Privacy Policy
Last updated: 15 May 2026
JaipurLawyers.com ("we", "us") is committed to protecting your privacy and complying with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.
1. Data Fiduciary
JaipurLawyers.com acts as the Data Fiduciary for personal data collected through the Platform. Our Grievance Officer details are available on the Grievance Redressal page.
2. What We Collect
From Visitors / Clients
- Name, phone, email when submitting an inquiry
- IP address, browser type, pages visited (analytics)
- Cookie preferences
From Advocates
- Name, email, phone, password (hashed)
- Bar Council enrollment ID, qualifications
- Office address, contact details, photos, video, audio
- KYC documents (Bar Council certificate, ID proof)
- Profile activity and analytics
3. How We Use Your Data
- To operate, maintain, and improve the Platform
- To verify advocate credentials
- To facilitate inquiries and connections
- To send transactional emails (verification, password reset, inquiry receipts)
- To detect fraud and abuse
- To comply with legal obligations
4. Legal Basis for Processing
We process personal data based on your consent (for marketing, optional features), contract (account setup, paid listings), legitimate interest (security, fraud prevention), and legal compliance.
5. Data Sharing
We do not sell personal data. We share data only in these specific cases:
- With the advocate you contact — your inquiry details are shared with the advocate so they can respond
- With service providers (hosting, email, payments) under data processing agreements
- With authorities when legally required
6. Data Localisation & Storage
All personal data is stored on servers located within India. Database backups are encrypted with AES-256.
7. Security Measures
- HTTPS / TLS 1.2+ for all data in transit
- Passwords hashed with bcrypt
- Session cookies with HttpOnly and SameSite=Lax flags
- Rate limiting on authentication endpoints
- UFW firewall + fail2ban on infrastructure
- Encrypted daily backups
- Access controls, audit logging for admin actions
8. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to legal retention requirements)
- Withdraw consent at any time (where consent is the legal basis)
- Grievance redressal through our Grievance Officer (see Grievance page)
- Nominate a person to exercise rights on your behalf
To exercise these rights, email privacy@jaipurlawyers.com with the subject "DPDP Rights Request". We respond within 30 days.
9. Cookies
We use essential cookies (session) and optional analytics cookies. You can manage your preferences via the cookie consent banner. See our Cookie section below for detail.
10. Retention
Account data is retained while your account is active. Upon deletion request, personal data is removed within 60 days, except where retention is required by law (e.g., financial records for tax / audit).
11. Children
The Platform is not intended for users under 18. We do not knowingly collect data from minors.
12. Breach Notification
In the event of a data breach affecting your personal data, we will notify affected users and the Data Protection Board of India within 72 hours as required by law.
13. Changes to This Policy
Material changes will be notified via email or banner. The "Last Updated" date above reflects the latest version.
14. Cookies Detail
- Essential:
ja_session(authentication, 30 days), CSRF protection cookies - Functional: Theme preference, language preference (where applicable)
- Analytics: Only if you opt in via the cookie banner
15. Contact
For privacy questions: privacy@jaipurlawyers.com