LAWTATTVA

Privacy Policy

Effective Date: 15 Sept 2026

Last Updated: 15 Sept 2026

1. INTRODUCTION

LawTattva Law Offices ("LawTattva", "Firm", "we", "us or "our") respects the privacy and confidentiality of individuals whose personal data is shared with us.

This Privacy Policy explains how we collect, receive, use, store, disclose, protect and otherwise process personal data through our website, www.lawtattva.com ("Website"), and in connection with our legal services, professional communications, enquiries, consultations and other interactions with us.

As a law firm, we recognise that information shared with us may include personal, professional, financial, commercial, legal and case-related information. We therefore seek to handle such information with appropriate confidentiality, care and security, subject to applicable law, professional obligations and the nature of the engagement.

This Privacy Policy should be read together with any engagement letter, terms of engagement, confidentiality arrangements, notices or other contractual terms applicable to a particular client or matter.

---

2. IMPORTANT NOTICE REGARDING ADVOCATE–CLIENT RELATIONSHIP

Information submitted through this Website, including through an enquiry form, email, telephone number, consultation request or other communication channel, does not by itself create an advocate–client relationship between you and LawTattva Law Offices or any individual associated with the Firm.

An advocate–client relationship is established only after the Firm has completed its internal processes, including, where applicable, conflict checks, assessment of the matter, acceptance of the engagement and execution or issuance of appropriate engagement documentation.

Accordingly, visitors and prospective clients should avoid submitting highly sensitive or confidential information through publicly accessible Website forms unless specifically requested by the Firm.

The transmission of information through the internet or an online enquiry form may not be secure in all circumstances.

---

3. INFORMATION WE COLLECT

Depending upon the nature of your interaction with us, we may collect and process the following categories of information:

3.1 Identification and Contact Information

This may include:

- Name;
- Residential or business address;
- Email address;
- Telephone/mobile number;
- Professional designation;
- Organisation/company details;
- Communication preferences; and
- Other information voluntarily provided by you.

3.2 Professional and Business Information

Where relevant to a legal matter, we may collect:

- Employer or organisation details;
- Company or business information;
- Corporate structure and ownership information;
- Director, partner, promoter or shareholder information;
- Business correspondence;
- Commercial information; and
- Information relating to transactions, contracts or business operations.

3.3 Legal and Matter-Related Information

Depending on the nature of the engagement, this may include:

- Facts and circumstances relating to a legal matter;
- Pleadings, notices, agreements and correspondence;
- Court, tribunal or regulatory records;
- Property-related documents;
- Corporate and statutory records;
- Intellectual property information;
- Financial or transactional information;
- Information relating to disputes or proceedings;
- Information relating to employees, directors, shareholders, witnesses, counterparties or other persons connected with a matter; and
- Other information necessary for providing legal services.

3.4 Information Provided During Consultations

We may collect information shared during:

- Telephone or video consultations;
- Meetings;
- Emails;
- Written communications;
- Legal consultations;
- Matter instructions; and
- Other professional communications.

3.5 Website and Technical Information

When you access our Website, certain technical information may be collected automatically, including:

- IP address;
- Browser type;
- Device type;
- Operating system;
- Website pages visited;
- Date and time of access;
- Referring website;
- Approximate location derived from technical information, where applicable; and
- Other technical or diagnostic information.

Such information may be collected through server logs, cookies, analytics tools or similar technologies.

---

4. INFORMATION RELATING TO OTHER PERSONS

You may provide us with information relating to another person in connection with a legal matter.

Examples may include information concerning:

- Directors;
- Employees;
- Shareholders;
- Family members;
- Witnesses;
- Opposing parties;
- Customers or vendors;
- Contractors;
- Business partners; or
- Other persons connected with a matter.

Where you provide such information, you are responsible for providing it in accordance with applicable law and, where required, having an appropriate legal basis or authority to provide such information.

---

5. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

We may process personal data for purposes including:

A. Legal Services

- Understanding and evaluating legal matters;
- Providing legal advice;
- Drafting, reviewing and negotiating documents;
- Preparing notices, pleadings and other legal documents;
- Representing or assisting clients before courts, tribunals, authorities and other forums;
- Conducting legal research;
- Managing litigation and dispute-resolution matters; and
- Performing other services within the scope of an engagement.

