Privacy Policy

1. About Us

LexLoft is a law firm practising in India, with its principal office at GOL Bazar, Near City Kotwali, Next to Sharda Enterprises, Bilaspur, Chhattisgarh 495001. The Firm operates this website at lexloft.in for general informational purposes. For the purposes of the DPDPA and the SPDI Rules, the Firm is the "Data Fiduciary" in respect of personal data collected through this website.

2. Information We Collect

We collect the following categories of information when you use this website:

a. Information you provide voluntarily

When you submit a contact form or enquiry on this website, we collect the following personal data:

• Your full name;
• Your email address;
• Your telephone or mobile number;
• Your organisation or company name (where provided);
• The content of your message or enquiry.

You are not obligated to provide this information. However, if you choose not to provide it, we may not be able to respond to your enquiry or provide you with the information you are seeking.

b. Technical and usage information

When you access this website, we or our service providers may automatically collect certain technical information, which may include:

• Your Internet Protocol (IP) address;
• The type and version of your browser and operating system;
• The pages you visit on this website and the time spent on those pages;
• Referring URLs (the website from which you arrived on this website);
• Date and time of your access;
• Device type and identifiers.

This information is collected primarily for the purpose of website analytics, performance monitoring, and security, and is generally not used to identify individual users except as necessary to ensure website security or to comply with applicable law.

3. Cookies and Similar Technologies

This website may use cookies and similar tracking technologies to improve your experience and collect usage information. Cookies are small text files placed on your device when you visit a website.

We may use the following types of cookies:

• Strictly necessary cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the website, helping us improve its content and functionality. Information collected is aggregated and anonymous.
• Functionality cookies: Used to remember your preferences and improve your experience on subsequent visits.

You may control the use of cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of this website. Your continued use of this website without changing your browser settings constitutes your consent to the use of cookies in accordance with this Privacy Policy.

4. How We Use Your Information

We use the information collected through this website for the following purposes:

• To respond to your enquiries, contact form submissions, and requests for information;
• To assess and evaluate whether the Firm can act on the matter described in your enquiry and to communicate with you in that regard;
• To conduct conflict-of-interest checks prior to any potential engagement;
• To operate, maintain, improve, and optimise this website and its features;
• To monitor and analyse usage patterns and trends for website performance and security;
• To comply with applicable legal and regulatory obligations, including professional obligations under the Advocates Act, 1961, and the Rules of the Bar Council of India;
• To prevent, detect, investigate, and take action against fraud, security breaches, or other potentially illegal activities;
• To enforce our Terms of Use and other applicable policies.

We process your personal data on the basis of your consent (as given at the time of submitting a contact form), the legitimate interests of the Firm in operating this website and responding to legal enquiries, and compliance with applicable legal obligations.

5. Disclosure and Sharing of Information

We do not sell, rent, or trade your personal data to any third party. We may share your information in the following limited circumstances:

• Service providers and data processors: We may engage trusted third-party service providers to assist us in operating this website and delivering our services (for example, website hosting providers, email service providers, reCAPTCHA providers). Such third parties are bound by confidentiality obligations and are permitted to use your data only for the purposes for which it is shared;
• Legal and regulatory requirements: We may disclose your information where required by law, regulation, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of the Firm, its clients, or the public;
• Professional obligations: We may share information with other professional advisors (such as advocates or co-counsel) where necessary for the purposes of a matter in respect of which an advocate-client relationship has been formally established, subject to applicable confidentiality obligations;
• Business transfers: In the event of a restructuring, merger, acquisition, or transfer of the Firm's practice, your information may be transferred to the relevant successor or acquiring entity, subject to the same privacy protections as set out in this Privacy Policy.

6. Sensitive Personal Data or Information

The SPDI Rules classify certain categories of personal data as "sensitive personal data or information," including passwords, financial information, health and medical records, sexual orientation, biometric information, and information relating to physical or mental health conditions. You are strongly advised not to share any such sensitive personal data through this website's contact forms or any other communication channel made available on this website.

If, in the course of describing your legal enquiry, you do share any such sensitive information, it will be treated with an additional level of care and will not be used for any purpose other than responding to your enquiry, conducting a conflict-of-interest check, and assessing whether the Firm can assist you.

7. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. In particular:

• Information submitted through contact forms will be retained for a period sufficient to respond to your enquiry and, where an engagement follows, for the duration of that engagement and as required by professional and regulatory obligations thereafter;
• Where no engagement results from an enquiry, contact form data will generally be retained for no longer than twelve (12) months from the date of submission, unless a longer period is required by law;
• Technical usage and analytics data may be retained for a period of up to twenty-four (24) months;
• Where the Firm is subject to a legal hold or regulatory requirement to retain specific data for a longer period, that data will be retained for the period so required.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

8. Security

The Firm implements reasonable technical, physical, and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are designed to be appropriate to the nature of the personal data and the risks associated with its processing.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You acknowledge that any personal data you transmit to us through this website is done at your own risk. In the event of a personal data breach that is likely to adversely affect your rights and freedoms, we will notify you and the relevant authority as required under applicable law.

9. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you, as a Data Principal, have the following rights in respect of your personal data processed by the Firm:

• Right to access information: You have the right to obtain confirmation as to whether the Firm is processing your personal data, and to receive a summary of the personal data so processed and the processing activities undertaken in respect of such data;
• Right to correction and erasure: You have the right to request the correction of inaccurate or misleading personal data, the completion of incomplete personal data, and the erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to applicable legal and professional obligations that may require the Firm to retain certain data;
• Right to grievance redressal: You have the right to have your grievances in relation to the processing of your personal data addressed by the Firm's Grievance Officer;
• Right to nominate: You have the right to nominate an individual who may exercise your rights in the event of your death or incapacity;
• Right to withdraw consent: Where the Firm processes your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Grievance Officer using the contact details provided in Section 11 below. We will endeavour to respond to your request within a reasonable time and in accordance with applicable law.

10. Cross-Border Transfer of Data

Where the Firm engages third-party service providers who may process personal data outside India (for example, cloud hosting or analytics services), such transfers will be carried out only in compliance with applicable Indian law and with appropriate safeguards in place to protect your personal data. The Firm will not transfer your personal data to a country or territory that has not been notified by the Central Government as a country to which personal data may be transferred, except as permitted under the DPDPA and any rules or notifications made thereunder.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, the SPDI Rules, and the Digital Personal Data Protection Act, 2023, the Firm has designated the following individual as its Grievance Officer for matters relating to personal data and privacy:

Grievance Officer: Palash Tiwari
LexLoft
GOL Bazar, Near City Kotwali, Next to Sharda Enterprises
Bilaspur, Chhattisgarh 495001, India
Email: info@lexloft.in
Phone: +91 78750 59807

You may submit your grievance in writing to the Grievance Officer. The Firm will acknowledge receipt of your grievance and endeavour to address it within a reasonable time period, not exceeding thirty (30) days from the date of receipt, or such other period as may be specified under applicable law.

12. Children's Privacy

This website is not directed at or intended for use by individuals under the age of eighteen (18) years. The Firm does not knowingly collect personal data from minors. If you believe that a minor has submitted personal data through this website without verifiable parental or guardian consent, please contact us immediately using the contact details above and we will take steps to delete such data.

13. Third-Party Websites

This website may contain links to third-party websites. This Privacy Policy applies only to this website. The Firm is not responsible for the privacy practices or content of any third-party website linked to or from this website. You are encouraged to read the privacy policies of any third-party websites you visit.

14. Amendments to this Privacy Policy

The Firm reserves the right to amend, modify, or update this Privacy Policy at any time to reflect changes in applicable law, the Firm's practices, or the services available through this website. Any changes will be published on this page with a revised effective date. Your continued use of this website after the publication of any changes constitutes your acceptance of the revised Privacy Policy. You are encouraged to review this page periodically.

15. Governing Law

This Privacy Policy and any dispute or claim arising out of or in connection with it shall be governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the courts at Bilaspur, Chhattisgarh, India.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us at:

LexLoft
GOL Bazar, Near City Kotwali, Next to Sharda Enterprises
Bilaspur, Chhattisgarh 495001, India
Email: info@lexloft.in
Phone: +91 78750 59807