Privacy Policy

Law Chambers of G.R. Hari ("we," "us," or "our") is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy outlines how we collect, use, disclose, and protect the personal information obtained through our website (grhari.com - *replace with actual domain*) and in the course of providing legal services, in compliance with applicable Indian laws, including the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and preparing for the Digital Personal Data Protection Act (DPDPA), 2023.

1. Information We Collect

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address, job title, and organization name provided when you contact us, subscribe to updates, or inquire about our services or careers.
• Professional Information: Information related to your business or legal matter when you engage our services.
• Career Application Information: Information submitted through our careers page, including resume/CV, educational background, employment history, and cover letter.
• Website Usage Information: Technical data such as IP address, browser type, operating system, referring URLs, pages visited, and time spent on our site, collected through cookies and similar technologies (subject to your consent where required). We use this for website analytics and improvement.
• Sensitive Personal Data or Information (SPDI): In the course of providing legal services, we might process SPDI as defined under Indian law (e.g., financial information for billing, information revealed during legal consultation). We handle SPDI with utmost confidentiality and in accordance with applicable legal and ethical obligations.

2. How We Use Your Information

We use the collected information for the following purposes:

• To respond to your inquiries and provide requested information.
• To provide legal services and fulfill our contractual obligations to clients.
• To process career applications and manage the recruitment process.
• To send newsletters, legal updates, or invitations to events (where you have opted-in or where permitted by law).
• To improve our website functionality, user experience, and content.
• To comply with legal and regulatory obligations, including ethical duties as lawyers.
• For billing and administrative purposes related to our services.

3. Legal Basis for Processing (Under DPDPA framework where applicable)

Our processing of your personal data is typically based on one or more of the following legal grounds:

• Consent: Where you have explicitly provided consent (e.g., for newsletters, non-essential cookies, processing SPDI unless another basis applies).
• Performance of Contract: To provide legal services you have engaged us for or to process your career application.
• Legitimate Interests: For purposes like responding to inquiries, website improvement, and administrative tasks, provided our interests are not overridden by your fundamental rights.
• Legal Obligation: To comply with applicable laws, regulations, or court orders.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your information in the following limited circumstances:

• With Service Providers: We may share information with third-party vendors who assist us with website hosting, IT support, email delivery, analytics, and other administrative functions. These providers are contractually obligated to protect your information.
• For Legal Reasons: We may disclose information if required by law, subpoena, court order, or other legal process, or to establish or exercise our legal rights or defend against legal claims.
• Professional Requirements: We may share information as necessary to comply with our professional and ethical obligations as legal counsel.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, relevant information may be transferred as part of the transaction, subject to confidentiality agreements.
• With Your Consent: We may share information with third parties when we have your explicit consent to do so.

We generally do not transfer personal data outside India unless necessary for providing legal services (e.g., cross-border litigation involving foreign counsel) or using standard contractual clauses with service providers, ensuring adequate data protection safeguards.

5. Data Security

We implement reasonable technical, physical, and administrative security measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction, in line with Rule 8 of the IT (Reasonable Security Practices) Rules, 2011. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (e.g., for legal, regulatory, or ethical compliance, or for potential litigation). Client file retention is governed by our internal policies and professional obligations. Application data is retained as per our recruitment policy.

7. Your Rights

Subject to applicable Indian law (including the upcoming DPDPA), you may have the following rights regarding your personal information:

• Right to Access: Request access to the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information, subject to legal and ethical retention requirements.
• Right to Withdraw Consent: Withdraw previously given consent for processing (where consent is the basis).
• Right to Grievance Redressal: Contact our designated Grievance Officer regarding any concerns.

To exercise these rights, please contact our Grievance Officer using the details below.

8. Cookie Policy

Our website may use cookies (small text files stored on your device) and similar technologies. Some cookies are essential for website functionality. Others help us analyze website traffic and improve user experience (analytics cookies). We will seek your consent for non-essential cookies where required by law. You can manage your cookie preferences through your browser settings.

9. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website, and the "Last Updated" date will indicate the latest revision.

11. Grievance Officer / Contact Information

If you have any questions, concerns, or wish to exercise your rights regarding your personal information, please contact our designated Grievance Officer:

Name: [Grievance Officer Name - **Required by IT Rules**]
Designation: [Grievance Officer Designation]
Email: [privacy@grhari.com - **Use a dedicated email**]
Address: [Full Office Address - **Required by IT Rules**]
[Optional: Phone Number]

We will endeavor to address your concerns promptly and in accordance with applicable law.

Last Updated: [Date of Last Update - e.g., July 2024]