Privacy Policy.

This Privacy Policy describes the practices of the Chambers of Sudhir Rao ("the Chambers", "we", "us") regarding the collection, use, and disclosure of personal information through this website.

1. Information we collect

• Information you provide — name, email, phone number, and message text when you submit the contact form or email the Chambers.
• Automatically collected — IP address, browser type, device type, pages visited, referrer URL, and timestamps, through standard server logs.
• Cookies — small data files for session management, theme preference, and analytics. See Section 6.

2. How we use information

• To respond to your enquiry and arrange a consultation, if requested;
• To maintain and improve the website;
• To comply with legal and regulatory obligations, including the Rules of the Bar Council of India;
• To protect against fraud, abuse, and unauthorised access.

3. Lawful basis (DPDP Act, 2023)

• Consent — for the specific purpose for which you provide your information.
• Legitimate uses — including responding to enquiries directed at the Chambers.

4. Disclosure

We do not sell or rent personal information. We may disclose information only to service providers (bound by confidentiality), when required by law, or to protect rights, property, or safety.

5. Data retention

We keep personal data only as long as it is needed for the purpose it was collected, or as the law requires:

• Case working papers & sensitive details — dismantled and deleted immediately after the matter concludes, or earlier on the client's request.
• Basic case records — limited details such as case number, party name and case type may be retained in our office records for a longer period, up to 40 years, depending on the nature of the case (for conflict-checks, limitation, appeals and professional-record obligations).
• Records held by third parties — items such as bank-transfer records and court orders are stored on bank and government systems over which we have no control; their retention is governed by those institutions, not by us.

You may ask us to erase personal data that is no longer required for the purpose it was collected (see "Your rights" below).

6. Cookies

• Strictly necessary — to remember your theme preference and your acceptance of the BCI entry notice;
• Analytics — to understand site usage in aggregate;
• None for advertising or third-party tracking by default.

7. Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, and subject to its conditions, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed;
• Correction & erasure — have inaccurate or incomplete data corrected or updated, and request erasure of data no longer needed for the purpose (unless retention is required by law);
• Withdraw consent — withdraw any consent you have given, at any time and as easily as it was given; withdrawal does not affect processing already carried out;
• Grievance redressal — a readily available means to raise a grievance with us (see below);
• Nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights — or to withdraw consent — email our Grievance Officer (below) describing your request. We will respond within a reasonable period. If your grievance is not resolved to your satisfaction, you may complain to the Data Protection Board of India.

8. Security & data breach

We employ reasonable technical and organisational measures — including HTTPS encryption, access controls, and periodic review — to protect personal information.

If a personal-data breach occurs, we will internally audit the breach to establish exactly what data was affected, and we will inform every client and person affected within one week. We will also notify the Data Protection Board of India where required by the DPDP Act, 2023.

9. Children's data

If you are under 18, we ask that a parent or guardian be involved in your use of our forms and services. We will, however, never turn away a child whose life, liberty or safety is at risk — if you need urgent legal help, contact us and we will assist. We do not use personal data to track or profile children or to direct advertising at them.

10. Grievance officer

For any question, request, or grievance regarding your personal data or this Policy, contact our Grievance Officer:

Grievance Officer: Sudhir Rao
Email: me@sudhirrao.com
Office: #82/A, Sector 7, Farrukh Nagar, Gurgaon – 122506

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.