B. Client Onboarding and Matter Management

- Identifying clients and relevant persons;
- Conducting conflict checks;
- Understanding the scope and nature of a proposed engagement;
- Maintaining matter records;
- Managing communications; and
- Administering professional engagements.

C. Compliance and Legal Obligations

We may process information where necessary to:

- Comply with applicable laws;
- Respond to lawful requests from courts, tribunals, regulators or government authorities;
- Meet professional or statutory obligations;
- Establish, exercise or defend legal rights or claims; and
- Prevent, detect or address fraud, misuse or unlawful activity.

D. Website and Business Administration

- Responding to enquiries;
- Scheduling consultations;
- Managing appointments;
- Communicating with visitors and prospective clients;
- Improving Website functionality;
- Maintaining Website security;
- Managing internal administration; and
- Maintaining appropriate business records.

E. Communications

Where permitted by applicable law, we may use contact information to send:

- Matter-related communications;
- Administrative notices;
- Updates relating to our services;
- Legal or regulatory updates;
- Invitations to professional events; and
- Other communications relevant to your relationship with the Firm.

You may opt out of non-essential promotional communications where applicable.

---

6. LEGAL BASIS FOR PROCESSING

We process personal data only for lawful purposes and in accordance with applicable law.

Depending upon the circumstances, processing may be undertaken:

- With the consent of the individual;
- For a purpose permitted as a legitimate or otherwise authorised use under applicable law;
- To provide services requested by an individual;
- To perform or administer an engagement;
- To comply with a legal or regulatory obligation;
- To protect legal rights or interests; or
- For other purposes permitted under applicable law.

The Digital Personal Data Protection Act, 2023 ("DPDP Act") provides for processing of digital personal data for lawful purposes, including on the basis of consent or certain legitimate uses.

Where the DPDP Act and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules") apply to our processing activities, we will comply with the requirements applicable to us, including requirements relating to notice, consent, rights, security safeguards and grievance redressal, as and when the relevant provisions become applicable.

---

7. NOTICE AND CONSENT

Where consent is required under applicable law, we will seek consent in an appropriate manner.

Where applicable, our notices will identify the personal data being processed and the purpose or purposes for which such data is processed.

Under the DPDP Rules, 2025, a notice is required to be presented in clear and plain language and independently of other information, and to include an itemised description of personal data and the specified purpose or purposes of processing.

Where processing is based on consent, you may have the right to withdraw consent, subject to applicable law and any consequences arising from such withdrawal.

Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

---

8. LEGAL PROFESSIONAL CONFIDENTIALITY

Information received from clients in the course of a professional engagement is handled subject to applicable legal and professional confidentiality obligations.

The Firm may, however, disclose or use information where:

- Disclosure is required or permitted by law;
- Disclosure is required by a court, tribunal, regulator or competent authority;
- Disclosure is necessary for the provision of professional services;
- Disclosure is authorised by the client;
- Disclosure is necessary to establish, exercise or defend legal rights; or
- Another lawful basis for disclosure exists.

Nothing in this Privacy Policy is intended to limit any legal or professional obligation applicable to the Firm or its advocates.

---

9. WEBSITE ENQUIRIES AND PROSPECTIVE CLIENTS

If you contact us through our Website or other publicly available communication channels, we may collect information necessary to:

- Understand the nature of your enquiry;
- Respond to your request;
- Determine whether the Firm is able to assist;
- Conduct preliminary conflict checks;
- Schedule a consultation; and
- Determine whether a professional engagement may be appropriate.

A preliminary enquiry does not guarantee acceptance of the matter.

We may decline to act where a conflict of interest, professional restriction, capacity issue or other consideration prevents us from accepting the engagement.

---

10. CONFLICT CHECKS

Before accepting certain matters, LawTattva may conduct conflict checks.

For this purpose, we may process information relating to:

- Names of parties;
- Directors and shareholders;
- Organisations;
- Opposing parties;
- Connected entities;
- Relevant individuals; and
- Other information reasonably necessary to identify potential conflicts.

Information obtained during a conflict check may be retained for an appropriate period in accordance with professional requirements and our internal policies.

---

11. SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell personal data.

Personal data may be shared, where necessary and lawful, with:

11.1 Persons Associated with the Firm

This may include:

- Advocates;
- Senior lawyers;
- Associates;
- Interns or trainees, where appropriate;
- Administrative personnel; and
- Other persons working with or for the Firm.

