Privacy Policy

BlackPapers is a brand operated by Tributaries Unicorn LLP (“BlackPapers”, “we”, “us”). For the processing described here, Tributaries Unicorn LLP ordinarily determines the purpose and means and acts as the Data Fiduciary or data controller. An assigned independent professional may also act as a separate Data Fiduciary/controller for obligations imposed by that professional’s governing law.

This policy applies to blackpapers.in, our forms, communications, accounts, admin portal, uploaded documents and related online or offline services. Our detailed India-specific rights notice is the DPDP Policy.

We collect only information reasonably connected with a disclosed purpose, an order or a legal obligation. The exact fields depend on the service.

Do not send Aadhaar, PAN, bank records, signatures, passwords or other high-risk documents through a general enquiry form. Use only the secure channel identified for the service.

• you, your employer, an authorised representative, director, partner or account user;
• government registries and lawfully available public records, including MCA and GST sources;
• assigned professionals, referral partners and service providers;
• payment, hosting, email, security and communications systems; and
• your browser or device, subject to the choice in our Cookies & Cache Policy.

If you provide another person’s data, you confirm that you are authorised to do so and have given them any notice required by law.

Depending on the activity and law in force, we process personal data with valid consent; to respond to data voluntarily supplied for a specified request; to perform an accepted service; to comply with law, professional or regulatory duties; to establish or defend legal claims; and for other legitimate uses expressly permitted by applicable law.

Consent for optional analytics, support widgets, embedded maps or marketing is separate from the data needed to operate the site or supply a requested service. Silence, inactivity and pre-ticked boxes are not treated as consent. Withdrawal does not invalidate earlier lawful processing and may prevent us from continuing a service that needs that data.

We disclose the minimum reasonably necessary information, on a role and need-to-know basis, to:

• authorised team members and administrators;
• assigned chartered accountants, company secretaries, advocates, valuers and other professionals;
• government portals, regulators, courts and authorities when authorised or required;
• hosting, storage, email, communication, payment, analytics, security and document processors;
• an acquirer, investor or adviser in a genuine restructuring, financing or business transfer under appropriate confidentiality; and
• law-enforcement or other persons where disclosure is required to comply with law, protect rights, prevent fraud or respond to an emergency.

We do not sell personal data or permit another party to use service documents for its independent advertising. A professional receiving your matter may be independently responsible for their own statutory and professional records.

Our business-record search may display information that a government registry, the entity concerned or another person legally required to publish has made public. We do not intentionally display private phone numbers, personal email addresses or confidential uploaded documents as unrestricted public content. Public-source data can be incomplete, delayed or inaccurate and must be verified against the issuing authority before reliance.

To request correction, suppression of a non-public field or review of a record, email us with the record URL, field and supporting proof. We may retain or restore information where publication is lawful and reasonably necessary, or where a legal obligation prevents removal.

Strictly necessary storage supports security, consent and functions you request. Optional analytics, Tawk.to support and Google Maps remain blocked unless you choose Accept all. Choosing Accept important or Decline keeps optional tools blocked. You may change the choice at any time using “Manage cookies” in the footer.

Third-party links and enabled embeds are governed by their operators’ policies. We are not responsible for an external website merely because we link to it.

We keep data for the shortest period reasonably needed for the stated purpose, service, security, audit, dispute or legal record. Indicative periods are: enquiries for up to 24 months after the last meaningful interaction; consent records for up to 24 months after the relevant choice is superseded; internal page-view analytics for up to 13 months; and operational/security logs for at least one year where the final DPDP Rules require that period once applicable.

Invoices, tax, corporate, filing, client and professional records may be retained for the longer period required by the law governing that record, a regulator, limitation period or active dispute. After expiry, we delete, anonymise or securely isolate data from ordinary use. Backups are removed on their normal protected rotation.

We use proportionate technical and organisational safeguards, which may include access control, authenticated administration, transport encryption, masking or limited display, logging, backups, vendor restrictions and incident procedures. No internet or storage system can be guaranteed completely secure. You are responsible for protecting credentials and for promptly reporting suspected account misuse.

Subject to applicable law and verification, you may request access to a summary of processing, correction, completion, updating or erasure; withdraw consent; object to or restrict certain processing where that right applies; change marketing and cookie choices; raise a grievance; and nominate another individual where the DPDP Act provides that right.

We may refuse or limit a request where identity cannot reasonably be verified, the request concerns another person, retention is legally required, an exemption applies, or the request is fraudulent or manifestly unfounded. We will explain the reason where law requires.

The website and services are intended for adults and businesses. We do not knowingly target children with advertising or behavioural monitoring. If a service exceptionally requires a child’s personal data, we will seek verifiable consent of a parent or lawful guardian and apply the restrictions required by law.

Some approved technology providers may process data outside India. We use contractual and access safeguards appropriate to the service and will comply with any government restriction or sector-specific localisation requirement that applies to the data.

We may update this policy for changes in law, technology or services. We will post the revision date and give a proportionate notice for a material change. A new consent-based purpose will receive a fresh notice and choice; continued browsing alone is not consent to that new purpose.

Data Fiduciary: Tributaries Unicorn LLP, operating as BlackPapers
Privacy and Grievance Contact: Vishvendra Singh, Compliance Lead & Grievance Officer
Address: E49/5, Pocket D, Okhla Phase II, Okhla Industrial Estate, New Delhi, Delhi 110020
Email: connect@blackpapers.in
Phone: +91 82998 24396

Use the subject “Privacy Request” and include the email or phone connected with the relevant interaction. You can also use our grievance form.