Privacy Policy

PRIVACY POLICY

Pulastya Legal Services LLP (“Pulastya Legal”, “Firm”, “we”, “us” or “our”) is committed to respecting and protecting the privacy of individuals whose personal data we collect, receive, use, store, process, disclose or otherwise handle in connection with our website, professional services and business operations.

This Privacy Policy (“Policy”) explains how we process personal data when you visit or interact with our website, www.pulastyalegal.com(“Website”), communicate with us, make an enquiry, engage us for legal services, apply for employment or an internship, participate in an event or programme conducted by us, or otherwise interact with the Firm.

This Policy is intended to be read in accordance with the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, to the extent applicable and in force from time to time, and other applicable laws and professional obligations governing the collection, use, processing, confidentiality, retention and protection of personal data in India.

By accessing or using the Website, voluntarily providing personal data to us, or otherwise interacting with the Firm, you acknowledge that your personal data may be processed in accordance with this Policy and applicable law.

1. SCOPE OF THIS PRIVACY POLICY

This Policy applies to personal data processed by Pulastya Legal in digital form, including personal data collected in digital form and personal data collected in non-digital form that is subsequently digitised, to the extent governed by applicable law.

This Policy may apply to personal data relating to, among others:

visitors to the Website;
prospective, current and former clients;
representatives, directors, partners, employees and personnel of clients and prospective clients;
counterparties and their representatives;
advocates, attorneys, consultants, experts and other professional advisers;
vendors, service providers and business associates;
job applicants, interns and prospective personnel;
participants in seminars, webinars, conferences and other events;
individuals who communicate or correspond with the Firm; and
any other individuals whose personal data is processed in connection with the Firm’s professional services or business operations.

Certain information processed by the Firm may also be subject to legal professional privilege, attorney-client confidentiality, contractual confidentiality obligations, professional duties, court orders, statutory restrictions or other legal protections. Nothing in this Policy is intended to waive, limit or prejudice any such privilege, duty, right or protection.

2. PERSONAL DATA WE MAY COLLECT

Depending upon the nature of your interaction with us, we may collect and process the following categories of personal data:

2.1 Identity and Contact Information

This may include:

name;
postal or correspondence address;
email address;
telephone or mobile number;
designation, occupation or professional title;
organisation or employer details; and
other contact or identification information provided by you.

2.2 Client and Matter-Related Information

Where you make a legal enquiry or engage the Firm, we may collect information necessary to understand, assess and handle the relevant matter, including:

information concerning the nature and background of a legal matter;
business, commercial, contractual or transactional information;
intellectual property-related information;
information contained in contracts, correspondence, notices, pleadings, evidence and other documents;
information relating to disputes, proceedings, negotiations or transactions;
information concerning counterparties, witnesses, employees, consultants or other relevant persons; and
any other information reasonably necessary for providing legal services.

Depending upon the nature of a matter, such information may include personal data relating to individuals other than the person directly instructing the Firm.

2.3 Identification, Verification and Compliance Information

Where required or appropriate, we may collect information for client onboarding, identity verification, conflict checks, regulatory compliance, fraud prevention, billing or other legitimate professional purposes, including:

government-issued identification details;
address verification information;
corporate identification and ownership information;
authorised signatory details;
tax or billing information; and
information necessary for applicable legal or regulatory compliance.

We request that individuals provide only such identification information as is reasonably necessary for the relevant purpose.

2.4 Financial and Billing Information

We may process:

billing addresses;
payment and transaction details;
bank account information;
tax-related information;
invoices and payment records; and
other information necessary for billing, accounting and financial administration.

2.5 Communications

We may collect and retain information contained in communications with us, including communications through:

email;
telephone;
messaging applications;
online forms;
video conferencing platforms;
physical correspondence; and
other communication channels.

2.6 Website and Technical Information

When you access the Website, certain technical information may be collected automatically or through cookies and similar technologies, including:

Internet Protocol (IP) address;
browser type and version;
device type;
operating system;
pages visited;
date and time of access;
referring website or source;
approximate location derived from technical information; and
other usage, diagnostic or analytics information.

2.7 Recruitment and Internship Information

If you apply for employment, an internship, consultancy or another professional opportunity with us, we may collect:

curriculum vitae or résumé;
educational qualifications;
employment history;
professional experience;
writing samples;
references;
contact details; and
other information voluntarily provided during the recruitment or assessment process.

