Effective Date: 01/04/2025

Indian Attorneys Legal Solutions Ltd (“we”, “our”, “us”, or “Indian Attorneys”) is committed to safeguarding the privacy and personal data of our clients, users, and platform visitors. This Privacy Policy outlines how we collect, process, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant provisions under the Information Technology Act, 2000 of India and its associated rules.

1. Introduction

This Privacy Policy applies to all users of our services, including those accessing our platform from the United Kingdom, India, or any other jurisdiction. By accessing or using our website, applications, or services, you consent to the terms of this Privacy Policy.

2. Data Controller Information

Indian Attorneys Ltd
The Bristol Office, 2nd Floor, 5High Street, Westbury on Trym, Bristol, England, BS9 3BY
Email: indianattorneys.uk@gmail.com

We are the data controller of personal data collected through our UK platform and act as the data fiduciary under Indian data protection frameworks for services rendered in India.

3. Categories of Personal Data Collected

We may collect the following categories of personal data:

• 3.1 Personal Identification and Contact Information
  • 3.1.1 Full name, date of birth, address, phone number, email ID, nationality
  • 3.1.2 Passport, visa, or national ID details (if required for service fulfilment)
• 3.2 Client and Case Information
  • 3.2.1 Legal matter details, supporting documentation, case history
  • 3.2.2 Communication records, notes from consultations
• 3.3 Financial and Transactional Data
  • 3.3.1 Payment details (through secure payment gateways)
  • 3.3.2 Billing address, invoice records, transaction identifiers
• 3.4 Technical and Usage Data
  • 3.4.1 IP address, browser type, device identifiers
  • 3.4.2 Access times, location (if enabled), cookies and analytics data

4. Purpose and Legal Basis for Processing

We process personal data only when there is a lawful basis under Article 6 of the UK GDPR and corresponding Indian law, namely:

Purpose of Processing	Legal Basis (UK GDPR)	Indian Legal Reference
Service delivery & legal facilitation	Performance of contract	Sec. 43A, IT Act; SPDI Rules, 2011
Identity verification & fraud prevention	Legal obligation	KYC norms under Indian law
Payment processing	Contractual necessity	RBI guidelines, IT Act
Communication and support	Legitimate interests	Reasonable business usage
Marketing (opt-in only)	Consent	SPDI Rules, 2011

5. Disclosure and Data Sharing

We may share your personal data with the following categories of recipients:

• 5.1 Legal professionals: Verified Indian lawyers and law firms relevant to your matter (based on your consent).
• 5.2 Service providers: Including cloud services, analytics tools, document storage systems, payment processors.
• 5.3 Regulatory bodies: In compliance with legal obligations in the UK, India, or applicable jurisdictions.
• 5.4 Professional advisors: Including auditors, banks, insurers, or legal representatives.

All data shared is subject to contractual safeguards and confidentiality undertakings in line with UK and Indian data protection standards.

6. International Data Transfers

Where data is transferred between the UK and India, such transfer is conducted in accordance with Chapter V of the UK GDPR and applicable Indian cross-border data transfer rules. Appropriate safeguards such as Standard Contractual Clauses (SCCSs) or equivalent binding agreements are in place.

7. Data Retention

We retain personal data for no longer than is necessary to fulfil the purposes for which it was collected, including:

• 7.1 Legal documentation and case files: 6 years after case closure (or longer as required by applicable laws).
• 7.2 Financial records and transaction logs: 7 years (per HMRC and tax laws).
• 7.3 Communications: 3 years, unless part of an ongoing matter.

Data is securely archived or permanently deleted upon the end of the retention period.

8. Security Measures

We maintain industry-standard technical and organisational security measures, including:

• 8.1 SSL/TLS encryption for data in transit
• 8.2 Role-based access controls
• 8.3 ISO 27001-compliant cloud hosting providers
• 8.4 Two-factor authentication for user portals
• 8.5 Regular vulnerability testing and risk assessments

We also require third-party vendors to implement and maintain appropriate security measures.

9. Your Rights

Under the UK GDPR, you have the right to:

• 9.1 Access – request a copy of your personal data
• 9.2 Rectify – correct inaccuracies
• 9.3 Erase – request deletion (subject to legal obligations)
• 9.4 Restrict – limit the processing of your data
• 9.5 Object – to data processing, especially for direct marketing
• 9.6 Portability – obtain your data in a structured format

To exercise any of the above rights, please contact:
indianattorneys.uk@gmail.com

Under Indian IT Rules:
You may request access, correction, or withdrawal of consent by writing to us at:
indianattorneys.uk@gmail.com

10. Cookies and Online Tracking

Our website uses essential and analytical cookies to improve performance and user experience. By using our site, you consent to cookie usage. You can manage cookie preferences in your browser settings. For details, refer to our Cookie Policy.

11. Children's Privacy

Our services are intended for individuals over the age of 18. We do not knowingly collect personal data from minors without parental consent.

12. Updates to this Policy

We may amend this Privacy Policy from time to time. Material changes will be notified on our website with a revised “Effective Date”. You are advised to review this policy periodically.

13. Contact & Complaints

If you have any concerns about how your personal data is handled, please contact:

Indian Attorneys Ltd
Email: indianattorneys.uk@gmail.com

You may also raise concerns with:

• UK: Information Commissioner's Office (ICO) – www.ico.org.uk
• India: Ministry of Electronics and Information Technology – www.meity.gov.in