Y&A Legal

Privacy Policy

Key Points at a Glance

We collect only your Name, Phone Number, Email Address, and Message — voluntarily submitted through our contact form.
We use your data solely to respond to your enquiry and assess potential professional engagement.
We do not sell, trade, or share your personal data with third parties for commercial purposes.
You have the right to access, correct, and delete your data, and to withdraw consent at any time.
Grievances are addressed within 30 days; unresolved complaints may be escalated to the Data Protection Board of India.

This is a brief overview. Please read the full policy below for complete details.

Y&A Legal (“Y&A Legal”, “we”, “our” or “us”) is a boutique law firm based in New Delhi, India. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and are committed to protecting the digital personal data of individuals who interact with us through our website, yalegal.in, in a lawful, fair, and transparent manner.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to your data. We encourage you to read this document carefully.

1. Definitions

Personal Data means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.

Data Fiduciary means any person who alone or in conjunction with other persons determines the purpose and means of processing of personal data. For the purposes of this Privacy Policy, Y&A Legal is the Data Fiduciary.

Data Principal means the individual to whom the personal data relates and, where such individual is a child, includes the parents or lawful guardian of such child, and where such individual is a person with disability, includes their lawful guardian acting on their behalf.

Data Processor means any person who processes personal data on behalf of a Data Fiduciary.

Consent means free, specific, informed, unconditional, and unambiguous indication of the Data Principal’s wishes, by which they agree to the processing of their personal data for a specified purpose.

2. Identity of the Data Fiduciary

Name: Y&A Legal Website: yalegal.in Contact Email: contact@yalegal.in

3. What Personal Data We Collect

Our website is informational in nature. We do not operate user accounts, login portals, or e-commerce functionality. The personal data we collect is limited to what you voluntarily provide through our contact form, which contains the following fields:

Name
Phone Number
Email Address
Message

We do not collect sensitive personal data, financial information, or biometric data through this website.

3.1 Data Collected via Plugins

Our website uses the following third-party plugins that may process limited, anonymised data:

RankMath SEO (WordPress Plugin): This plugin may collect anonymised and aggregated site performance and crawl data for the purpose of search engine optimisation. It does not collect or process personally identifiable information.

WhatsApp Quick Chat by HoliThemes: This plugin provides a shortcut button that redirects users to WhatsApp, a platform operated by Meta Platforms, Inc. We do not collect or store any personal data through this plugin. Any click or referral data available to us is in anonymised form only. Once you are redirected to WhatsApp, your interaction is governed by Meta’s privacy policy, and we have no control over the data Meta may collect.

4. How We Collect Personal Data

We collect personal data only when you voluntarily submit it through our website’s contact form. There is no automatic collection of personally identifiable information. We do not use advertising cookies, tracking pixels, or behavioural profiling tools on our website. Our website uses HTTPS encryption to ensure that data transmitted between your browser and our server remains secure.

5. Purpose of Data Collection

We collect and process your personal data strictly for the following purposes:

(a) Responding to your enquiries submitted through the contact form.

(b) Assessing the nature of your query to determine whether a potential professional engagement may be appropriate.

(d) Complying with our professional obligations under the Bar Council of India Rules and other applicable legal and regulatory requirements.

(e) Maintaining records as required for legitimate professional and legal purposes.

We do not use your personal data for marketing, advertising, profiling, or any purpose beyond those stated above.

6. Lawful Basis for Processing

We process your personal data on the basis of your consent, which is obtained at the point of form submission. By submitting the contact form on our website, you consent to the collection and processing of the information you provide for the purposes described in this Privacy Policy. You may withdraw your consent at any time by contacting us at [Insert Contact Email].

7. Data Retention

We retain your personal data for the duration of any professional engagement that may arise from your enquiry, plus a reasonable record-keeping period thereafter as required for compliance with professional, legal, and regulatory obligations.

Where no professional engagement arises, we retain your data only for as long as is reasonably necessary to respond to your enquiry and for internal record-keeping purposes.

You may request deletion of your personal data at any time, subject to any overriding legal or professional obligation that requires us to retain it. Upon such a request, we will erase your data within a reasonable period and confirm the same to you.

8. Data Storage and Security

All data collected through our website is hosted on servers located in India. We do not transfer your personal data outside India.

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include the use of HTTPS encryption and secure server infrastructure.

9. Sharing of Personal Data

We do not sell, trade, rent, or otherwise share your personal data with third parties for their commercial purposes.

We may share your personal data only in the following limited circumstances:

(a) Where required by law, regulation, court order, or legal process.

(b) With professional advisors or service providers who assist us in operating our website or conducting our practice, provided they are bound by appropriate confidentiality and data protection obligations.

(c) Where necessary to comply with our obligations under the Bar Council of India Rules or other applicable professional regulations.

10. Third-Party Platforms

Our website contains a WhatsApp chat button that redirects you to the WhatsApp platform operated by Meta Platforms, Inc. Once you leave our website and interact with WhatsApp, your data is subject to Meta’s privacy policy. We encourage you to review Meta’s privacy policy before using this feature.

We are not responsible for the data practices of any third-party platform to which you may be redirected from our website.

11. Children’s Data

Our website is not directed at individuals under the age of 18 years. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without verifiable parental consent, we will take steps to delete such data promptly.

12. Rights of Data Principals

Under the DPDP Act, you have the following rights as a Data Principal:

Right to Access: You have the right to obtain a summary of your personal data being processed by us, along with information about the processing activities undertaken.

Right to Correction and Erasure: You may request correction of inaccurate or misleading personal data, completion of incomplete data, and erasure of personal data that is no longer necessary for the purpose for which it was collected.

Right to Grievance Redressal: You have the right to raise a grievance regarding the processing of your personal data through our grievance redressal mechanism described below.

Right to Nominate: You have the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.

Right to Withdraw Consent: You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal. Upon withdrawal, we will cease processing your personal data, unless retention is required under any applicable law or professional obligation.

To exercise any of these rights, please contact us at contact@yalegal.in

13. Grievance Redressal

If you have any concern, complaint, or request regarding the processing of your personal data, including requests for access, correction, erasure, or withdrawal of consent, you may raise a grievance with us.

Grievance Officer: Yuvraj Rana Email: yuvraj@yalegal.in

Upon receipt of your grievance, we will acknowledge it and endeavour to respond and resolve the matter within thirty (30) days.

If you remain unsatisfied with our response or resolution, you have the right to file a complaint with the Data Protection Board of India, in accordance with the provisions of the DPDP Act.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically. Your continued use of our website following any changes constitutes your acceptance of the revised Privacy Policy.

15. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: contact@yalegal.in Website: yalegal.in