Your data, treated with the same care as your money.

NRiSimplify (operated by NRiSimplify Pvt. Ltd.) is an India-based advisory firm offering tax filing, property sale, legal, banking and repatriation services to Non-Resident Indians (NRIs) and Overseas Citizens of India (OCIs).

For the purposes of the Digital Personal Data Protection Act, 2023 (India), we act as the Data Fiduciary for the personal data you share with us through this website. For visitors in the United Kingdom and European Union, we act as the equivalent of a Data Controller under the UK / EU GDPR.

We collect personal data only when you choose to give it to us. Specifically:

a. Information you give us directly

• Contact details — name, email, phone, country of residence — when you fill our enquiry, lead-capture or calculator forms.
• Service brief — a free-text description of your situation (property sale, ITR, repatriation question, etc.).
• Engagement information — when you become a client, the financial, tax and KYC documents you share with us (PAN, passport, bank statements, sale deeds, etc.). This is handled in our advisory engagement and falls outside the scope of this website privacy policy — it is governed by our client engagement letter and the applicable Chartered-Accountant secrecy obligations.

b. Information collected automatically

• Device and browser — IP address, browser type, operating system, referring URL.
• Usage analytics — pages viewed, time on page, calculator interactions, scroll depth, broad geographic region.
• Cookies — see Section 6 below.

We do not collect sensitive personal data (financial account numbers, government IDs, biometric data) through this website. Any such data is shared only after you formally engage us as a client, through a secure channel.

We use your information for these purposes only:

• Respond to your enquiry — call or email you back within 24 hours to discuss your situation.
• Deliver the service you requested — once you become a client, to provide the advisory work itself.
• Improve our website and tools — aggregate analytics on which calculators are useful, which pages convert, etc. We never look at any single individual's session.
• Comply with law — record-keeping under Indian tax, accountancy and FEMA rules; respond to legal requests; defend our legal rights.
• Send you relevant updates — only if you have explicitly opted in (e.g. our NRI tax newsletter). You can unsubscribe from any email with a single click.

We will never sell your personal data, rent your contact list, or share your information with unrelated advertisers.

The legal grounds on which we process your personal data are:

• Your consent — when you submit a form, you are consenting to us using your details to respond. You may withdraw consent at any time by emailing us at gaurav@nrisimplify.com.
• Performance of a contract — once you become a client, processing your information is necessary to deliver the service.
• Legitimate interest — to operate, secure and improve our website (aggregate analytics, anti-spam, fraud prevention).
• Legal obligation — record-keeping under Indian tax and accountancy rules.

Your personal data stays inside NRiSimplify. The only third parties who may process it on our behalf are:

• Cloud infrastructure — our website is hosted by Vercel (USA / EU regions). Form submissions are stored on servers compliant with industry-standard encryption at rest and in transit.
• Email and CRM tooling — used by our team to reply to you, keep notes on the conversation, and schedule follow-ups.
• Analytics — privacy-respecting analytics measuring aggregate page performance.
• Regulators and law-enforcement — only where compelled by a valid Indian legal order, or where we are legally required to disclose information.

We sign written data-processing agreements with all such processors obligating them to handle your data securely and only on our instructions.

We use a minimal set of cookies and similar technologies:

• Essential — required for the site to function (session, security). Cannot be disabled.
• Analytics — measure aggregate usage so we can improve content. You can block these via your browser's privacy settings or via your operating system's tracking-prevention controls.

We do not use third-party advertising cookies, retargeting pixels or cross-site behavioural tracking.

• Enquiry submissions from non-clients — kept for 24 months from your last interaction, then deleted, unless you explicitly ask us to keep them.
• Client records — retained for the period required under Indian tax, accountancy and FEMA rules (currently 8 years from the end of the relevant financial year), after which they are securely destroyed.
• Newsletter subscriptions — retained until you unsubscribe.
• Backups — encrypted backups follow the same retention period and are then overwritten.

Because most of our clients live outside India, your personal data may be transferred between India, the country where you live, and the regions where our cloud providers operate (typically EU or US data-centres).

Where personal data leaves the United Kingdom or European Economic Area, we rely on the European Commission's adequacy decisions or on appropriate safeguards (Standard Contractual Clauses with our processors). For Indian residents, transfers comply with Section 16 of the Digital Personal Data Protection Act, 2023.

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct any data that is inaccurate or out of date.
• Delete your data (subject to our legal record-keeping obligations).
• Restrict or object to specific uses of your data.
• Withdraw consent at any time, where consent is our basis for processing.
• Port your data to another service in a structured, machine-readable format.
• Lodge a complaint with the Data Protection Board of India, the UK Information Commissioner's Office, or your local supervisory authority.

To exercise any of these rights, email gaurav@nrisimplify.com. We will respond within 30 days.

• Transport encryption — every page of this website is served over HTTPS (TLS 1.3).
• Storage encryption — all form submissions and client documents are encrypted at rest.
• Access control — only authorised NRiSimplify team members can view your data, on a need-to-know basis.
• Audit trails — every access to a client record is logged.
• Vendor security — our cloud providers (Vercel, our CRM, our email system) are independently audited (SOC 2 / ISO 27001).

No system is 100% impenetrable. If we ever experience a personal data breach that is likely to affect you, we will notify you and the relevant regulator without undue delay, as required by law.

Our services are intended for adults handling India-linked financial matters. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data from a minor, please email us and we will delete it promptly.

We may update this policy from time to time to reflect changes in law, technology or our practice. We will post the revised version on this page with an updated effective date. If the changes are material, we will notify you by email (if we hold your address) at least 30 days before they take effect.

For any privacy-related question, request or complaint, please reach our team:

• Email: gaurav@nrisimplify.com
• Phone / WhatsApp: +91-97119-88391
• Postal: NRiSimplify Pvt. Ltd., Office address as listed on our Contact page.