Privacy Policy
Prasoon Vashistha, Advocate (“we”, “us”, “our”) respects the privacy of visitors and persons who voluntarily contact this website. This Privacy Policy explains how personal data may be collected, used, retained and protected in connection with this website.
1. Regulatory framework
This Policy is prepared with reference to the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025, as applicable. The Government has notified a phased commencement of the DPDP Act; several substantive provisions are scheduled to commence eighteen months from 13 November 2025. This Policy is therefore intended to provide a privacy framework in advance and will be updated as applicable provisions take effect.
2. Personal data we may receive
This website does not require an account or payment to browse. If you voluntarily contact us, we may receive information such as:
- name and contact details, including mobile number and email address;
- the contents of an enquiry, message or request for legal assistance;
- documents or other information that you choose to send to us; and
- technical information that may be processed by hosting, security or other infrastructure providers when the website is accessed, such as IP address, browser/device information and access logs.
Please do not send highly sensitive, confidential or privileged information through the website merely to make an initial enquiry. Where a matter requires confidential handling, appropriate communication arrangements will be discussed separately.
3. Purposes of processing
Personal data may be processed for lawful purposes including:
- responding to enquiries and requests for contact;
- understanding the nature of a prospective legal matter and communicating with you;
- providing legal services where a professional engagement is subsequently accepted;
- maintaining professional, administrative, accounting, security and legal records;
- complying with applicable law, court processes or lawful directions; and
- protecting the website, office systems and persons from fraud, abuse or security incidents.
4. Lawful basis and consent
Where consent is required, we will seek consent in an informed and appropriately clear manner. Where processing is permitted under a lawful use or is otherwise required or authorised by applicable law, processing may occur on that basis. Consent may be withdrawn where the applicable law permits withdrawal, subject to lawful exceptions and consequences of withdrawal.
5. Data minimisation
We aim to collect and use only information reasonably necessary for the stated purpose. Visitors are not required to disclose personal information merely to browse publicly available pages of this website.
6. Sharing and disclosure
Personal data may be disclosed where reasonably necessary for the purposes described above, including to service providers who support hosting, communications, website security or other technical functions, or where disclosure is required or permitted by law. We do not state or imply that personal data is sold for advertising purposes.
This website contains links to third-party services such as WhatsApp and Google Maps. When you use those services, the relevant third party may process information according to its own terms and privacy practices. Their processing is outside our control.
7. Retention
Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected, for professional and legal record-keeping, for compliance with applicable law, or for establishing, exercising or defending legal claims. When retention is no longer necessary, data will be deleted, anonymised or otherwise disposed of securely, subject to applicable legal or professional obligations.
8. Security safeguards
Reasonable technical and organisational measures will be used to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. No internet transmission or electronic storage system can be guaranteed to be completely secure.
9. Your privacy rights
Subject to the DPDP Act, applicable commencement dates, and any statutory limitations or exemptions, a Data Principal may have rights including access to information about processing, correction and erasure of personal data, grievance redressal, withdrawal of consent where applicable, and nomination of another individual to exercise rights in accordance with law.
10. How to exercise a privacy request or grievance
For a privacy query, request relating to your personal data, consent withdrawal request, correction/erasure request, or privacy grievance, contact:
Prasoon Vashistha, Advocate
Chamber No. 145, District & Sessions Court Compound, Hapur (U.P.)
Email: vashisthaassociates37@gmail.com
Phone: 9897773403
We may request reasonable information necessary to verify the identity of the person making a request before acting on it, particularly where disclosure or deletion could affect another person.
11. Children
This website is intended for a general audience and is not directed at children. We do not knowingly solicit personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that the matter can be reviewed in accordance with applicable law.
12. Changes to this Policy
This Policy may be updated to reflect changes in law, rules, technology, website functionality or professional practice. The latest version will be posted on this website with its effective date.
13. Important qualification
This Policy describes the intended privacy practices of this website. It is not a representation that every provision of the DPDP Act or Rules is presently applicable to every processing activity. The legal framework and commencement dates will be followed as they become applicable.
← Back to website