Privacy Policy & Data Protection

Mihen Halani & Associates (“MHA”, “we”, “us”, or “our”) is a firm of practising Company Secretaries and corporate governance advisors operating under the statutory framework of the Institute of Company Secretaries of India (ICSI).

This Privacy Policy applies to all individuals, corporate entities, founders, directors, and representatives who access, browse, or communicate through our website or engage our professional advisory services across Board Governance, Corporate Secretarial, FEMA & Cross-Border Compliance, SEBI Listing Regulations, and Capital Market Readiness.

This Policy should be read in conjunction with our Terms & Conditions. By accessing or using our website, submitting queries, or sharing information with us, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy.

We collect both Personal Information and Non-Personal Technical Information when you interact with our website or engage our professional secretarial and governance consultancy services (“Information”):

• Identity & Contact Information: Full name, professional title, corporate designation, email address, telephone number, organization name, DIN/DPIN credentials, and official corporate communication details.
• Engagement & Regulatory Data: Information relating to corporate filings, board structures, shareholding patterns, transaction documents, statutory registers, or regulatory queries provided for advisory proposals.
• Technical Telemetry: IP address, device specifications, browser type, operating system, timestamped access logs, and website interaction analytics collected solely to maintain site integrity and security.

The Information we collect is processed strictly for legitimate professional, administrative, and regulatory compliance purposes, including:

• Formulating, evaluating, and delivering governance advisory, secretarial, FEMA, and capital market proposals.
• Communicating regulatory alerts, corporate compliance calendars, statutory legal updates, and advisory insights.
• Verifying stakeholder identity, maintaining statutory registers, and preventing fraudulent or unauthorized activities.
• Complying with statutory directives under the Companies Act, 2013, SEBI Regulations, RBI/FEMA guidelines, and orders of judicial or quasi-judicial authorities.

We maintain strict confidentiality over all client information. Disclosures are made solely under the following defined circumstances:

• When explicitly instructed or authorized by you in connection with client engagements (such as filings with the ROC, MCA, SEBI, stock exchanges, or RBI).
• Where mandated by law, court orders, or statutory regulatory authorities under compulsory legal processes.
• To trusted professional auditors or technical infrastructure partners bound by equivalent strict non-disclosure obligations.

MHA implements robust technical, organizational, and administrative safeguards to protect your Data against unauthorized access, loss, alteration, or breach.

Our security practices include SSL/TLS encryption, role-based access control, periodic vulnerability assessments, and secure cloud storage. In the event of a suspected data security incident, please notify our compliance team immediately at contact@mha-cs.com.

We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as mandated by applicable statutory laws, Company Secretarial standards (SS-1 and SS-2), the Companies Act, 2013, and tax regulations in India.

Where advisory services involve foreign direct investment (FDI), overseas direct investment (ODI), external commercial borrowings (ECB), or cross-border corporate restructuring under the Foreign Exchange Management Act (FEMA), information may be processed or transferred internationally under adequate security safeguards compliant with applicable Data Protection Laws.

Our website utilizes cookies and similar tracking technologies to enhance browsing experience, evaluate site performance, and remember navigation preferences. You can manage, restrict, or disable cookies through your browser settings at any time without restricting core informational access to our website.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable corporate data protection principles, you possess rights to:

• Request confirmation and summary of Personal Data processed by MHA.
• Request correction, updating, or completion of inaccurate information.
• Request erasure of Personal Information, subject to statutory retention obligations under Indian company law.
• Withdraw consent for optional communications or regulatory email alerts at any time.

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent Courts of Mumbai, Maharashtra, India.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our designated compliance officer: