Privacy Policy

1. Data Fiduciary Identity & Regulatory Framework

Nyaysaarathi Legal LLP (hereinafter referred to as the “Firm”, “we”, “us”, or “our”), having its principal litigation chambers at Flat No.302, T/F, Plot No.4, Site No.4, LSC, Kalkaji, Near Site No.42, Delhi-110019, operates as a Data Fiduciary within the meaning of Section 2(i) of the Digital Personal Data Protection Act, 2023 (DPDPA 2023).

This Privacy Policy governs the processing, collection, storage, and protection of digital personal data obtained from users (“Data Principals”) interacting with our website (www.nyaysaarathi.in) or submitting inquiries to our legal chambers, in strict compliance with:

• The Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023);
• The Information Technology Act, 2000 (Act No. 21 of 2000), specifically Sections 43A and 72A;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules);
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; and
• The Bar Council of India Rules (Rule 36, Part VI, Chapter II) regarding the non-commercial and strictly informational character of legal chamber portals.

2. Categories of Personal Data Processed

We only collect personal data that a visitor voluntarily furnishes when initiating contact or scheduling a preliminary briefing:

• Contact Identifiers: Legal name, telephone/mobile number, email address.
• Brief Matter Details: Legal forum involved (Supreme Court, Delhi HC, MP High Court Jabalpur, Punjab & Haryana HC, Armed Forces Tribunal), initial subject matter description.
• Technical Session Data: Essential operational cookie identifiers, IP addresses (automatically anonymized via GA4), browser type, and language preference tokens (for English, Hindi, Bengali, Tamil, Telugu, Kannada, Spanish, French, German).

3. Lawful Grounds & Specific Purposes of Processing

Under Sections 4 and 6 of the DPDPA 2023, personal data is processed solely for lawful and specified purposes based on:

• Consent of the Data Principal: Given voluntarily when filling our consultation intake form or requesting an appointment;
• Legitimate Uses (Section 7, DPDPA): Conducting mandatory internal conflict-of-interest checks required under the Bar Council of India standards before scheduling any briefing; responding to direct inquiries; preventing fraudulent submissions; and ensuring cybersecurity integrity.

We strictly do NOT sell, monetize, trade, rent, or disclose personal data to third-party commercial marketing aggregators or advertising networks.

4. Complete Non-Liability & Risk Exemption for Third-Party Applications & Websites

PLEASE READ THIS SECTION WITH UTMOST ATTENTION:

Visitors and prospective clients expressly acknowledge and agree that modern internet navigation involves numerous autonomous intermediaries, including third-party web browsers (Chrome, Edge, Safari, Firefox), mobile operating systems (Android, iOS, Windows), search engines, telecom network providers (ISPs), browser add-ons, proxy networks, and external websites.

Nyaysaarathi Legal LLP has no affiliation, ownership, or supervisory authority over these third-party technologies. If any third-party application, unauthorized software, extension, external website, or intermediary intercepts, tracks, extracts, logs, processes, or leaks user information without the knowledge, direction, and written consent of Nyaysaarathi Legal LLP, Nyaysaarathi Legal LLP, its designated partners, advocates, and IT administrators shall NOT be held responsible, liable, or subject to any dispute, claim, penalty, or indemnity in any forum, court, or tribunal.

Users access the internet and transmit data at their sole volitional risk and must ensure their own devices, browsers, and network connections are hardened against spyware, keystroke loggers, and malicious browser extensions.

5. Essential Cookies & Floating Consent Banner

In accordance with international standards and Indian digital regulations, our website utilizes only Essential Cookies necessary to provide core website functionality:

• Session & Security Cookies: Ensure anti-clickjacking protection, form honeypot validation, and rate-limiting to block DoS flood attacks.
• BCI & Consent Record: Remembers your voluntary BCI confirmation in `localStorage` to prevent intrusive recurring prompts.
• Language Preference Cookie (`googtrans`): Stores your selected language (Hindi, Bengali, Tamil, Telugu, Kannada, Spanish, French, German, or English Reset) for seamless navigation.
• Anonymized Telemetry: Google Analytics 4 (GA4) with masked IP addresses (`anonymize_ip: true`) to measure aggregate portal performance without tracking personal identities.

Our floating cookie banner appears at the bottom of the screen without hindering your ability to freely navigate, browse practice areas, or view insights. You may delete or block cookies via your browser preferences at any time.

6. Technical Security Measures & Reasonable Security Practices

As mandated by Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011, Nyaysaarathi Legal LLP enforces comprehensive technical and operational safeguards:

• Transport Layer Security (TLS 1.3): End-to-end cryptographic encryption for all electronic interactions;
• HSTS Enforcement: HTTP Strict Transport Security with preload directives;
• Content Security Policy (CSP): Strict whitelist directives blocking unauthorized script injections;
• Anti-Clickjacking Frame Busting: Restricting all framing to `SAMEORIGIN`;
• Input Sanitization: Universal HTML escaping to block Cross-Site Scripting (XSS) and SQL injection payloads;
• Confidentiality Vow: Legal communications handled under the solemn Indian Evidence Act client-attorney confidentiality standards upon execution of a Vakalatnama.

7. Statutory Rights of Data Principals (DPDPA 2023)

Under Chapter III of the Digital Personal Data Protection Act, 2023, you are entitled to exercise the following rights regarding personal data processed by us:

• Right to Access Information (Section 11): Request a summary of your personal data processed and identities of any data processors involved;
• Right to Correction & Erasure (Section 12): Request correction of inaccurate information, completion of incomplete records, or erasure of personal data that is no longer required for the purpose for which it was collected;
• Right of Grievance Redressal (Section 13): Register a formal grievance with our designated Grievance Officer;
• Right to Nominate (Section 14): Nominate an authorized representative to exercise your data rights in the event of death or incapacity.

8. Designated Grievance Officer & Redressal Mechanism

In accordance with Section 13 of the DPDPA 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of our Grievance Officer are set forth below:

9. Updates to this Privacy Charter

Nyaysaarathi Legal LLP reserves the right to modify, amend, or update this Privacy Policy periodically to reflect changes in Indian statutes, notifications from the Data Protection Board of India, or amendments to Bar Council guidelines. Any revisions will be published on this page with an updated Effective Date.