Privacy Policy

This Privacy Policy (“Policy”) is promulgated in accordance with, inter alia:

1. Section 43A of the Information Technology Act, 2000, as amended (“IT Act”);
2. Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
3. Rule 3(1) of the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, as amended; and The Digital Personal Data Protection Act, 2023 (“DPDP Act”), to the extent applicable.

4. This Policy delineates the modalities of collection, processing, storage, and disclosure of information in connection with the digital platform (“Platform”) operated by M&H Law Chambers LLP (“We,” “Us,” or “Our”), a limited liability partnership providing comprehensive legal services (“Services”) with its registered office at [Insert Address], India, and other offices across India. It governs all current and former users accessing or engaging with the Platform or interacting with Us through digital or other permissible channels (collectively, “You” or “Your”).

Scope and Consent

1.1. This Policy applies exclusively to information collected via the Platform or ancillary interactions, such as email communications, and does not extend to information processed during the rendition of our Services or pursuant to specific contractual or commercial engagements, which are governed by separate terms.

1.2. By accessing or utilizing the Platform or voluntarily providing Your information, You affirm Your legal capacity to enter into a binding contract and Your unequivocal acceptance of the terms, conditions, and practices elucidated in this Policy, including any amendments thereto.

1.3. You expressly consent to Our collection, processing, storage, sharing, and disclosure of Your information as articulated herein, in compliance with applicable laws, including the DPDP Act, 2023.

1.4. We reserve the right to amend this Policy periodically to reflect changes in legal or regulatory frameworks or Our operational requirements. Continued access or use of the Platform constitutes Your deemed acceptance of such amendments. Should You dissent from this Policy, in whole or in part, You must refrain from accessing the Platform or providing any information to Us.

1.5. Users accessing the Platform from jurisdictions outside India do so at their sole discretion and are exclusively responsible for ensuring compliance with applicable local laws.

Collection and Processing of Information

2.2. Collection occurs through direct means (e.g., information You provide via forms, offline documentation, or during events, seminars, or office visits) or indirectly through automated technologies (e.g., cookies, analytics tools).

2.3. Personal Data and SPDI are collected only with Your prior explicit consent, except where alternative legal grounds under the IT Act, SPDI Rules, or DPDP Act permit processing, such as contractual necessity or compliance with legal obligations. Where You provide third-party Personal Data, You warrant that You have obtained requisite consents and possess the necessary authority to share such data.

2.4. During office visits, seminars, or events, We may collect limited Personal Data or SPDI (e.g., accessibility or dietary requirements) for operational purposes, with Your consent. Such data is retained only temporarily and processed strictly for the intended purpose.

2.5. The DPDP Act, 2023, mandates additional safeguards for Personal Data processing. We comply with its provisions, including notice requirements, purpose limitation, and data minimization, ensuring that Your data is processed lawfully and transparently.

Purposes of Processing

3.1. We process Your Information for the following purposes (“Purposes”):Optimizing and enhancing the functionality, accessibility, and user experience of the Platform;Conducting data analytics, trend analysis, and algorithmic development for internal business improvement;Undertaking research and development to refine Service offerings;Performing audits, quality assurance, and compliance with regulatory obligations; Facilitating internal operations, including record-keeping, accounting, and adherence to taxation laws;Delivering tailored regulatory updates, legal insights, or invitations to seminars, webinars, or workshops; Responding to inquiries and providing notifications regarding Platform updates or Service-related communications;Mitigating fraud, illegal activities, or security threats; and Complying with statutory or judicial mandates.

3.2. Processing of Personal Data and SPDI is grounded in Our legitimate interests, including the operation of a secure and efficient Platform, client relationship management, and the promotion of legal education, subject to Your rights under applicable laws.

3.3. Engagement via social media platforms (e.g., LinkedIn, Twitter, or Facebook) is subject to the respective platforms’ terms and privacy policies, which You should review prior to interaction.

Disclosure of Information

4.1. We may disclose Your Information, including Personal Data and SPDI, under the following circumstances:To affiliates, consultants, advisors, or third-party service providers engaged for Platform operations or Service delivery, subject to strict confidentiality obligations; In aggregated or anonymized form to partners or third parties for analytics, research, or Platform enhancement; To entities outside India, where necessary for the Purposes, in compliance with cross-border data transfer regulations under the DPDP Act and SPDI Rules; Pursuant to legal obligations, judicial orders, or in good faith to:Comply with statutory or regulatory requirements; Safeguard Our rights or property; Prevent criminal activities or protect national security; or Ensure the safety of users or the public.

4.2. Third parties receiving Your Information are contractually obligated to process it solely for the Purposes and in accordance with applicable data protection laws.

Third-Party Services

5.1. The Platform may include links to third-party websites, applications, or services (“Third-Party Services”). We exercise no control over such services and bear no responsibility for their data practices or privacy policies.

5.2. You assume all risks associated with the use of Third-Party Services, including any loss or damage arising from their collection or disclosure of Your Information. We recommend reviewing their privacy policies and exercising due diligence before engaging with such services.

Data Subject Rights

6.1. Pursuant to the DPDP Act, 2023, and other applicable laws, You have the right to: Access, review, correct, or update Your Personal Data by contacting info@mhlawchambers.com; Request erasure of Your Personal Data, subject to legal retention obligations; Withdraw consent for processing, where applicable, though this may restrict access to certain Platform functionalities.

6.2. Requests for erasure or modification will be processed within a reasonable timeframe, subject to verification of Your identity and compliance with legal requirements. Incomplete or unverifiable modifications may result in restricted Platform access.

6.3. We may deny requests that infringe upon third-party rights or contravene applicable laws.

Data Security

7.1. We implement robust physical, technical, and organizational safeguards to protect Your Information against unauthorized access, loss, misuse, or alteration. These include: Regular audits of data collection, storage, and processing practices; Access controls limiting Personal Data access to authorized personnel bound by stringent confidentiality obligations; Encryption and secure transmission protocols for sensitive data. 7.2. Notwithstanding Our efforts, no system is impervious to breaches. We disclaim liability for unauthorized access or actions beyond Our reasonable control, including cyberattacks, governmental actions, or system failures.

Data Retention

8.1. Personal Data and SPDI will be retained only for the duration necessary to fulfill the Purposes or as mandated by law. In accordance with the SPDI Rules and DPDP Act, such data will be destroyed or anonymized within five (5) years of the cessation of the Purpose, unless retention is required for legal compliance.

8.2. To request cessation of processing, contact info@mhlawchambers.com. However, We reserve the right to retain anonymized or aggregated data for business purposes, even post-erasure.

8.3. Withdrawal of consent may preclude access to the Platform or terminate any existing relationship with Us.

Disclaimer

While We are committed to safeguarding Your Information, absolute security cannot be guaranteed. You acknowledge that Your Information, including Personal Data and SPDI, may be subject to disclosure in unforeseen circumstances not covered by this Policy. Your use of the Platform and the internet is at Your sole risk, and You assume responsibility for Your conduct and the information You share.

Indemnity

You undertake to indemnify and hold Us harmless against any claims, disputes, or liabilities arising from Your disclosure of Information to third parties, whether through the Platform or otherwise, or Your engagement with Third-Party Services. We bear no liability for third-party actions concerning Your Information.