Privacy Policy.

We may collect your Information when you access our Website, communicate with us through email or other channels, engage us for legal services, apply for employment, retainership, or internship opportunities, or otherwise interact with us.

The Information we collect may include, without limitation:

• name, contact details, address, date of birth, nationality, identification details and other information provided for identification, know-your-client, conflict-check or onboarding purposes;
• professional and employment-related information, including your organisation, designation, qualifications and professional experience;
• copies or details of identification documents, including PAN, passport, driving licence or other identification documents, where required;
• financial information, including bank account details, where required for billing, payment, reimbursement or other legitimate purposes;
• information contained in communications, correspondence, documents and materials shared with us in connection with any legal advice, transaction, dispute, engagement or prospective engagement;
• information provided in connection with applications for employment, retainerships or internships, including resumes / CVs, educational qualifications, employment history and references;
• information collected while using the Website, including information that may be collected automatically, such as IP address, browser type, device information, operating system, pages viewed, date and time of access and Website navigation information; and
• any other Information collected in connection with our contractual or professional relationships with clients, service providers or other persons, or otherwise provided to us voluntarily.

Where you provide us with Information relating to another individual, you should ensure that you are authorised or otherwise permitted to provide such Information to us.

We endeavour to limit the Information collected by us to what is reasonably necessary for the purposes set out below.

We will only process your personal data in connection with our ordinary professional activities, including the fulfillment of our legal or regulatory obligations. We will do so on the basis of your consent, performance of a contract, compliance with a legal obligation, or legitimate interest. We may use your Information for any of the following purposes:

• managing our interactions and professional relationship with you;
• undertaking conflict checks, client onboarding and other internal checks;
• providing legal and professional services to our clients;
• communicating with clients, prospective clients, counterparties, counsel, advisers, service providers and other relevant persons;
• operating and managing our legal practice and business operations;
• processing invoices, payments, reimbursements and maintaining accounting and financial records;
• considering and processing applications for employment, retainerships, internships or other professional opportunities;
• managing our personnel and their access to our systems, premises and resources;
• operating, maintaining, securing and improving our Website and information technology systems;
• providing legal updates, publications, invitations, and other communications, where applicable;
• maintaining client, matter, conflict-check, professional, and administrative records;
• complying with applicable legal, regulatory, tax, accounting, and professional requirements;
• establishing, exercising, or defending legal rights or claims;
• complying with court orders, regulatory requirements, or requests from competent governmental or regulatory authorities; and
• conducting internal analysis for improving the quality and efficiency of our services and operations.

Where we are required under applicable law to process your Information for a purpose not covered by this Privacy Policy and such processing requires your consent, we will seek the necessary consent.

Right of Access, Correction and Deletion

Subject to applicable law, you may request access to Information provided by you and seek the correction, completion or updating of Information that is inaccurate or incomplete.

You may also request deletion of Information provided by you, subject to our right or obligation to retain such Information under applicable law, professional requirements, contractual obligations or where retention is otherwise necessary for the establishment, exercise or defence of legal claims.

Where processing is based on your consent, you may withdraw such consent in accordance with applicable law. Withdrawal of consent may affect our ability to provide services to you or continue the relevant relationship where the Information concerned is necessary for such purpose.

If you wish to exercise these rights, you may, at any time, contact us using the contact details below.

We adopt reasonable security practices and procedures appropriate to the nature of the Information processed by us to protect such Information against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Information received or generated by us in connection with the provision of legal services is also subject to applicable duties of professional confidentiality and legal privilege.

However, no system of electronic transmission or storage can be guaranteed to be completely secure.

Information collected by us may be disclosed or transferred only where reasonably necessary for the purposes set out in this Privacy Policy or as otherwise permitted or required under applicable law.

Disclosures within CALAA Legal

Access to your Information within CALAA Legal will be limited, as far as reasonably practicable, to our partners, lawyers, consultants, retainers, employees, interns, and other personnel who require access to such Information for the purposes described in this Privacy Policy.

Disclosures or Transfers to Third Parties

We may disclose or transfer Information to third parties where necessary for the provision of legal services, operation of our practice or performance of our contractual or professional obligations. Such persons may include:

• advocates, counsel and other legal professionals;
• clients, counterparties and their advisers;
• consultants, experts and other professional advisers;
• courts, tribunals, arbitral tribunals, regulatory bodies, government institutions, and other adjudicatory bodies;
• technology, cloud storage, email, document-management, accounting and other service providers; and
• other persons involved in a legal matter, transaction or engagement.

Our practice is to limit the Information disclosed to third parties to what is reasonably necessary for the relevant purpose. Where appropriate, we seek to ensure that third-party service providers processing Information on our behalf are subject to suitable confidentiality and data protection obligations.

Information may be processed or stored outside India where we or our service providers use systems or infrastructure located in other jurisdictions. Any such transfer will be undertaken in accordance with applicable law.

We may disclose Information where required to do so under applicable law or where necessary to comply with an order of a court, tribunal or other competent authority, a lawful governmental or regulatory request, or otherwise to comply with applicable legal or professional obligations.

We may also disclose Information where reasonably necessary to establish, exercise or defend our legal rights or claims.

We will not store the personal data of users any longer than is necessary to achieve the purposes stated in this Privacy Policy, or to comply with laws or regulations.

This may include retention for purposes such as maintaining client and matter records, conducting conflict checks, complying with legal, tax, accounting or professional requirements, resolving disputes and establishing, exercising or defending legal claims.

Where applicable law requires deletion of Information upon withdrawal of consent or once the purpose for which it was collected is no longer being served, we will take appropriate steps to delete such Information, subject to any lawful basis or requirement for its continued retention.

We may revise this Privacy Policy from time to time to reflect changes in applicable law, our operations, technology, security practices or the manner in which we process Information.

Any revisions to this Privacy Policy will be published on our Website at www.calaalegal.com.

We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect your Information.

You may contact our Grievance Officer / Data Protection Contact if you have any concerns, questions or grievances regarding this Privacy Policy or the processing of your Information.

Name: Drsika Bhutani

Designation: Data Protection Contact

Email: [email protected]

We will address grievances within the period prescribed under applicable law.