Privacy Policy

This privacy notice explains the types of personal and operational information handled when an individual visits this website, submits an enquiry, or interacts with Bahulya Fintech regarding accounting and finance operations support services.

Where Bahulya Fintech processes operational accounting information on a client’s documented instructions, the client typically acts as the data controller determining the purposes and means of processing, while Bahulya Fintech acts as an authorized data processor under applicable data protection frameworks.

The nature of information handled depends entirely on what the visitor chooses to submit, which website tools are active, and whether an active client engagement agreement is in place.

Where permitted by applicable law and confirmed in service agreements, collected information is utilized strictly for:

• Consultation & Scope Definition: Evaluating prospective client requirements, preparing formal Statements of Work, and structuring resource allocation.
• Service Delivery & Operations: Conducting transaction categorization, bank reconciliations, accounts payable workflows, and financial report compilation under client supervision.
• Security & Infrastructure Integrity: Monitoring platform availability, preventing fraudulent activity, and isolating malicious web requests.
• Regulatory & Compliance Obligations: Fulfilling statutory recordkeeping and compliance disclosures required by governing legal jurisdictions.

Our legal basis for processing data depends upon the jurisdiction of the individual and the context of the data engagement:

• Contractual Performance: Processing necessary to execute contracted accounting operations and fulfill deliverables agreed within an active Statement of Work.
• Legitimate Interests: Operating our secure corporate website, managing business relationships, maintaining system security, and communicating with enterprise prospects.
• Explicit Consent: Where a visitor explicitly opts in to optional cookies or requests specialized informational publications.

Bahulya Fintech does not sell, rent, or trade personal information or client accounting records under any circumstance. Information may only be disclosed under the following controlled boundaries:

• Approved Cloud Sub-Processors: Client-mandated cloud ecosystems (e.g., Intuit QuickBooks Online, Xero, Oracle NetSuite, Dext Prepare, Microsoft 365, Google Workspace) where the client manages licensing and user provisioning.
• Professional & Legal Advisers: Auditors, legal counsel, and compliance consultants bound by strict professional confidentiality agreements.
• Enforceable Legal Process: Where mandatory disclosure is compelled by valid court order, subpoena, or applicable regulatory statute.

Bahulya Fintech serves clients internationally across the United States, United Kingdom, and Australia. In delivering operational finance support, data may be accessed remotely across international boundaries by our vetted, trained accounting personnel.

All international access adheres strictly to Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (IDTA), and the Australian Privacy Principles (APPs). Personnel operate within zero-local-storage secure environments where accounting data remains hosted in the client’s approved cloud repository.

Information is retained only for periods justified by active business necessity, contractual obligation, or governing statutory requirements:

• Website Enquiries: Retained for up to 24 months to support relationship continuity, unless earlier deletion is formally requested.
• Client Engagement Records: Workpapers and handover archives are retained in accordance with the specific client contract (typically 7 years for tax/accounting audit defense), after which secure cryptographic deletion or return is executed.
• System & Access Logs: Security audit trails are retained for 12 months for forensic and compliance review, then purged automatically.

We employ multi-layered technical, physical, and administrative safeguards designed to protect sensitive financial records against accidental loss, unauthorized access, and malicious modification:

Depending on your location and governing data protection regulations (such as GDPR, UK Data Protection Act 2018, or CCPA/CPRA), you may hold enforceable rights regarding your personal data:

• Right of Access: Request confirmation of whether your data is processed and obtain a copy of personal information held.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure (“To Be Forgotten”): Request deletion of personal data where legal retention grounds no longer apply.
• Right to Restrict or Object: Object to processing grounded on legitimate interests or direct communications.

We review and update this Privacy Policy periodically to reflect technological enhancements, operational changes, or statutory updates. The effective date at the top of this page indicates the most recent modification.

For inquiries, Data Protection Officer communications, or exercising statutory privacy rights, please contact our dedicated compliance desk:

Privacy & Compliance Desk:
Bahulya Fintech Operations Hub
Email: bahulyafintech@gmail.com
Response Timeline: Formal acknowledgment within 48 business hours.