Access will be limited according to the requirements of the relevant work.

11.2 Professional Service Providers

Where necessary, information may be shared with:

- IT service providers;
- Cloud-storage providers;
- Document-management providers;
- Email and communication providers;
- Accounting or billing service providers;
- Cybersecurity service providers;
- Technical consultants; and
- Other professional or operational service providers.

Such parties may process information only for relevant and authorised purposes.

11.3 Courts, Tribunals and Authorities

Information may be disclosed where required or permitted by law, including to:

- Courts;
- Tribunals;
- Government departments;
- Regulatory authorities;
- Police or investigating authorities;
- Statutory bodies; and
- Other competent authorities.

11.4 Other Persons Involved in a Matter

Depending upon the nature of the engagement, information may be shared with:

- Opposing counsel;
- Experts;
- Consultants;
- Mediators;
- Arbitrators;
- Other advocates;
- Witnesses; or
- Other persons where reasonably necessary for the conduct of a matter.

---

12. DATA PROCESSORS AND SERVICE PROVIDERS

LawTattva may engage third-party service providers to provide infrastructure, technology, communication, storage, analytics, administrative or other services.

Where such providers process personal data on our behalf, we seek to implement appropriate contractual, organisational and technical safeguards appropriate to the nature of the processing and applicable law.

---

13. DATA SECURITY

We take reasonable technical, organisational and administrative measures to protect personal data against unauthorised access, alteration, disclosure, loss, misuse or destruction.

Depending upon the nature of the information and processing, safeguards may include:

- Access controls;
- Role-based access;
- Password protection;
- Secure authentication;
- Encryption or other appropriate security measures;
- Secure storage;
- Backup and recovery mechanisms;
- Monitoring and logging;
- Device and network security measures;
- Confidentiality obligations; and
- Internal access and information-handling procedures.

No method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security.

---

14. DATA BREACHES AND SECURITY INCIDENTS

If we become aware of a personal data breach or security incident requiring action under applicable law, we will take appropriate steps to contain, assess, investigate and respond to the incident and make notifications where legally required.

Our response may include:

- Containing the incident;
- Assessing its impact;
- Taking remedial measures;
- Preserving relevant evidence;
- Notifying affected persons where required; and
- Notifying competent authorities where required by law.

---

15. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, or for such longer period as may be required or permitted by:

- Applicable law;
- Professional obligations;
- Court or regulatory requirements;
- Limitation periods;
- Contractual obligations;
- Dispute management;
- Accounting and taxation requirements; or
- Legitimate business and legal purposes.

Different categories of information may therefore be retained for different periods.

When personal data is no longer required, we may securely delete, destroy, anonymise or otherwise dispose of it in accordance with applicable law and our internal retention practices.

---

16. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies and similar technologies.

Cookies may be used for purposes including:

- Website functionality;
- Security;
- User preferences;
- Analytics;
- Performance monitoring; and
- Understanding Website usage.

Where required, we will seek appropriate consent before placing or using non-essential cookies.

You may also be able to control cookies through your browser or device settings. Disabling certain cookies may affect Website functionality.

The specific cookies used by the Website may change from time to time depending upon the technology and analytics services deployed.

---

17. THIRD-PARTY WEBSITES AND SERVICES

Our Website may contain links to third-party websites, platforms or services.

These may include websites of:

- Courts and government authorities;
- Professional organisations;
- Legal databases;
- Social media platforms;
- Technology providers; or
- Other external organisations.

LawTattva is not responsible for the privacy practices, security or content of third-party websites.

You should review the privacy policies applicable to such third-party services before providing personal information to them.

---

18. SOCIAL MEDIA

LawTattva may maintain professional profiles or pages on third-party social media platforms.

Interactions with such platforms are governed by the terms and privacy policies of the respective platforms.

Information that you voluntarily make publicly available on such platforms may be accessible to others and should not be treated as confidential information submitted to LawTattva.

---

19. CHILDREN'S PERSONAL DATA

Our Website and legal services are not specifically directed at children.

Where personal data relating to a child is required for a legal matter, such information may be processed where legally permissible and for purposes connected with the relevant matter.

Where applicable, we will comply with requirements relating to children's personal data under applicable law.

