Privacy Policy
Vashistha Associates
Advocates & Consultants
PRIVACY POLICY
Effective Date: 13 September 2026
Website: vashisthaassociates.in
1. Introduction
This Privacy Policy explains how Vashistha Associates ("we", "us", "our", "the Firm") collects, uses, discloses, stores and protects personal data of visitors to our website and individuals who contact us ("you", "your"), in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and the rules made thereunder.
We are a legal practice based in Hapur, Uttar Pradesh, offering services in criminal law, family/matrimonial law, banking and N.I. Act matters, contract drafting, data privacy and cyber law, POSH compliance, FSSAI matters and consumer law. This Policy applies to personal data collected through our website, email, telephone, WhatsApp and any other channel through which you interact with us.
Please note the disclaimer displayed on our website: this website is for general informational purposes only, does not constitute legal advice, and browsing or contacting us through it does not by itself create an advocate-client relationship. Any personal data you share before such a relationship is formally established will still be handled in accordance with this Policy.
2. Personal Data We Collect
We may collect the following categories of personal data:
Identity and contact information: name, email address, phone number, WhatsApp number, and postal address, when you fill a contact form, send an email, call, or message us.
Matter-related information: details you voluntarily share regarding your legal query or matter, including facts, documents, and case-related particulars, where you choose to consult us.
Technical information: IP address, browser type, device information and pages visited, collected automatically through standard website hosting and analytics functions.
Communication records: correspondence exchanged with us by email, WhatsApp, telephone or through the website.
We do not knowingly collect sensitive categories of personal data (such as financial account details or health information) through the website unless you voluntarily provide such information in the course of describing your legal matter.
3. How We Use Your Personal Data
We use personal data for the following purposes, consistent with the notice given at the time of collection:
To respond to enquiries and requests for consultation.
To communicate with you regarding your matter, including sending updates, documents and invoices.
To provide legal services once an advocate-client relationship is established, including drafting, advisory and representation.
To maintain records as required for professional, regulatory or accounting purposes.
To improve and maintain the functioning and security of our website.
To comply with applicable law, court orders, or lawful requests from government or regulatory authorities.
4. Consent
We process your personal data on the basis of your free, specific, informed and unambiguous consent, given when you submit a form, send an email, initiate a call or WhatsApp message, or otherwise voluntarily share your personal data with us. Where required, we will provide a notice describing the personal data being collected and the purpose of processing, in English or Hindi, before or at the time of seeking consent.
You may withdraw your consent at any time by writing to our Grievance Officer at the contact details in Section 10. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to continue assisting you with an ongoing matter.
We may also process personal data without consent where permitted under the DPDPA, such as for compliance with law, response to a medical emergency, or other "legitimate uses" recognised under the Act.
5. Sharing and Disclosure of Personal Data
We do not sell or rent your personal data. We may share personal data only in the following circumstances:
With courts, tribunals, regulatory authorities or opposing counsel, strictly to the extent necessary for representing you in your matter.
With professional associates, counsel or experts engaged to assist with your matter, on a confidential basis.
With service providers who support our website hosting, email or communication systems, under confidentiality obligations.
Where required by law, statute, court order, or a lawful direction of a government or regulatory authority.
We do not transfer personal data outside India except where necessary for the purposes above and in a manner consistent with the DPDPA.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including any retention required under professional conduct rules, limitation periods, or applicable law. Specifically:
General enquiry and contact-form data, where no engagement follows, is retained for up to 12 (twelve) months from the date of the last communication, after which it is deleted or anonymised.
Matter-related records, including case files, correspondence and documents, are retained for the duration of the engagement and for a further period of 3 (three) years from the conclusion of the matter, to allow for record-keeping, billing, dispute resolution and compliance with professional-conduct rules.
Where a longer retention period is required by law, applicable limitation periods, or a directive of a court, regulator or the Bar Council, records will be retained for such longer period.
Where you withdraw consent and no legal ground for continued retention exists, we will erase your personal data or render it unable to be associated with you, within a reasonable time of such withdrawal.
7. Data Security
We implement reasonable technical and organisational safeguards to protect personal data in our possession or control against unauthorised access, disclosure, alteration or destruction, including restricted access to records, secure email practices and confidentiality obligations on our staff and associates. In the event of a personal data breach, we will take steps required under the DPDPA, including intimation to the Data Protection Board of India and affected individuals, where applicable.
8. Your Rights Under the DPDPA
As a Data Principal, you have the following rights in relation to your personal data:
Right to access a summary of personal data we hold about you and the processing activities carried out.
Right to correction, completion and updating of your personal data.
Right to erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to our legal and record-keeping obligations.
Right to grievance redressal in relation to any processing of your personal data.
Right to nominate another individual to exercise these rights on your behalf, in the event of your death or incapacity.
To exercise any of these rights, please write to our Grievance Officer using the contact details in Section 10. We will respond within the time frame prescribed under the DPDPA and applicable rules.
9. Cookies and Website Analytics
Our website may use cookies or similar technologies for basic functionality and to understand website usage through standard analytics tools. You may disable cookies through your browser settings; doing so may affect certain website features. We do not use cookies to build advertising profiles.
10. Grievance Officer
In accordance with the DPDPA, the following Grievance Officer has been appointed to address your queries, complaints or concerns regarding the processing of your personal data:
We will acknowledge your grievance promptly and endeavour to resolve it within 45 (forty-five) days of receipt. If you are not satisfied with the resolution, you may approach the Data Protection Board of India in accordance with the DPDPA.
11. Children's Data
Our website and services are intended for use by adults seeking legal assistance. We do not knowingly collect personal data of children (individuals below 18 years of age) without verifiable consent of a parent or lawful guardian. If we become aware that we have inadvertently collected a child's personal data without such consent, we will take steps to delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised Policy will be posted on our website with an updated effective date. We encourage you to review this Policy periodically.
13. Contact Us
For any questions about this Privacy Policy or our data practices, please contact:
Vashistha Associates
Chamber No. 145, District & Sessions Court Compound, Hapur, Uttar Pradesh
Email: vashisthaassociates37@gmail.com
Phone: 9897773403