Privacy Policy

1. General

1.1 This Privacy Policy describes how Mohit Gupta Law Offices (“the Firm”, “we”, “us” or “our”), a law firm based in New Delhi, India, handles personal information collected through this website (the “Website”) and through email or enquiry forms accessed from it.

1.2 This Website is informational. Consistent with the rules of the Bar Council of India, it does not advertise or solicit work. Nothing on it is legal advice, and using it does not create a lawyer–client relationship. Please also read our Terms of Use, which govern your access to the Website.

1.3 By accessing the Website or submitting information through it, you confirm that you are legally competent to enter into a binding agreement and that you have read and understood this policy. If you do not agree with it, please do not submit information through the Website.

1.4 We handle personal information in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, Section 43A of the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”).

1.5 The Website is intended for users in India. If you access it from elsewhere, you do so on your own initiative and are responsible for compliance with the laws of your jurisdiction.

2. Information we collect and how we collect it

2.1 Information you give us. When you complete an enquiry form on the Website, we collect the details you enter: your name, email address, telephone number, the practice area you select, and the description of your matter. If you contact us by email or telephone using the details published on the Website, we receive whatever information you choose to provide.

2.2 Information collected automatically. Like most websites, our hosting infrastructure may record technical information when you visit: IP address, browser type and version, device and operating system, referring page, pages viewed, and the date and time of access. This is used for security, diagnostics and to understand aggregate usage.

2.3 Sensitive personal data. The Website does not ask for, and you should not submit through it, passwords, financial or payment details, health or medical records, biometric data, or other categories treated as sensitive personal data or information under the SPDI Rules. Please do not send confidential documents or privileged material through the enquiry form.

2.4 Please do not send confidential case material before we are engaged. An enquiry submitted through this Website does not create a lawyer–client relationship and is not protected by privilege until the Firm has confirmed an engagement in writing and completed its conflict checks. Keep your first message to a brief description of the subject matter.

2.5 Information about other people. If you provide information relating to a third party, you confirm that you are authorised to share it with us for the purpose of your enquiry.

2.6 Providing information is voluntary. If you choose not to provide the details marked as required on an enquiry form, we may be unable to respond to your enquiry.

3. How we use information

3.1 We use the information you submit to:

• respond to your enquiry and correspond with you about the matter you have raised;
• carry out conflict-of-interest and client-identification checks before considering any engagement;
• provide legal services where an engagement is subsequently agreed;
• maintain our internal records and comply with our professional, statutory, tax and regulatory obligations;
• operate, secure, diagnose and improve the Website; and
• respond to lawful requests from courts, regulators or authorities.

3.2 We process information on the basis of your consent, the steps necessary to respond to your request and to enter into or perform an engagement, our legitimate interest in operating and securing the Website, and our legal and professional obligations.

3.3 We do not sell personal information. We do not use the information you submit through the enquiry form to send marketing or promotional material, and we do not add enquirers to mailing lists without a specific request.

3.4 If we ever introduce an opt-in mailing list or event invitations, every message will carry a clear unsubscribe option, and you may withdraw at any time using the contact details in section 12.

4. Cookies and local storage

4.1 The Website uses your browser’s local storage for one functional purpose: to remember that you have acknowledged the Bar Council of India disclaimer notice, so that it is not shown to you on every page. This is stored on your own device and is not transmitted to us.

4.2 The Website does not currently use advertising or tracking cookies. If analytics or other non-essential technologies are introduced in future, we will update this policy and, where required, obtain your consent through a notice on the Website.

4.3 The Website loads a web-font stylesheet from Google Fonts. Your browser’s request to that service may expose your IP address to it, subject to that provider’s own privacy policy.

4.4 You can clear or block local storage and cookies through your browser settings. Doing so may mean the disclaimer notice reappears on each visit.

5. Disclosure of information

5.1 We treat client and enquirer information as confidential. We may disclose it only:

• to partners, advocates and staff of the Firm who need it to deal with your enquiry or matter;
• to counsel, experts, consultants or agents engaged in connection with your matter, where relevant and with your knowledge;
• to service providers who support our operations — for example website hosting, email and IT support — under confidentiality obligations and only to the extent necessary;
• where required or permitted by law, or by a court, tribunal, regulator or the Bar Council of India; and
• where necessary to establish, exercise or defend legal rights.

5.2 We do not transfer personal information outside India except where a service provider we use stores data outside India, in which case we take reasonable steps to require protection consistent with this policy and applicable law.

6. Third-party links

6.1 The Website contains links to external sites and services, including a mapping service, a professional networking profile, and any blog or publication platform we may operate separately. These are provided for convenience.

6.2 We do not control those sites and are not responsible for their content, security or privacy practices. Please review the privacy policy of any third-party site before submitting information to it.

7. Your rights and choices

7.1 Subject to applicable law and to our professional and record-keeping obligations, you may ask us to:

• confirm what personal information about you we hold, and give you access to a summary of it;
• correct or complete information that is inaccurate or out of date;
• erase information that we no longer need for the purpose for which it was collected; and
• withdraw a consent you have given, for processing that relies on consent.

7.2 To make a request, write to the Grievance Officer using the details in section 12. We may need to verify your identity before acting, and we will respond within a reasonable period.

7.3 We may decline a request where the law or our professional obligations require us to retain the information, where it would reveal information about another person, or where it would prejudice legal proceedings. If we decline, we will tell you why.

7.4 Withdrawing consent or asking us to erase information may mean we can no longer act on or respond to your enquiry.

8. Security of your information

8.1 We maintain reasonable physical, technical and organisational safeguards intended to protect information against loss, misuse and unauthorised access, and we limit internal access to those who need it. Partners and staff are bound by professional and contractual duties of confidentiality.

8.2 No method of transmission over the internet or of electronic storage is completely secure. While we take the protection of your information seriously, we cannot guarantee absolute security, and we are not liable for loss arising from events beyond our reasonable control — including unauthorised access, hacking, interception in transit, or failures of third-party infrastructure. Information you send over the internet is sent at your own risk.

9. Retention of information

9.1 We keep personal information only for as long as is necessary for the purpose for which it was collected, and thereafter for as long as required by law or by our professional obligations, or as needed to establish or defend legal claims.

9.2 Enquiries that do not result in an engagement are retained for a limited period sufficient for our conflict-check records, and are then deleted or anonymised.

9.3 Files relating to matters on which we have acted are retained in accordance with the Firm’s file-retention practice and applicable professional requirements.

9.4 Aggregated or anonymised information that does not identify you may be retained without time limit.

10. Children

10.1 The Website is not directed at children, and we do not knowingly collect personal information about a child through it. If you believe a child has submitted information to us, please contact the Grievance Officer so that it can be deleted.

11. Disclaimer and indemnity

11.1 The Website and its content are provided for general information. Nothing in it is legal advice or a substitute for advice on your specific circumstances, and the Firm accepts no responsibility for any action taken in reliance on it. Please see our Terms of Use.

11.2 You agree to indemnify and hold the Firm harmless against any claim brought by a third party arising from information you submit through the Website that you were not entitled to share, or from your breach of this policy.

12. Grievance Officer and contact

12.1 If you have a question about this policy, wish to exercise a right under section 7, or wish to raise a concern about how your information has been handled, please contact:

12.2 We will acknowledge your communication and respond within a reasonable period. If you remain dissatisfied, you may escalate the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.

13. Changes to this policy

13.1 We may update this policy from time to time to reflect changes in our practices or in the law. The revised version will be posted on this page with a new “last updated” date.

13.2 Continued use of the Website after a change takes effect indicates that you accept the revised policy. We encourage you to review this page periodically.