Privacy Policy

WIN Legal Advisors ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect through www.winlegaladvisors.com (the "Site"), how we use it, who we share it with, and the choices you have. It is designed to align with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

1. Who is the data fiduciary

WIN Legal Advisors is the "data fiduciary" for personal information collected through the Site. You can reach us at contact@winlegaladvisors.com for any privacy-related questions or requests.

2. What we collect

• Contact details you provide — name, email, phone number, company name.
• Consultation details — service selected, preferred date and time, your notes.
• Account information — sign-in email, authentication provider details (e.g., Google), and encrypted session tokens.
• Correspondence — emails, replies, and documents you share with us before or during a consultation.
• Technical data — IP address, browser type, device type, referrer, and pages visited, collected for security and analytics.

3. How we use your information

• To schedule, confirm, reschedule, cancel, and remind you about your consultation.
• To provide the legal services you engage us for.
• To respond to enquiries and support requests.
• To send transactional emails (confirmations, reminders, calendar invites).
• To comply with legal, regulatory, and professional obligations.
• To secure and improve the Site.

We do not use your information for unsolicited marketing, and we do not sell your personal information.

4. Legal basis

We process personal data on the basis of your consent (given when you submit a form or book a consultation), our legitimate professional interests (delivering legal services you have requested), and where required to comply with the law.

5. Sharing your information

We share information only with:

• Service providers that help us run the Site and communicate with you — hosting, authentication, calendar (Google Calendar), and email delivery. These providers process data only on our instructions under confidentiality obligations.
• Regulators or courts where disclosure is required by law or to enforce our legal rights.
• Professional advisors (accountants, insurers, auditors) bound by confidentiality.

6. Cookies and analytics

The Site uses essential cookies for authentication and session management. We may use privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may break sign-in and booking features.

7. Data retention

We retain personal information only for as long as necessary to provide our services, comply with legal, tax, and professional obligations, and resolve disputes. Consultation and engagement records are typically retained for at least the period required by applicable professional and tax rules; account data can be deleted on request, subject to those obligations.

8. Security

We implement reasonable technical and organisational safeguards — encryption in transit, access controls, and audited third-party providers — to protect personal information. No system is 100% secure, and we cannot guarantee absolute security.

9. International transfers

Some of our service providers may process data outside India. Where this happens, we take steps to ensure appropriate safeguards are in place, consistent with the DPDP Act and applicable law.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct or update inaccurate information.
• Withdraw consent for future processing (where processing is based on consent).
• Request deletion of your personal information, subject to legal retention obligations.
• Nominate an individual to exercise your rights in the event of your death or incapacity.
• Lodge a grievance with the Data Protection Board of India where applicable.

To exercise any of these rights, write to contact@winlegaladvisors.com. We may need to verify your identity before acting on a request.

11. Children

The Site is intended for individuals aged 18 and above. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on the Site. Please review the policy periodically.

13. Grievance officer

For DPDP Act–related queries or complaints, you may contact our grievance officer at contact@winlegaladvisors.com.