2.8 Information from Third Parties and Public Sources

Where lawful and relevant, we may receive personal data from:

clients;
counterparties;
professional advisers;
referral sources;
public databases and government records;
courts, tribunals and regulatory authorities;
publicly accessible websites and professional platforms; and
other third parties involved in a legal, commercial or professional matter.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

directly from you;
through the Website;
through email, telephone, messaging applications or other communications;
during client onboarding and the course of a professional engagement;
from documents or information provided in connection with a legal matter;
from clients where the personal data relates to another individual;
from counterparties, advisers, experts, consultants or other third parties;
through publicly available sources and official records;
through recruitment and internship applications; and
through cookies, analytics and similar technologies.

Where you provide personal data relating to another individual, you should ensure, where required by applicable law, that you are authorised to provide such information to us and that the individual has been appropriately informed of the relevant processing.

4. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA

We may process personal data for one or more of the following purposes:

4.1 Responding to Enquiries

To:

respond to enquiries and communications;
assess whether we may be able to assist with a legal matter;
arrange consultations or meetings; and
provide information requested from us.

4.2 Client Onboarding and Conflict Checks

To:

identify and verify clients and authorised representatives;
conduct conflict-of-interest checks;
evaluate whether we can accept a professional engagement;
maintain client and matter records; and
comply with applicable professional, contractual and legal requirements.

4.3 Providing Legal and Professional Services

To:

provide legal advice and representation;
prepare, review and negotiate legal documents;
conduct legal research and due diligence;
manage intellectual property portfolios;
file and prosecute applications before governmental, judicial, quasi-judicial or regulatory authorities;
manage disputes, proceedings and transactions;
communicate with clients, counterparties, authorities and professional advisers; and
otherwise perform our professional obligations.

4.4 Administration of the Professional Relationship

To:

manage client relationships;
maintain matter files;
issue invoices and process payments;
manage accounts and records;
communicate regarding ongoing or completed matters; and
administer the Firm’s professional operations.

4.5 Legal, Regulatory and Professional Compliance

To:

comply with applicable laws and regulations;
comply with court, tribunal, regulatory or governmental requirements;
respond to lawful requests from competent authorities;
maintain records required by law or professional obligations;
establish, exercise or defend legal claims; and
protect the rights and interests of the Firm, its clients and other persons.

4.6 Website Administration and Security

To:

operate and maintain the Website;
understand Website usage;
improve Website functionality and user experience;
diagnose technical issues;
maintain security;
prevent fraud, misuse or unauthorised activity; and
generate aggregated or statistical insights.

4.7 Recruitment and Human Resources

To:

evaluate applications for employment, internships, consultancy or other professional opportunities;
communicate with candidates;
conduct interviews and assessments;
verify qualifications or references where appropriate; and
maintain recruitment records.

4.8 Events and Professional Communications

Where permitted by applicable law, we may use contact information to:

communicate regarding seminars, webinars, conferences or professional events;
provide legal updates, publications or information about the Firm; and
maintain professional relationships.

You may request that we discontinue such communications at any time.

5. GROUNDS FOR PROCESSING PERSONAL DATA

We process personal data in accordance with applicable law.

Depending upon the circumstances, personal data may be processed:

on the basis of your consent;
where you have voluntarily provided personal data for a specified purpose;
where processing is necessary or appropriate in connection with a request made by you;
for purposes connected with the provision of legal services;
for compliance with applicable law, court orders, regulatory requirements or professional obligations;
for responding to medical emergencies, threats to life or health, disasters or breakdowns of public order, where applicable;
for employment-related purposes permitted by law; or
for other legitimate uses recognised under applicable law.

Where consent is the basis for processing, you may withdraw your consent in accordance with applicable law. Withdrawal of consent will not affect the lawfulness of processing undertaken prior to such withdrawal.

Withdrawal of consent may, however, affect our ability to provide certain services or continue certain activities where the relevant personal data is necessary for those purposes.

6. LEGAL PROFESSIONAL PRIVILEGE AND CONFIDENTIALITY

As a law firm, Pulastya Legal may receive and process information of a confidential, commercially sensitive, proprietary or legally privileged nature.

