GDPR Rights
Your rights under the General Data Protection Regulation
Data Protection Rights
The General Data Protection Regulation (GDPR) is an EU law and does not apply to Umesh Prasad & Associates. As an Indian firm, we are governed by India's Digital Personal Data Protection Act, 2023 (DPDP Act), in force under the Digital Personal Data Protection Rules, 2025.
We process personal data only for legitimate professional purposes — audit, tax, compliance and related services — and respect the rights set out below.
Your Rights Under the DPDP Act, 2023
How to Exercise Your Rights
Send a written request to ca.upa2010@gmail.com with the subject line "Data Protection Request", stating the right you wish to exercise and your account/engagement details for verification.
Under the DPDP Act, if you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, the adjudicating body established under the Act, after first raising it with us directly.