Back to Home*data privacy & governance standards*

Privacy Policy

Last Updated: October 2026•DPDP Act 2023 Compliant•Zero-Trust Architecture
Ledger Temple ("we," "our," or "us") holds client confidentiality as our highest fiduciary principle. This policy explains how we collect, process, store, and safeguard your personal and enterprise corporate data in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

01. Information We Collect

To facilitate statutory filings before the Ministry of Corporate Affairs (MCA), Goods and Services Tax Network (GSTN), and Intellectual Property India (IPIndia), we process:

  • Direct Personal Identifiers: Full legal name, date of birth, father's name, PAN card numbers, masked Aadhaar copies, passport details, phone numbers, and residential addresses.
  • Corporate & Secretarial Records: Proposed corporate names, Articles & Memorandums of Association (MOA/AOA), Director Identification Numbers (DIN), share capital structures, board resolutions, and bank statements.
  • Authentication & Technical Logs: SSO federated identity tokens (Microsoft, OpenAI/ChatGPT, Google, Apple, GitHub), IP addresses, browser agent signatures, and audit trails when using the client portal.

02. Lawful Purpose & Processing Grounds

Under the DPDP Act 2023, data processing occurs strictly on lawful grounds:

  • Explicit Consent: To execute contracts and facilitate statutory incorporation, trademark, or tax compliance filings requested by you.
  • Legal & Regulatory Obligations: Complying with MCA compliance rules, GST auditing mandates, Anti-Money Laundering (AML) verifications, and KYC obligations under Indian statutory frameworks.

03. Strict Non-Disclosure & Third-Party Sharing

We do not sell, rent, trade, or monetize your corporate information. Disclosures are limited solely to:

  • Statutory Regulators: The Ministry of Corporate Affairs, Income Tax Department, CBIC, and Controller of Patents & Trademarks as required to complete your requested filings.
  • Authorized Professionals: Emptied and scoped access granted only to verified Chartered Accountants and Company Secretaries working on your docket under bilateral Non-Disclosure Agreements (NDAs).

04. Cryptographic Security & Infrastructure

Client data is protected using defense-in-depth security standards:

  • Encryption in Transit: TLS 1.3 encryption across all client communications and portal transmissions.
  • Encryption at Rest: AES-256 bit hardware-level encryption across enterprise databases and cloud file storage vaults.
  • Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA), and immutable audit logs.

05. Your Rights as a Data Principal

As a client and Data Principal under the DPDP Act, you have the right to:

  • Access a summary of your personal data processed by Ledger Temple.
  • Request rectification or updating of inaccurate records.
  • Request erasure or deletion of personal data (subject to statutory audit retention rules).
  • Nominate an individual to exercise rights on your behalf in the event of incapacity.
To exercise any of these rights, visit our dedicated Data Deletion Policy or contact our Data Protection Officer below.

06. Grievance Officer & Redressal

In accordance with the Information Technology Act 2000 and DPDP Act 2023, the details of our Data Protection & Grievance Redressal Officer are:

Grievance Officer
Legal & Compliance Lead
privacy@ledgertemple.com
Response SLA
All privacy grievances are acknowledged within 24 hours and addressed within 15 business days.