Privacy Notice.

i. Who we are

GV Law Chamber LLP is a firm of advocates registered in the Republic of India, with its principal place of practice at Gurugram, Haryana. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary in relation to the personal information processed through this website and our client portal.

ii. What we collect

We collect only the information we genuinely need in order to render professional services and operate this website. Specifically:

iii. Why we collect it

The chambers process personal information for the following purposes only:

• To deliver legal services — including identifying clients, maintaining the client register, conducting conflict checks, and discharging our professional duties under the Advocates Act, 1961.
• To operate the client portal — to enable sign-in, to authenticate sessions, and to make reference materials available to verified clients.
• To communicate with you — to respond to enquiries, to send matter-related correspondence, and (where you have requested it) to send periodic updates of legal interest.
• To meet legal obligations — to comply with statutory and regulatory requirements applicable to advocates and to the firm.
• To safeguard the system — to detect, investigate, and prevent fraud, abuse, or unauthorised access to your account.

We do not use your personal information for advertising, profiling, automated decision-making, or any commercial purpose unrelated to the delivery of legal services.

iv. Lawful basis

We process personal information on one or more of the following bases:

• Your consent — given when you register on the portal and accept this notice.
• Performance of a contract — where processing is necessary to discharge our engagement with you as your legal counsel.
• Legal obligation — where statute, court order, or the rules of professional conduct require us to retain or disclose information.
• Legitimate interest — for the security and proper administration of the chambers, balanced against your rights.

v. How we share it

Your personal information is treated as privileged and confidential. It is accessible only to the partners, counsel, paralegals, and administrative staff of GV Law Chamber LLP who genuinely need it for the matter in hand.

The chambers will not share, sell, rent, or otherwise transfer your personal data to third parties, save in the following circumstances:

• where you have given specific written instruction for us to do so (e.g. correspondence with opposing counsel or filing in a forum);
• where disclosure is required by an order of a competent court, a statutory authority, or any law for the time being in force;
• to service providers acting on our behalf (such as our hosting provider, payment processor, or accountant), all of whom are bound by written confidentiality undertakings;
• where strictly necessary to protect the vital interests of the chambers, our clients, or the public.

vi. Where it lives

Personal data submitted through this website is stored on servers operated by our hosting provider on infrastructure located within India. All sign-in traffic is transmitted over TLS-encrypted HTTPS, and authentication credentials are stored only as one-way bcrypt hashes — meaning even the chambers cannot recover your passphrase if you forget it. We employ commercially reasonable technical and organisational measures to protect the data against unauthorised access, alteration, disclosure, or destruction.

vii. How long we keep it

We retain personal information for as long as you maintain an account with us, and thereafter for such period as is necessary to comply with our professional, regulatory, and statutory obligations. For matters in which the chambers have been retained, file records are typically preserved for a minimum of seven years from closure of the matter, consistent with the archival practice expected of advocates in India. Inactive accounts that have never been verified may be removed after twelve months.

viii. Your rights

Under applicable law you have the right to:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct information that is inaccurate or incomplete;
• Erasure — request deletion of your information, subject to our overriding professional retention obligations;
• Withdrawal of consent — withdraw any consent you have previously given, without affecting the lawfulness of processing already carried out;
• Grievance — raise a complaint with our designated contact (see below), and ultimately with the Data Protection Board of India once it is constituted.

To exercise any of these rights, please write to us at the address below. We will respond within a reasonable period, typically not exceeding thirty days.

ix. Cookies

This website uses a single first-party session cookie (named gvchambers_sess) for the sole purpose of keeping you signed in. The cookie is marked HttpOnly, Secure, and SameSite=Lax, and is not accessible to JavaScript or to third parties. We do not use advertising cookies, analytics trackers, or any form of cross-site tracking.

x. Changes to this notice

We may revise this notice from time to time to reflect changes in law or in our practices. The “Effective” date at the top of the page indicates when this version came into force. Material changes will be brought to the attention of registered clients by email and through the portal.

xi. Contact

Queries, requests, and grievances relating to your personal data may be addressed in writing to: