Home / Privacy Notice

DPDP Act, 2023

Privacy Notice

We advise clients on the Digital Personal Data Protection Act. It would be poor form not to hold ourselves to it. This notice is written to be read.

Who we are

Incept Legal, Attorneys & Consultants, of J-150, Sector 41, Noida 201301, NCR of Delhi, India, is the Data Fiduciary in respect of the personal data described in this notice. You can reach us at info@inceptlegal.com or on +91 98714 31988.

What we collect, and why

  • Enquiries. If you use the enquiry form or write to us, we collect your name, email address, telephone number (if given), the subject you select and the content of your message. We use this solely to respond to you and to assess whether we are able to act. Submissions through the form are stored in a database operated for the firm, and a notification is sent to the firm’s own mailbox.
  • Clients. Where we are engaged, we collect the personal data necessary to provide legal services and to comply with our professional and statutory obligations, including conflict checks and client identification.
  • Candidates. If you apply to us, we collect the personal data in your application and any information you provide during the process.
  • Website use. This website does not use advertising or analytics cookies and does not track you across other sites. Your acceptance of the Bar Council disclaimer is stored locally in your own browser and is never transmitted to us.

On what basis

For enquiries and applications, we process on the basis of your consent, given when you submit the form or write to us. For client matters, we process on the basis of your consent and, where applicable, the legitimate uses recognised under the Act, including compliance with legal obligations and orders.

Who we share it with

We do not sell personal data and we do not share it for marketing. We disclose personal data only where necessary to provide the services you have asked for — for example to counsel briefed on your matter, to courts, tribunals and authorities, or to service providers acting on our instructions under contract — or where disclosure is required by law.

Transfers outside India

Our infrastructure is selected with data location in mind. The database holding website enquiries, and the service that delivers the notification email, are provided by third parties acting as processors on our instructions under contract. Where personal data is processed outside India, we do so consistently with Section 16 of the Act and any restrictions notified by the Central Government.

How long we keep it

  • Enquiries that do not become engagements: erased within twelve months. Each record carries an erasure date and is deleted automatically when it is reached, rather than depending on anyone remembering.
  • Applications: retained for twelve months from the conclusion of the process, unless you ask us to keep them longer.
  • Client files: retained for the period required by our professional obligations and applicable law, and erased thereafter.

Where consent is withdrawn and no other legal basis requires retention, we erase the data.

Your rights

Under the Act you have the right to obtain a summary of the personal data we process about you and the processing activities undertaken; to have inaccurate or incomplete data corrected, completed or updated; to have your data erased where it is no longer needed and no law requires us to keep it; to nominate another person to exercise your rights in the event of death or incapacity; and to a grievance redressal mechanism.

To exercise any of these, write to info@inceptlegal.com with the subject line “DPDP request”. We will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Security

We maintain reasonable security safeguards appropriate to the confidentiality of legal work, including access controls, encryption in transit and at rest for client material, and restricted retention. In the event of a personal data breach we will intimate affected persons and the Data Protection Board as required by the Act.

Changes to this notice

We will update this notice as our practices or the law change, and will indicate the date of the current version below.

Version: draft for firm approval. Effective date to be inserted on publication.