Privacy Policy

audit.kritiqlabs.in is operated by KritIQ Labs LLP (LLPIN ACX-5839), 07 Yesubai Niwas, B/h Solanki School, Virar East, Vasai-Virar, Palghar, Maharashtra 401305. For this website and enquiries made through it, KritIQ Labs LLP is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA).

Enquiry form. When you request a consultation we collect: society name, contact person, mobile number, email address, city, state, number of residential units, society type, current accounting method, the service you need, your message, and your consent to be contacted. We also record the page you submitted from, campaign tags in the link you followed (such as utm_source), and the date and time.

Website usage. If you accept analytics cookies, Google Analytics (through Google Tag Manager) and, where enabled, Microsoft Clarity collect information such as pages viewed, approximate location, device and browser type, and how you interact with pages. Your IP address is used briefly by our hosting provider and spam filters to protect the site.

Engagement records. If your society engages us, financial records shared for the work are handled under the written engagement terms and kept confidential.

• To reply to your enquiry and discuss your society's requirements, by phone, WhatsApp or email.
• To prepare a quote and, if you go ahead, to deliver the agreed services.
• To understand which pages and campaigns are useful, and to improve the website.
• To prevent spam and abuse of the enquiry form.
• To meet legal, tax and accounting obligations.

We process enquiry data on the basis of the consent you give when you tick the consent box. You can withdraw it at any time by emailing audit@kritiqlabs.in; we will then stop contacting you about the enquiry.

You can decline analytics cookies in the cookie banner. Google Analytics then runs in a cookieless mode and Microsoft Clarity is not loaded. To change your choice later, clear this site's data in your browser and the banner will appear again.

We do not sell personal data, and we do not use it for advertising.

We share personal data only with service providers that help us run the website and reply to you:

• Our website hosting provider.
• Resend, which delivers enquiry emails, and our email provider for the audit@kritiqlabs.in mailbox.
• Google (Google Workspace / Sheets for the enquiry log; Google Analytics and Tag Manager for analytics).
• Microsoft Clarity, if enabled and you accept analytics cookies.
• Cloudflare Turnstile, if enabled, to tell people from bots.

If your society asks us to coordinate with an auditor, we share the records needed for the audit with that auditor. We may also disclose data when required by law, a court or a government authority. Some providers may process data outside India, as permitted under the DPDPA.

Enquiries that do not lead to an engagement are deleted within 24 months of our last contact, or sooner if you ask. Records relating to an engagement are kept for as long as needed to deliver the work and to meet legal, tax and accounting record-keeping requirements. Analytics data is kept according to the retention settings of the analytics tools (for Google Analytics, no longer than 14 months).

Under the DPDPA, you have the right to:

• get a summary of the personal data we hold about you and how it is used;
• have inaccurate or incomplete data corrected, and outdated data erased;
• withdraw consent;
• nominate someone to exercise your rights if you die or become incapacitated; and
• have a grievance addressed.

To use any of these rights, email audit@kritiqlabs.in.

Questions or complaints about personal data can be sent to:

We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The website is served only over HTTPS. Enquiry data is sent to access-controlled accounts, and financial records shared during an engagement are accessible only to the people working on it. No system is perfectly secure, but we take reasonable precautions and will notify affected people and the Data Protection Board of a personal data breach as the DPDPA requires.

This website and our services are meant for adults acting for residential societies. We do not knowingly collect data from children.

We may update this policy. The date at the top shows the latest version. If we start using personal data for a new purpose, we will update this policy first and ask for consent where the law requires it.

This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.