We maintain confidentiality in accordance with applicable law, contractual obligations and professional standards. Access to client and matter-related information is restricted to persons who require such access for legitimate professional, administrative, legal, compliance or operational purposes.

The submission of information through the Website, by email, through a contact form or through any other unsolicited communication does not, by itself, create an attorney-client relationship between you and Pulastya Legal.

You should not send highly confidential, sensitive or time-critical information to the Firm unless an attorney-client relationship has been established or the Firm has agreed to receive such information.

7. SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell personal data.

We may share or disclose personal data, where reasonably necessary and lawful, with:

partners, advocates, attorneys, associates, employees, consultants and authorised personnel of the Firm;
advocates, counsel, foreign attorneys and other legal professionals engaged in connection with a matter;
patent agents, trademark agents, investigators, experts, consultants and other professional service providers;
courts, tribunals, intellectual property offices, registries, governmental departments and regulatory authorities;
counterparties and their professional advisers where necessary in connection with a matter;
information technology, cloud hosting, cybersecurity, communications, document management and other service providers;
accountants, auditors, insurers, banks and other professional or financial service providers;
vendors and service providers supporting the Firm’s operations;
law enforcement agencies or governmental authorities where disclosure is required or permitted by law; and
any other person where you have authorised the disclosure or where disclosure is otherwise permitted under applicable law.

We endeavour to limit disclosures to information reasonably necessary for the relevant purpose and, where appropriate, require recipients to maintain appropriate confidentiality and data protection standards.

8. INTERNATIONAL AND CROSS-BORDER PROCESSING

Pulastya Legal advises clients on matters that may involve multiple jurisdictions and may work with foreign counsel, overseas intellectual property offices, international service providers, clients, counterparties or other persons located outside India.

Accordingly, personal data may, where necessary and legally permissible, be transferred to or processed in jurisdictions outside India.

Any such transfer or processing will be undertaken subject to applicable law, including any restrictions or requirements imposed by the Government of India from time to time.

9. DATA RETENTION

We retain personal data only for so long as reasonably necessary for the purpose for which it was collected or processed, or for such longer period as may be required or permitted by:

applicable law;
professional and ethical obligations;
contractual requirements;
limitation periods;
accounting, taxation or regulatory requirements;
the establishment, exercise or defence of legal claims; or
legitimate record-keeping and risk-management requirements applicable to legal practice.

Client and matter files may be retained for periods determined by the nature of the engagement, legal requirements, professional obligations and the Firm’s internal record-retention practices.

When personal data is no longer required to be retained, we may delete, anonymise, securely destroy or otherwise dispose of it in accordance with applicable law and our internal procedures.

10. DATA SECURITY AND REASONABLE SECURITY SAFEGUARDS

We recognise the importance of protecting personal data entrusted to us and take reasonable technical, organisational and administrative measures designed to safeguard personal data against unauthorised or unlawful processing, access, use, disclosure, alteration, modification, copying, transmission, loss, destruction or other forms of misuse.

The nature and extent of the security measures implemented by us may vary depending upon the nature, volume and sensitivity of the personal data concerned, the purpose and context of processing, the nature of our professional services, the systems and technologies involved, the reasonably foreseeable risks associated with such processing, and applicable legal and professional requirements.

Without limiting the generality of the foregoing, the security safeguards adopted or implemented by us may, as appropriate, include:

