Privacy Policy

Effective date: 24 May 2026  ·  Last revised: 24 May 2026

Vrutant Legal ("we", "chambers", "us") operates the website at vrutantlegal.com. This policy explains what personal data we collect when you use this website, how we use it, and the rights you hold under the Digital Personal Data Protection Act, 2023 ("DPDPA").

1. Data we collect

We collect personal data only when you submit the enquiry form:

• Name — as provided by you
• Contact detail — email address or phone number (your choice)
• Matter description — the information you voluntarily provide about your legal matter
• IP address — captured for rate-limiting and anti-fraud purposes; not stored beyond the request

We also use Plausible Analytics (privacy-preserving, cookie-free) to understand aggregate site traffic. No personal identifiers are sent to Plausible.

2. How we use your data

• To respond to your legal enquiry
• To log the enquiry in a chambers spreadsheet for conflict-checking and file management
• To send an internal notification to the instructing advocate

We do not use your data for marketing, profiling, or any purpose beyond responding to your enquiry.

3. Legal basis (DPDPA §4)

Processing is necessary to respond to a legal enquiry at your request — i.e., to take steps prior to entering into a professional engagement. Where you voluntarily include sensitive information in the matter description, your submission constitutes implied consent for chambers to use that information solely to advise on your matter.

4. Data sharing

We share your data with the following data processors who act solely on our instructions:

• Resend, Inc. — email delivery (United States; standard contractual clauses apply)
• Meta Platforms, Inc. — WhatsApp Business notification to counsel (DPF-certified)
• Google LLC — enquiry logging in Google Sheets (India region selected)
• Microsoft Azure — website hosting (India region)
• Cloudflare, Inc. — CAPTCHA verification (United States)

We do not sell your data to third parties.

5. Retention

Enquiry data is retained for a maximum of three years from receipt, or for the duration of any resulting engagement plus one year, whichever is longer. Data is then permanently deleted.

6. Your rights under the DPDPA

• Obtain a summary of data processed (§11)
• Correction or erasure of inaccurate or outdated data (§12)
• Grievance redressal (§13)
• Nominate another person to exercise rights on your behalf (§14)

To exercise any right, write to counsel@vrutantlegal.com. We will respond within 72 hours on business days.

7. Cookies

This website sets no cookies. The draft-autosave feature uses your browser's localStorage, stored only on your device and never transmitted to our servers.

8. Data Fiduciary contact

Vrutant Legal · Mumbai, Maharashtra, India
counsel@vrutantlegal.com

9. Changes to this policy

We may update this policy from time to time. The effective date above will change when we do. Continued use of the website after a revision constitutes acceptance of the revised policy.