Privacy Policy
This policy explains what personal and financial information OmnyTax collects, how we use it, who we share it with, and your rights over your data.
By using OmnyTax’s website (omnytax.com) or any of our services — including tax filing, GST registration, company incorporation, and related advisory — you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our services.
Who We Are
OmnyTax (“we”, “us”, “our”) is a professional tax and legal services firm operating through qualified Advocates and ICAI-registered Chartered Accountants. We provide income tax filing, GST services, company registration, notice reply, and related compliance services to individuals and businesses across India.
Our principal contact details are:
| Business Name | OmnyTax |
| Website | omnytax.com |
| contact@omnytax.com | |
| Phone / WhatsApp | +91 79918 84188 |
| Based In | Lucknow, Uttar Pradesh, India |
Information We Collect
We collect only the information necessary to provide the specific service you request. This falls into three categories:
A. Information You Provide Directly
- Identity information: Full name, date of birth, PAN (Permanent Account Number), Aadhaar number
- Contact information: Mobile number, email address, residential address, city, state
- Financial information: Income details, Form 16, bank statements, capital gains statements, investment proofs, GST invoices, business turnover data
- Business information: Company name, CIN, GSTIN, director details, MCA credentials (for company-related services)
- Government credentials: Income Tax portal login (if provided by you for filing), GST portal credentials (if provided for return filing)
- Communication data: Messages, queries, and documents shared via WhatsApp, email, or our contact form
B. Information Collected Automatically
- IP address, browser type, and device information when you visit our website
- Pages visited, time spent, and referring URLs (via analytics tools)
- Cookie identifiers (see Section 8 for our cookie policy)
C. Sensitive Personal Data or Information (SPDI)
We collect SPDI only with your explicit consent and only to the extent necessary to provide the requested service. You may withdraw consent at any time, though this may affect our ability to deliver certain services.
How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Information Used | Legal Basis |
|---|---|---|
| Filing your Income Tax Return | PAN, income data, Form 16, investment proofs | Contract / Your consent |
| GST registration and return filing | GSTIN, business data, invoices | Contract / Your consent |
| Company registration and MCA filing | Director details, address, DSC | Contract / Your consent |
| Replying to tax or GST notices | Notice details, financial records, correspondence | Contract / Your consent |
| Communicating with you about your case | Name, mobile, email | Legitimate interest |
| Sending service updates and reminders | Mobile, email | Legitimate interest |
| Improving our website and services | Anonymised usage data | Legitimate interest |
| Legal and regulatory compliance | As required by law | Legal obligation |
We do not use your information for automated decision-making or profiling, and we do not sell your data to any third party for marketing purposes under any circumstances.
Who We Share Your Information With
We share your information only as strictly necessary to deliver your requested service. We do not sell, rent, or trade your personal information.
Government Portals (Required for Service Delivery)
- Income Tax Department Portal (incometax.gov.in) — for ITR filing, notice responses, and tax compliance
- GST Portal (gst.gov.in) — for GST registration, return filing, and notice replies
- Ministry of Corporate Affairs Portal (mca.gov.in) — for company registration and ROC filings
- TRACES Portal — for TDS reconciliation and Form 26AS verification
Internal Professionals
- Assigned CAs or Advocates within the OmnyTax team who are bound by professional confidentiality obligations under ICAI guidelines and the Bar Council Rules
Service Providers
- Cloud storage and email providers — for secure document storage and communication (bound by data processing agreements)
- WhatsApp (Meta) — when you choose to communicate via WhatsApp (subject to WhatsApp’s own privacy policy)
- Payment processors — for processing fees (we do not store your card or banking details)
- Website analytics — anonymised usage data only (no personally identifiable information)
Our core commitment: Your PAN, Aadhaar, financial data, and government portal credentials are never shared with any party other than the government portals required to deliver your service, and the qualified professional assigned to your case. Never for advertising. Never for sale.
Data Security
We take data security seriously and implement the reasonable security practices mandated under the IT (SPDI) Rules, 2011. Our security measures include:
- All documents and sensitive data stored on encrypted servers with access restricted to your assigned professional only
- Secure HTTPS connections for all website data transmission
- No storage of government portal passwords — we use OTP-based or credential-based access only during the active service window
- Internal access controls ensuring only the assigned CA or Advocate can view your case files
- Regular review of security practices and staff training on data confidentiality
- WhatsApp communications are end-to-end encrypted by default
While we take every reasonable precaution, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but commit to acting responsibly and promptly if a breach occurs.
Data Retention
We retain your personal and financial information for as long as necessary to provide our services and comply with legal obligations:
| Type of Data | Retention Period | Reason |
|---|---|---|
| ITR filing documents and acknowledgments | 7 years from filing date | Income Tax Act requirement |
| GST records and invoices | 6 years from relevant tax year | GST Act requirement |
| Company registration documents | Duration of company existence + 8 years | Companies Act requirement |
| Notice reply correspondence | Until case closure + 3 years | Potential litigation reference |
| Contact form submissions | 12 months | Customer service reference |
| Website analytics data | 26 months (anonymised) | Service improvement |
After the applicable retention period, your data is securely deleted or anonymised. You may request early deletion of your data subject to our legal obligations (see Section 7 below).
Your Rights
Under the Information Technology Act, 2000 and the SPDI Rules, 2011, you have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request correction of any inaccurate or incomplete information
- Right to Withdrawal of Consent: Withdraw consent for processing of your SPDI at any time (note: this may affect our ability to continue providing certain services)
- Right to Deletion: Request deletion of your personal data, subject to our legal retention obligations
- Right to Grievance Redressal: Lodge a complaint about how we handle your data
To exercise any of these rights, contact us at contact@omnytax.com with the subject line “Privacy Request — [Your Name]”. We will respond within 30 days.
Cookies
Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use the following types:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the website to function (e.g. session management) | Session |
| Analytics Cookies | Understand how visitors use the site (anonymised — no personal data) | 26 months |
| Preference Cookies | Remember your choices (e.g. language, previously selected options) | 12 months |
We do not use advertising or tracking cookies. You can control cookie settings through your browser. Disabling essential cookies may affect site functionality. Analytics cookies can be disabled without impact to your experience.
Third-Party Links
Our website may contain links to third-party websites including government portals (incometax.gov.in, gst.gov.in, mca.gov.in) and external services. These websites have their own privacy policies which we do not control and are not responsible for.
We encourage you to review the privacy policies of any third-party websites you visit from our site. The inclusion of a link does not imply our endorsement of that website’s privacy practices.
Children’s Privacy
Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal information from minors under the age of 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@omnytax.com and we will delete such information promptly.
In cases where tax filing is required for a minor (e.g. a minor with investment income), the parent or legal guardian must initiate and manage the service request on the minor’s behalf.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify active clients by email where the changes materially affect how we handle their data
- Post a notice on our website for at least 30 days after significant changes
We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.
Previous versions of this Privacy Policy are available on request by emailing contact@omnytax.com.
Contact Us About Privacy
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:
| contact@omnytax.com | |
| Subject Line | Privacy Request — [Your Name] |
| Phone | +91 79918 84188 |
| Response Time | Within 30 days of receiving your request |
If you are not satisfied with our response, you may approach the relevant authorities under the Information Technology Act, 2000 or file a complaint with the Ministry of Electronics and Information Technology (MeitY), Government of India.
We take every privacy request seriously. Reach out and we’ll respond within 30 days.