Privacy Policy

Last Updated: 15th July 2026

At Cipher Legal we are committed to protecting the privacy and confidentiality of our clients, prospective clients, website visitors, and other individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information.

By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

We may collect and process the following personal data:

  • Name, address, mobile number, and email address
  • Identity and verification documents
  • Information relating to legal disputes, transactions, and proceedings
  • Financial and billing information
  • Employment and business details
  • Information provided through our website, emails, or consultations
  • Technical information such as IP addresses, browser details, and website usage data

We collect only such personal data as is necessary for the purposes specified in this Policy.

2. Purpose of Processing

Your personal data may be processed for the following purposes:

  • Providing legal advice and representation
  • Client onboarding and conflict checks
  • Drafting, reviewing, and filing legal documents
  • Compliance with statutory, regulatory, and professional obligations
  • Communication regarding legal matters
  • Billing and payment processing
  • Managing and improving our services
  • Protecting legal rights and preventing fraud

Personal data shall be processed only for lawful purposes and in accordance with applicable legal requirements.

3. Consent

Where required under the DPDPA, we will obtain your consent before collecting or processing your personal data. Consent may be withdrawn at any time by contacting us; however, withdrawal of consent may impact our ability to provide certain legal services.

4. Confidentiality and Attorney-Client Privilege

As a legal practice, we maintain strict confidentiality regarding all client information. Information disclosed by clients is protected subject to applicable laws, professional ethics, advocate-client privilege, court orders, and statutory obligations.

5. Disclosure of Personal Data

We may disclose personal data only:

  • With your consent
  • To courts, tribunals, arbitrators, regulatory authorities, and government agencies as required by law
  • To advocates, consultants, experts, or service providers engaged for your matter
  • To comply with legal obligations or lawful requests
  • To protect the rights, interests, or security of the Firm and its clients

6. Data Security

We implement reasonable technical and organizational safeguards to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse, including:

  • Access controls and authentication measures
  • Data encryption where appropriate
  • Secure document management systems
  • Periodic security assessments
  • Employee confidentiality obligations

7. Retention of Personal Data

Personal data will be retained only for:

  • The duration necessary to provide legal services
  • Compliance with statutory and regulatory obligations
  • Establishment, exercise, or defense of legal claims
  • Professional record-keeping requirements

Upon expiry of the retention period, data will be securely deleted, anonymized, or archived as required by law.

8. Rights of Data Principals

Subject to applicable law, you may exercise the following rights:

  • Right to access information about your personal data
  • Right to correction and updating of inaccurate personal data
  • Right to erasure of personal data where permissible
  • Right to grievance redressal
  • Right to nominate another person to exercise rights on your behalf in specified circumstances

9. Children's Data

The Firm does not knowingly collect personal data of children except where required for legal representation or legal proceedings and in compliance with applicable legal requirements.

10. Data Transfers

Personal data may be stored or processed in India or in jurisdictions permitted under applicable Indian laws. Appropriate safeguards will be adopted to ensure adequate protection of personal data.