91 95822 59688

A grievance will be acknowledged promptly and resolved within 30 days of receipt. If you are not satisfied with the response, you may, after first using this grievance process, make a complaint to the Data Protection Board of India in the manner provided under the DPDP Act.

14. Changes to this Policy

This Policy may be revised when the law or the Firm’s practices change. The revised Policy will be posted on this page with a new effective date.