1. Introduction
Sanshree Advocates (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect through https://sanshreeadvocates.com/ (the “Website”), why we collect it, how we use, share and protect it, and the rights you have over it.
This Policy is prepared in line with the Digital Personal Data Protection Act, 2023 and the rules made under it (“DPDP Act”), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
By using the Website or submitting your information through it, you acknowledge that you have read this Policy. Where the law requires your consent, we will ask for it separately and clearly at the point of collection. If you do not agree with this Policy, please do not use the Website or submit personal data through it.
This Policy covers the Website only. Information shared with us once you become a client is also governed by our engagement terms and our professional duties of confidentiality (see Section 7).
2. Who is responsible for your data
For the purposes of the DPDP Act, Sanshree Advocates is the Data Fiduciary for personal data collected through the Website.
- Firm name: Sanshree Advocates
- Address: Maa Sachi Krupa, 78/1, 12th B Cross Rd, Asha Township, Bengaluru, Karnataka 560077
- Phone: +91 85509 80901
- Email: sanshreeadvocates@gmail.com
3. Personal data we collect
3.1 Information you give us
- Name, phone number and email address
- The message, query or case summary you type into our contact or enquiry form
- Details of your preferred consultation time or mode, if you share them
- Any documents or attachments you choose to send us
- Your communications with us by phone, email or messaging apps such as WhatsApp
3.2 Information collected automatically
- IP address, approximate location (city or region level), browser type and version, device type and operating system
- Pages visited, time and date of visit, time spent, referring website and links clicked
- Cookie and similar identifier data (see Section 9)
3.3 Information we do not ask for through the Website
Please do not send sensitive information, such as Aadhaar or PAN numbers, bank or card details, passwords, medical records, or detailed case documents, through the general contact form or in your first message. We will tell you how to share such material securely after we confirm that we can act for you. We do not knowingly collect payment card details on the Website. [Delete this sentence and add a payment section if you later accept online payments.]
4. Why we use your data (purposes)
We process your personal data only for specific, lawful purposes:
| Purpose | Examples |
|---|---|
| Responding to enquiries | Replying to your form submission, call, email or message; scheduling a consultation |
| Assessing and opening a matter | Conflict-of-interest checks, understanding whether we can act for you, onboarding |
| Providing legal services | Only after you engage us, and under our engagement terms |
| Operating and improving the Website | Security, troubleshooting, analytics, understanding which pages are useful |
| Legal and regulatory compliance | Bar Council and court requirements, responding to lawful orders, tax and accounting records |
| Protecting our rights | Preventing misuse or fraud, establishing or defending legal claims |
| Communications you ask for | Updates, newsletters or legal alerts, only if you have opted in |
We do not use your data for any purpose that is incompatible with the above without telling you and, where required, obtaining fresh consent.
5. Legal basis for processing
We process personal data on the basis of:
- Your consent, for example when you submit a form, opt in to updates, or accept non-essential cookies. You can withdraw consent at any time (Section 11).
- Legitimate uses permitted by the DPDP Act, for example where you voluntarily provide data to us for a specified purpose and have not indicated that you object to its use, or where we must comply with a law, court order or legal obligation.
6. How we share your data
We do not sell or rent your personal data. We share it only where necessary and only as follows:
- Service providers who act on our behalf, such as website hosting, email and cloud storage, form-handling plugins, IT support and analytics providers. They may use your data only to provide services to us and are expected to maintain appropriate security.
- Professional collaborators, such as co-counsel, senior advocates, local counsel, experts or process servers, where this is needed for your matter and you have been informed.
- Courts, tribunals, regulators, law-enforcement or government authorities, where required by law or a valid legal process.
- Professional advisers, such as auditors or insurers, under duties of confidentiality.
- Successors, in the unlikely event of a restructuring or change in the firm, subject to the same protections.
