Privacy Policy
Effective Date: April 24, 2026
Last Updated: April 24, 2026
1. Introduction
GATP Solutions (P) Ltd is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at www.gatpsolutions.com or engage us for our accounting, bookkeeping, taxation, financial planning, virtual CFO, and related professional services.
By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our website or services.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal and business information that you voluntarily provide to us, including:
- Full name, email address, phone number, and mailing address
- Business name, registration details, and industry type (e.g., e-commerce, real estate, healthcare, SaaS)
- Financial records, bank statements, invoices, payroll data, and tax-related documents shared to deliver our services
- Login credentials for cloud accounting platforms (e.g., QuickBooks Online, Xero, NetSuite) that you explicitly authorize us to access
- Communications sent via email, contact forms, or consultation calls
- Payment and billing information processed securely through our payment gateway
- Any other information you choose to share when requesting a consultation or during client onboarding
By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our website or services.
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical data, such as:
- IP address, browser type and version, and operating system
- Pages visited, time spent on each page, and referring URLs
- Device identifiers and cookies (see Section 8 for our Cookie Policy)
- Clickstream data and aggregated website usage statistics
2.3 Information from Third Parties
We may receive information about you from third-party service providers, referral partners, cloud accounting platform integrations (where authorized by you), and publicly available sources for the purpose of verifying identity or understanding your business needs.
3. How We Use Your Information
We use the information we collect for the following legitimate purposes:
- Delivering and managing our accounting, bookkeeping, tax filing, virtual CFO, and financial planning services
- Communicating with you regarding your account, service updates, deadlines, and professional queries
- Preparing and filing tax returns and financial reports (US, Canada, Australia, New Zealand, UK, and Europe) on your behalf
- Verifying your identity and ensuring the accuracy and integrity of financial records
- Sending relevant industry insights, newsletters, and promotional communications (you may opt out at any time)
- Improving our website functionality, user experience, and overall service quality
- Complying with applicable legal, regulatory, and professional accounting obligations
- Preventing fraud, unauthorized access, and ensuring information security
- Responding to legal requests, court orders, or regulatory inquiries
4. Legal Basis for Processing (GDPR & Applicable Laws)
For clients located in the European Economic Area (EEA), the United Kingdom, Australia, Canada, or other jurisdictions with data protection legislation, we process your personal data on the following lawful bases:
- Contractual Necessity: Processing required to perform our services as per our engagement agreement
- Legitimate Interests: Improving our services, protecting against fraud, and communicating with existing clients
- Legal Obligation: Complying with tax laws, anti-money laundering regulations, and professional accounting standards
- Consent: Where you have explicitly opted in, such as subscribing to our newsletter or marketing communications
5. Sharing and Disclosure of Information
We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist us in delivering services, including cloud storage providers (e.g., Google Workspace), payment processors, and accounting software platforms (e.g., QuickBooks Online, Xero, NetSuite). All such vendors are bound by confidentiality agreements and data processing terms. A list of key sub-processors is available on request by contacting privacy@gatpsolutions.com.
- Tax and Regulatory Authorities: Government bodies such as the IRS, HMRC, ATO, or CRA, where required for tax filing or regulatory compliance on your behalf
- Professional Advisors: Attorneys, auditors, or specialist consultants engaged under strict confidentiality obligations
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections
- Legal Requirements: When required by applicable law, court order, or to protect the rights, property, or safety of GATP Solutions, our clients, or the public
6. International Data Transfers
GATP Solutions is headquartered in New Delhi, India, and serves clients across the United States, Canada, Australia, New Zealand, and Europe. Your data may be transferred to and processed in India or other countries where our service providers operate. We ensure that all cross-border transfers are protected through appropriate safeguards including Standard Contractual Clauses (SCCs), data processing agreements, and compliance with applicable regulations including GDPR, PIPEDA, and the Australian Privacy Act 1988.
7. Data Retention
We retain your personal and financial information for as long as necessary to fulfill the purposes outlined in this policy, meet legal and professional obligations (typically 7 years for accounting and financial records in most jurisdictions), resolve disputes, and enforce our agreements.
For prospective clients who inquire but do not proceed to engagement, contact and communication data is retained for a maximum of 12 months from the date of last contact, after which it is securely deleted or anonymized.
When data is no longer required, we securely delete or anonymize it in accordance with applicable laws and industry best practices.
8. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. We use:
- Essential Cookies: Necessary for basic website functionality and navigation
- Analytics Cookies: Tools such as Google Analytics to understand website traffic and improve our content
- Marketing Cookies: To deliver relevant content and measure the effectiveness of our campaigns (including Google Tag Manager and reCAPTCHA)
- Preference Cookies: To remember your settings and preferences across visits
Non-essential cookies (analytics, marketing, and preference cookies) are only set after you provide explicit consent via our cookie consent banner, in accordance with GDPR and applicable privacy laws. You may manage or withdraw cookie preferences at any time through the cookie settings on our website or through your browser settings. Disabling certain cookies may limit the functionality of our website.
Regarding “Do Not Track” signals: Our website does not currently respond to browser “Do Not Track” (DNT) signals, as there is no universally accepted standard for their interpretation. We encourage users in jurisdictions with applicable opt-out rights to use our cookie settings tool or contact us directly.
9. Data Security
We implement industry-standard administrative, technical, and physical safeguards to protect your information against unauthorized access, disclosure, alteration, or destruction. Our security measures include SSL/TLS encryption for data in transit, role-based access controls, secure cloud infrastructure, multi-factor authentication for internal systems, regular security audits, and mandatory employee training on data handling. However, no method of internet transmission is completely secure, and we cannot guarantee absolute security.
Data Breach Notification: In the event of a data breach that may affect your personal information, GATP Solutions will notify affected clients without undue delay and in accordance with applicable legal requirements, including within 72 hours where required by GDPR and within applicable timeframes under CCPA/CPRA and other relevant laws.
10. Use of AI Tools and Automation
GATP Solutions uses AI-assisted tools and automation platforms to enhance the efficiency and quality of our service delivery, including in the areas of transaction categorization, financial analysis, and workflow automation.
Any AI or automation tools used by GATP Solutions are subject to the same confidentiality and data protection obligations described in this Privacy Policy. Client financial data processed through these tools is used solely for the purpose of delivering your agreed services and is not used to train third-party AI models or shared with AI providers beyond what is necessary for the function of the tool.
If you have concerns or questions about specific AI tools used in the processing of your data, please contact us at privacy@gatpsolutions.com.
11. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure (‘Right to be Forgotten’): Request deletion of your personal data, subject to our legal retention obligations
- Right to Restrict Processing: Request that we limit how we use your data in specific circumstances
- Right to Data Portability: Receive your personal data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
- Right to Withdraw Consent: Where processing is consent-based, withdraw it at any time without affecting prior lawful processing
California Residents (CCPA/CPRA): If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including: the right to know what personal information we collect, use, and share; the right to delete your personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of personal information. GATP Solutions does not sell or share personal information as defined under the CCPA/CPRA. To exercise your California privacy rights, please contact us at privacy@gatpsolutions.com.
Residents of Other US States: If you are a resident of Virginia, Colorado, Texas, or another US state with applicable privacy legislation, you may have similar rights to access, correct, delete, or opt out of certain uses of your personal information. Please contact us at privacy@gatpsolutions.com to exercise these rights.
To exercise any of the rights described in this section, please contact us at privacy@gatpsolutions.com. We will respond to all verified requests within 30 days (or within any shorter timeframe required by applicable law).
12. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently received personal data from a child, we will delete it promptly. If you believe we may have collected information from a minor, please contact us immediately.
13. Third-Party Links
Our website may contain links to external websites, accounting software platforms, and third-party resources. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites before sharing your personal information with them.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, applicable legal requirements, or the services we offer. We will notify you of material changes by posting the updated policy on our website with a revised “Last Updated” date and, where practicable, by email to the address on record. Your continued use of our website or services following any changes constitutes your acceptance of the updated policy. We encourage you to review this policy regularly.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at:
GATP Solutions (P) Ltd
Email: privacy@gatpsolutions.com
Website: www.gatpsolutions.com
Headquarters: New Delhi, Delhi, India
This Privacy Policy is governed by the laws of India and applicable international data protection regulations including GDPR, CCPA/CPRA, PIPEDA, and the Australian Privacy Act.
(c) 2026 GATP Solutions (P) Ltd. All rights reserved.
Your Data. Your Privacy. Our Responsibility.
Need clarification about our Privacy Policy or how we handle your information? We’re happy to answer your questions.