Privacy Policy

Updated: 24 October 2026

1. About this notice

This notice describes information handled by the National GST Association (NGSTA), Registration No. KUA/THANE/2305/2026, through its website. Contact the Association with questions before submitting sensitive information.

2. Information collected

Membership applications

The membership form requires Membership Category, Nature of Business / Profession, Professional Designation / Occupation, Full Name, Email, Mobile, Member Photograph, Aadhaar Last 4 Digits, Address Line, City, District, State, PIN Code, and acceptance of the declaration and terms. Organization / Firm Name, GSTIN and Establishment Date are optional.

Only the last 4 digits of Aadhaar are required for membership-number generation. Do not submit your full Aadhaar number or an Aadhaar document. Checking four digits does not independently verify identity. The form does not request a date of birth, gender or father’s/spouse’s name. Historical member records may retain information collected by earlier forms.

Contact and position applications

The contact form collects name, email, contact number, inquiry category, subject and message, with an optional Member ID. Please do not include Aadhaar or other sensitive identity documents in messages.

The separate position-application process collects a Membership ID, Business / Company Name, Turnover Range, Financial Year, GST Number, PAN Number and Work Area. Position applications do not collect Aadhaar. Position identity review is separate from automatic paid-membership activation.

Payments and technical records

Membership records include application identifiers, payment references and statuses, issue and validity dates, and notification history. The website does not request card numbers, CVVs, UPI PINs or banking passwords. Payment-provider forms have their own data handling practices; review those before submission.

Session cookies support forms, administrator authentication and protected document access. Request limits and operational logs support security and troubleshooting. Hosting services may also record access information.

3. Use and access

Information supports application processing, payment reconciliation, membership records, certificate and ID card generation, transactional notifications and responses to enquiries. Current website functionality does not publish a member directory or provide a member discussion forum, newsletter subscription or automated renewal reminders.

Member information is restricted to authenticated administrative views and authorized document access. A Member ID alone does not authorize document download. Full Aadhaar numbers are not displayed on certificates, ID cards or administrative detail pages.

4. Storage and protection

New membership applications store only Aadhaar last four digits, not a full Aadhaar number or its ciphertext. Historical encrypted Aadhaar records are retained unchanged. Registration administrative displays show only stored last four digits and do not decrypt historical Aadhaar. Position-application PAN and GST numbers remain encrypted. Photographs are held in private storage and used for membership credentials; generated credentials contain the member information needed for their intended purpose.

Server-side validation, access checks, request limits and protected document sessions help prevent unauthorized access. Access to hosted records, encryption keys and backups must remain restricted to authorized operators. No system can promise absolute security.

5. Service providers

Hosting, payment and email providers may handle information needed to provide those services. The Association must review their processing, access and retention arrangements. No public member lookup or automated third-party marketing feed is implemented by this website.

6. Retention, corrections and deletion requests

The website does not automatically delete membership records when membership expires. It does not implement a self-service erasure or correction portal. Contact NGSTA to request review, correction or deletion of your information. Requests require Association review; no fixed deletion deadline or automatic deletion is promised here.

The retention schedule and applicable handling of deletion requests require approved policy and legal review. Full Aadhaar collection is not part of new registration. This notice does not itself establish that authorization.

7. Contact and changes

For privacy enquiries, contact info@ngsta.in or the Association’s contact desk. Registered office: Sushila Sadan, Plot No. 464, B Cabin Road, Ambernath (East), Thane – 421501, Maharashtra, India.

Changes to this notice will be published on this page with an updated date. External websites and payment providers maintain their own notices.