7. Confidentiality and legal privilege
As advocates we owe our clients strict professional duties of confidentiality under the Advocates Act, 1961, the Bar Council of India Rules, and the law of privileged communications (Section 132 of the Bharatiya Sakshya Adhiniyam, 2023).
- Contacting us through the Website does not by itself create an advocate-client relationship.
- Until we confirm in writing that we will act for you, please share only the minimum information needed for us to understand your enquiry. We will nonetheless treat enquiries as confidential and will not use them against you.
- Information shared with us in confidence will not be disclosed except as permitted by law or with your consent.
8. Cross-border transfers
Our service providers (for example cloud, email or analytics tools) may store or process data on servers outside India. Where that happens, we will transfer data only to countries and services that are not restricted by the Government of India under the DPDP Act, and we will take reasonable steps to keep your data protected.
9. Cookies and similar technologies
Cookies are small files placed on your device. We use:
- Strictly necessary cookies, required for the Website to work and stay secure. These do not need consent.
- Preference cookies, which remember settings such as your language.
- Analytics cookies (for example Google Analytics), which help us understand how visitors use the Website. These are used only with your consent where required. [Remove if not used.]
You can control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the Website work. If you use a cookie banner, you can change your choice there at any time.
10. Data security
We use reasonable technical and organisational safeguards to protect personal data, including:
- HTTPS/SSL encryption of data in transit
- Access limited to authorised personnel who need it and are bound by confidentiality
- Regular updates of the Website, plugins and software, and secure hosting
- Backups and password and access controls
- Procedures to detect and respond to personal data breaches, including notifying you and the Data Protection Board of India where the law requires
No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. Please avoid sending highly sensitive information by unsecured channels.
11. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we process about you and the identities of those we have shared it with
- Correction and updating of inaccurate or incomplete data
- Erasure of your data when it is no longer needed for the purpose for which it was collected, unless we must retain it by law
- Withdraw consent at any time (this does not affect processing done before withdrawal, and we will explain any consequences)
- Grievance redressal — you may complain to us first, and if unresolved, to the Data Protection Board of India
- Nominate another person to exercise your rights in the event of your death or incapacity
To exercise any right, write to us at the contact details in Section 16. We may need to verify your identity first. We will respond within a reasonable period and in any case within the time prescribed by law.
12. Data retention
We keep personal data only as long as needed for the purposes in this Policy or as the law requires.
- Enquiries that do not become a matter: up to [12 / 24] months, then deleted or anonymised.
- Client matters: for the duration of the engagement and afterwards for [7] years, or longer where required by law, court directions, limitation periods or professional rules.
- Website log and analytics data: generally up to [26] months.
- Marketing preferences: until you withdraw consent.
After the retention period, we delete or irreversibly anonymise the data.
13. Children’s data
The Website is intended for adults. We do not knowingly collect personal data of anyone under 18 years of age without verifiable consent of a parent or lawful guardian. If you believe a child has given us data without such consent, please contact us and we will delete it promptly. Where legal services concern a minor, we will deal with the parent or lawful guardian.
14. Third-party links and tools
The Website may link to or embed third-party content, such as maps, social media pages, videos or messaging apps. We do not control and are not responsible for their content or privacy practices. Please read their privacy policies before sharing information with them.
15. No legal advice; Bar Council of India notice
In accordance with the rules of the Bar Council of India, this Website is not intended to advertise or solicit work. Its content is provided for information only and is not legal advice. You should not act or refrain from acting on the basis of its content without obtaining professional advice. Receiving or viewing information on the Website does not create an advocate-client relationship.
16. Changes to this Policy
We may update this Policy to reflect changes in law, our services or our practices. The “Last updated” date at the top shows when it was last revised. Where changes are material, we will give prominent notice on the Website and, where the law requires, seek your fresh consent. Please review this page from time to time.
17. Governing law and jurisdiction
This Policy is governed by the laws of India. Subject to applicable law, the courts at [City], [State] shall have exclusive jurisdiction over any dispute arising from it.