---

20. CROSS-BORDER DATA TRANSFERS

In certain circumstances, personal data may be stored or processed using service providers or infrastructure located outside India.

Where such processing occurs, LawTattva will take reasonable steps to ensure that such processing is undertaken in accordance with applicable law and appropriate contractual, organisational and technical safeguards.

Where applicable, cross-border transfers will be subject to restrictions or requirements prescribed under Indian law.

---

21. YOUR RIGHTS

Subject to applicable law and the stage of implementation of relevant statutory provisions, individuals may have rights in relation to their personal data, including rights concerning:

- Access to information relating to processing;
- Correction or updating of personal data;
- Erasure of personal data where applicable;
- Withdrawal of consent where processing is based on consent;
- Grievance redressal; and
- Other rights available under applicable law.

The DPDP Act recognises rights of Data Principals relating to their personal data, including rights concerning access to information about processing, correction and erasure, grievance redressal and nomination, subject to the applicable statutory framework.

Requests may be submitted using the contact details provided in this Privacy Policy.

We may need to verify the identity or authority of the person making a request before acting upon it.

Certain requests may be restricted or declined where permitted or required by law, including where compliance would adversely affect legal proceedings, professional obligations, the rights of another person or other legitimate interests.

---

22. GRIEVANCE REDRESSAL

If you have a concern regarding the processing of your personal data or wish to raise a privacy-related grievance, you may contact us using the details below.

Privacy / Grievance Contact
LawTattva Law Offices
Pune, Maharashtra, India
Email: contact@lawtattva.in

We will review and address grievances in accordance with applicable law and our internal procedures.

Where applicable, individuals may have the right to escalate a grievance to the competent statutory authority or Data Protection Board in accordance with the applicable legal framework.

---

23. ACCURACY OF INFORMATION

We request users and clients to provide accurate and current information.

Where personal data provided to us is inaccurate, incomplete or outdated, you may request correction or update, subject to applicable law and the nature of the relevant record.

---

24. INFORMATION PROVIDED VOLUNTARILY

You are not generally required to provide personal data merely to browse the public portions of our Website.

However, certain information may be necessary where you:

- Request a consultation;
- Submit an enquiry;
- Engage our legal services;
- Request a response;
- Subscribe to communications;
- Participate in an event; or
- Otherwise interact with the Firm.

If required information is not provided, we may not be able to respond to an enquiry or provide the requested service.

---

25. CONFIDENTIAL INFORMATION AND WEBSITE COMMUNICATIONS

The Website is intended to provide general information about LawTattva and its services.

Information published on the Website should not be treated as legal advice.

Further, communications submitted through publicly accessible Website forms should not contain highly confidential or privileged information unless the Firm has specifically instructed you to provide such information through that channel.
The Firm does not assume responsibility for the confidentiality of unsolicited information transmitted through unsecured channels before an advocate–client relationship has been established.
26. PROFESSIONAL AND LEGAL DISCLAIMER
Nothing contained in this Privacy Policy:
Creates an advocate–client relationship;
Constitutes legal advice;
Guarantees acceptance of any matter;
Creates any obligation on the Firm to accept an engagement; or
Overrides the terms of a specific engagement, confidentiality agreement or other contractual arrangement.
Where there is a conflict between this Privacy Policy and a specific contractual or engagement document, the terms applicable to the particular engagement may prevail to the extent permitted by law.
27. CHANGES TO THIS PRIVACY POLICY
We may update or modify this Privacy Policy from time to time to reflect:
Changes in applicable law;
Regulatory developments;
Changes in our services;
Changes in Website functionality;
Changes in technology or data-processing practices; or
Other operational requirements.
The updated version will be published on this Website with the revised "Last Updated" date.
Where required by applicable law, we may provide additional notice or seek consent for material changes.
28. GOVERNING LAW
This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.
Subject to applicable law, courts having appropriate jurisdiction in Pune, Maharashtra shall have jurisdiction in relation to matters arising from this Privacy Policy.
29. CONTACT US
For questions, requests, grievances or other communications relating to this Privacy Policy or the processing of personal data, please contact:
LAW TATTVA LAW OFFICES
Pune, Maharashtra, India
Email: contact@lawtattva.in
Website: www.lawtattva.com

 

Last Updated: 15 Sept 2026

© LawTattva Law Offices. All rights reserved.