Access Controls and Authorisation: restricting access to personal data, client information and matter-related records to partners, advocates, associates, employees, consultants, service providers and other authorised persons who require such access for legitimate professional, administrative, operational, legal or compliance purposes;
Authentication and Account Security: implementing password protection, authentication measures, account access controls and other appropriate safeguards intended to reduce the risk of unauthorised access to systems, applications, devices and information;
Confidentiality and Need-to-Know Access: maintaining appropriate restrictions on access to client files, legal documents, matter-related information, personal data, confidential information and legally privileged communications, including, where appropriate, access on a need-to-know basis;
Secure Storage and Information Management: taking reasonable measures for the secure storage, organisation, handling and management of electronic and physical records containing personal data, confidential information or client-related information;
Secure Communications and Information Transfer: adopting reasonable safeguards in relation to the transmission, sharing and exchange of personal data and confidential information through electronic communication systems, document-sharing platforms and other communication channels;
Device and System Security: taking reasonable measures to protect computers, devices, networks, applications and other information systems used in connection with our professional and business operations against unauthorised access, malware and other reasonably foreseeable security threats;
Data Backup and Recovery: maintaining, where appropriate, backup, recovery and business continuity measures intended to reduce the risk of permanent loss of personal data or disruption to systems and operations;
Confidentiality Obligations: requiring partners, advocates, associates, employees, consultants, interns, service providers and other persons having access to personal data or confidential information to comply with applicable confidentiality, privacy, information-security and professional obligations;
Third-Party Service Provider Controls: taking reasonable steps, where appropriate, to assess and manage data-protection and information-security risks associated with third-party service providers that may process or have access to personal data on our behalf, including through contractual confidentiality, data-protection or security obligations, as applicable;
Internal Policies and Procedures: maintaining and implementing internal policies, procedures, protocols and practices concerning confidentiality, data protection, information security, access to information, use of technology and handling of client and personal data;
Personnel Awareness: taking reasonable measures to promote awareness among relevant personnel regarding confidentiality, privacy, cybersecurity, responsible use of technology and the appropriate handling of personal data and client information;
Incident Identification and Response: maintaining reasonable processes for identifying, assessing, containing, investigating, mitigating and responding to suspected or actual personal data breaches and other information-security incidents; and
Periodic Review: periodically reviewing and, where appropriate, updating our data-security measures, internal practices and procedures having regard to changes in technology, our operations, the nature of the personal data processed, emerging risks and applicable legal requirements.

We endeavour to ensure that any person processing personal data on our behalf does so only for authorised purposes and subject to appropriate confidentiality, security and data-protection obligations, as applicable. In the event of a personal data breach, we will take reasonable and appropriate measures to contain and mitigate the effects of the breach, assess the nature and extent of the incident, undertake such remedial action as may be appropriate, and make such notifications to affected Data Principals and the Data Protection Board of India as may be required under applicable law. Notwithstanding the security measures adopted by us, no method of electronic transmission, internet-based communication, information system, cloud-based service, electronic storage or physical storage can be guaranteed to be completely secure or free from all risks. Cybersecurity threats, unauthorised third-party conduct, technical failures, human error and circumstances beyond our reasonable control may affect the security of information. Accordingly, while we take reasonable security safeguards and exercise appropriate care in protecting personal data, we do not represent or warrant that any system, transmission, communication or method of storage is completely secure or immune from unauthorised access, interference, loss or other security incidents. Individuals interacting with us are also encouraged to take reasonable precautions when communicating or sharing information electronically, including by protecting their devices and account credentials and avoiding the transmission of highly sensitive or confidential information through unsecured communication channels. Where we become aware of a personal data breach affecting personal data under our control, we will respond to such breach and undertake notifications, communications and other measures in accordance with the Digital Personal Data Protection Act, 2023, the rules made thereunder and other applicable law.

11. PERSONAL DATA BREACHES

In the event of a personal data breach, we will take such steps as may be required under applicable law, including measures to contain, investigate, mitigate and remediate the breach.

Where required by applicable law, we will provide notifications to affected individuals and/or the competent data protection authority in the manner and within the timelines prescribed under applicable law.

12. YOUR RIGHTS

Subject to applicable law and any lawful limitations or exemptions, you may have the right to:

12.1 Right to Access Information

You may request information regarding your personal data being processed by us and such other information as may be available to you under applicable law.

12.2 Right to Correction and Updating

You may request the correction of inaccurate or misleading personal data and the completion or updating of incomplete personal data.

12.3 Right to Erasure

You may request the erasure of personal data where the purpose for which it was collected is no longer being served by its retention and where continued retention is not otherwise required or permitted by law.

12.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent in accordance with applicable law.

12.5 Right to Grievance Redressal

You may raise a grievance concerning the processing of your personal data or the exercise of your rights under applicable data protection law.

12.6 Right to Nominate

Where provided under applicable law, you may nominate another individual to exercise your rights in the event of your death or incapacity.

The exercise of these rights may be subject to verification of your identity and to applicable legal, professional and regulatory requirements.

Certain requests may be restricted or refused where necessary to protect:

legal professional privilege;
attorney-client confidentiality;
the rights of another person;
an ongoing legal proceeding, investigation or dispute;
compliance with applicable law;
the establishment, exercise or defence of legal claims; or
any other lawful ground.

