Privacy Policy

1. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us, primarily through our Appointment/Enquiry form. This may include:

• Your name
• Phone number
• Email address
• A description of your legal matter or enquiry ("Case Parameter" field)
• Any documents or additional information you choose to submit

We do not knowingly collect any personal data through this website other than what you directly submit to us.

2. Why We Collect Your Data (Purpose of Processing)

We collect and process your personal data solely to:

• Evaluate and respond to your enquiry
• Determine whether we can assist you with your legal matter
• Contact you regarding your enquiry or a potential engagement
• Maintain records of enquiries for our internal administrative purposes

We do not use your data for marketing, profiling, or any purpose unrelated to responding to your enquiry.

3. Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of your explicit consent, given at the time you submit the Appointment/Enquiry form. You may withdraw this consent at any time by contacting us using the details in Section 9, though this will not affect any processing already carried out prior to withdrawal.

4. Who We Share Your Data With

We do not sell, rent, or trade your personal data. Your data may be accessed or processed by:

• Our own personnel, solely for the purpose of reviewing and responding to your enquiry
• Service providers who support the technical operation of this website, specifically: Vercel (our website hosting provider). Enquiry form submissions are delivered directly to our email inbox and are not stored in any separate database, CRM, or third-party tool. Our WhatsApp contact option is a direct link to WhatsApp's standard messaging service and does not route your data through any additional third party on our end.

We may disclose your personal data if required to do so by law, regulation, court order, or a lawful request from a government or regulatory authority.

5. Data Retention

We retain personal data submitted through the Appointment/Enquiry form for 12 months from the date of submission, or for the duration of any resulting engagement plus any period required under applicable law or professional record-keeping obligations, whichever is longer. After this period, your data will be securely deleted unless we are required to retain it for legal or regulatory reasons.

6. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including transmitting data over an encrypted (HTTPS) connection. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the DPDP Act, you have the right to:

• Access — request confirmation of whether we are processing your personal data, and access to that data
• Correction — request correction of inaccurate or incomplete personal data
• Erasure — request deletion of your personal data, subject to any legal or regulatory retention requirements
• Withdraw consent — withdraw your consent to processing at any time
• Grievance redressal — raise a grievance regarding the handling of your personal data (see Section 9)

To exercise any of these rights, please contact us using the details below. We will respond within a reasonable time and in accordance with applicable law.

8. Contact Us / Grievance Officer

For any questions, requests, or grievances regarding this Privacy Policy or your personal data, please contact:

9. Children's Data

This website is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

11. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and is subject to the exclusive jurisdiction of the courts at Thane, Maharashtra.

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. It does not create an attorney-client relationship between VM Law Partners and any visitor to this website.