Privacy Policy

Scope

Who this policy applies to

This Privacy Policy applies to visitors and users of crossbordertaxdesk.com, including NRIs, returning Indians, global Indians, CPA firms, professional users and anyone who submits an enquiry or uses a website tool.

This policy applies only to information handled through the CBTD website and related communications. A separate engagement letter or professional-services agreement may contain additional confidentiality and data-handling terms.

Purpose

How we use information

We may use personal information to:

• respond to enquiries and arrange a consultation or follow-up;
• understand the issue, service area and professional support requested;
• route an enquiry to an appropriate CA, tax professional or service team;
• prepare proposals, engagement scopes and service communications;
• operate, maintain, secure and improve the website and its tools;
• measure website performance, traffic sources and user interactions;
• prevent spam, abuse, fraud and unauthorised use;
• maintain business, tax, legal and compliance records; and
• comply with applicable law, regulatory requests and lawful obligations.

Where applicable, information is processed with your consent, to take steps requested by you, to provide agreed services, to operate and secure the website, or to comply with law.

Enquiries

Website forms and communications

When you submit an NRI, CPA or other enquiry form, the form may collect your name, contact details, country, issue type, message, page URL and related information. The data is transmitted through the form endpoint used by CBTD and may be stored using Google services such as Apps Script, Google Sheets and email systems.

Information provided in a form may be used to contact you by email, telephone or WhatsApp regarding the enquiry. We do not use website forms to collect passwords, account login details, one-time passwords, card PINs or similar credentials.

Website measurement

Analytics, cookies and similar technologies

CBTD uses Google Analytics and may use cookies or similar technologies to understand traffic, referral sources, device types, page performance and user interactions. This helps us improve navigation, content, tools and conversion paths.

Analytics information is generally used in aggregated or pseudonymous form. Google and other technology providers may process technical information under their own privacy terms.

You can control or delete cookies through your browser settings. Disabling some cookies may affect website functionality or measurement. Where applicable law requires consent for a particular technology, CBTD will seek or manage that consent as required.

Calculators and generators

How CBTD tools handle information

Some CBTD tools perform calculations or organise information directly in your browser. The Schedule FA Generator is designed so that uploaded CSV, XLS or XLSX files are processed locally on your device and are not uploaded to CBTD servers.

Generated workpapers, calculations and results remain under your control unless you separately choose to submit or share them. A tool may still generate ordinary website analytics events, such as a page view or button interaction, without collecting the contents of the file being processed.

Each tool may include its own privacy note or disclaimer. Where a tool-specific notice differs from this general policy, the more specific notice should be read together with this policy.

Disclosure

How information may be shared

CBTD does not sell personal information to advertisers.

Information may be shared only where reasonably necessary with:

• CA professionals, tax advisers, accountants, legal professionals or service partners involved in evaluating or delivering the requested support;
• technology providers supporting forms, email, analytics, hosting, document processing or business administration;
• banks, authorities or other parties where you ask us to assist with a specific process and the disclosure is appropriate; and
• government, regulatory or law-enforcement authorities where disclosure is required by applicable law or a lawful request.

Where practical, information is limited to what is relevant for the purpose. Professional advisers and service providers are expected to handle information confidentially and use it only for the agreed work.

Storage period

How long information is retained

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, delivering services, maintaining professional and business records, resolving disputes, preventing abuse and meeting tax, legal or regulatory obligations.

Retention periods may differ depending on whether the information relates to an unanswered enquiry, an active engagement, professional workpapers, invoices, tax records or a legal obligation. Information that is no longer required may be deleted, anonymised or securely archived.

Protection

How we protect information

CBTD uses reasonable administrative, technical and organisational measures intended to protect information from unauthorised access, misuse, loss, alteration or disclosure. These measures may include access restrictions, service-provider controls, secure connections, limited data collection and internal handling procedures.

No internet transmission, email system or storage method can be guaranteed to be completely secure. Users should avoid sending unnecessary sensitive data and should use a separately agreed secure method for confidential documents.

Your choices

Access, correction, deletion and withdrawal

Subject to applicable law and the nature of the information held, you may request:

• confirmation of whether CBTD holds personal information about you;
• access to or a summary of that information;
• correction of inaccurate or incomplete information;
• deletion of information that is no longer required or lawfully retained;
• withdrawal of consent for future processing where processing depends on consent; and
• review of a privacy grievance or concern.

Withdrawing consent does not affect processing already completed and may limit CBTD’s ability to respond to an enquiry or continue a service. We may need to verify identity before acting on a request.

This policy is intended to operate consistently with applicable Indian data-protection requirements, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 as brought into force, and other applicable information-technology and privacy rules.

Cross-border processing

International service providers and users

CBTD serves users in multiple countries and uses technology providers that may process or store information in India or other jurisdictions. As a result, information may be processed outside the country where you are located.

Where cross-border processing occurs, CBTD seeks to use established service providers and reasonable safeguards, subject to applicable law and any restrictions notified by relevant authorities.

Age

Children’s privacy

CBTD services are intended for adults, businesses and professional users. The website is not directed to children. We do not knowingly seek personal information from children through the enquiry forms.

If a parent or guardian believes that a child has submitted personal information, they may contact us to request review and deletion, subject to applicable requirements.

External platforms

Third-party websites, videos and services

The website may contain links to government portals, banks, professional resources, YouTube videos and other third-party websites. CBTD does not control the privacy, security or content practices of those external services.

Users should review the privacy notices of external websites before submitting information or using their services.

Updates

Changes to this Privacy Policy

CBTD may update this policy when website features, tools, service providers, business practices or legal requirements change. The revised policy will be posted on this page with an updated date.

Material changes may also be highlighted on the website or communicated through another appropriate method where required.