13. DUTIES OF INDIVIDUALS

When exercising rights or providing personal data to us, you are expected to:

comply with applicable law;
not impersonate another person;
not suppress material information where such information is required for the relevant purpose;
provide information that is accurate and authentic to the best of your knowledge; and
furnish such information as may reasonably be required to verify your identity in connection with a request.

14. CHILDREN’S PERSONAL DATA

The Website and our legal services are not generally directed at children.

We do not knowingly seek to collect personal data from children through the Website for targeted advertising, behavioural monitoring or similar purposes.

Where personal data relating to a child is processed in connection with a legal matter or professional engagement, we will process such information in accordance with applicable law and, where required, obtain verifiable consent from the child’s parent or lawful guardian.

15. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies and similar technologies to:

enable Website functionality;
maintain security;
understand Website traffic and usage;
improve Website performance; and
support analytics.

Cookies may be session-based or persistent and may be placed by us or by third-party service providers whose tools are integrated into the Website.

Where required by applicable law, we will seek consent before placing non-essential cookies or similar technologies on your device.

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality or performance of the Website.

Further information may be provided through a separate Cookie Policy or cookie consent mechanism, where applicable.

16. THIRD-PARTY WEBSITES AND SERVICES

The Website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy, security or data-processing practices of third parties. The inclusion of a link does not imply responsibility for or endorsement of the third party’s privacy practices.

You should review the privacy policies of third-party websites or services before providing personal data to them.

17. ARTIFICIAL INTELLIGENCE AND TECHNOLOGY TOOLS

The Firm may use technology, automation or artificial intelligence-enabled tools for limited administrative, research, productivity, document-management or operational purposes, subject to the Firm’s internal policies, professional obligations and applicable law.

The Firm maintains policies and safeguards concerning the use of external technology platforms and artificial intelligence tools, particularly in relation to client confidentiality, privileged information, personal data and commercially sensitive information.

We do not authorise the indiscriminate disclosure of confidential client information or personal data to publicly accessible artificial intelligence platforms.

18. COMMUNICATIONS WITH THE FIRM

Communications through email, messaging applications, video conferencing platforms and other electronic channels may involve third-party technology providers and may be subject to the technical and security limitations of those platforms.

By choosing to communicate with us through a particular electronic channel, you acknowledge the inherent risks associated with that method of communication.

Where appropriate, we may recommend or use alternative methods for the transmission of particularly sensitive information.

19. GRIEVANCE REDRESSAL

If you have any questions, concerns or grievances regarding this Privacy Policy or the processing of your personal data, or if you wish to exercise your rights under applicable data protection law, you may contact us at:

Grievance Officer / Contact Person: Aniket Amdekar, Head – Data Privacy and Protection
Pulastya Legal Services LLP
Email: info@pulastyalegal.com
Address: 809, B Wing, Mittal Tower, MG Road, Bengaluru – 560001, Karnataka
Telephone: 9871739191

We will endeavour to acknowledge and address grievances in accordance with applicable law and within the timelines prescribed thereunder.

Where applicable, and after exhausting the grievance redressal mechanism available with us, you may have the right to approach the competent data protection authority or the Data Protection Board of India in accordance with applicable law.

20. CHANGES TO THIS PRIVACY POLICY

We may amend or update this Privacy Policy from time to time to reflect:

changes in applicable law or regulation;
changes in our professional services orbusiness operations;
changes in technology or data-processing practices; or
improvements to our privacy and security practices.

The updated version will be published on the Website with the revised “Last Updated” date.

We encourage you to review this Policy periodically.

21. CONTACT US

For questions concerning this Privacy Policy or the Firm's privacy practices, please contact:

Pulastya Legal Services LLP
Email: info@pulastyalegal.com
Website: www.pulastyalegal.com
Address: 809, B Wing, Mittal Tower, MG Road, Bengaluru – 560001, Karnataka

22. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Any rights and obligations relating to the processing of personal data shall remain subject to the Digital Personal Data Protection Act, 2023, the rules made thereunder, other applicable laws, and the professional and legal obligations applicable to Pulastya Legal Services LLP.

Last Updated: 10-July-2026