PRIVACY POLICY

Advocate Ravinder Singh Dhull (“we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of every individual who visits this website (ravindersinghdhull.net, hereinafter referred to as the “Website”). This Privacy Policy explains how we collect, use, store, protect, and disclose personal data and information when you access or use our Website.

This Privacy Policy is published in compliance with the Information Technology Act, 2000 (“IT Act”), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), to the extent notified and applicable.

By accessing and using this Website, you consent to the collection, use, and processing of your personal data in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use this Website.

1. Definitions

For the purposes of this Privacy Policy:

• “Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of the DPDP Act, 2023, and includes “personal information” as defined under the IT Act and SPDI Rules.
• “Sensitive Personal Data or Information” (SPDI) includes passwords, financial information, health data, biometric data, sexual orientation, and any information relating to the above as specified under Rule 3 of the SPDI Rules, 2011.
• “Data Fiduciary” means a person who, alone or in conjunction with other persons, determines the purpose and means of processing of personal data, as defined under Section 2(i) of the DPDP Act. For the purposes of this Website, Advocate Ravinder Singh Dhull is the Data Fiduciary.
• “Data Principal” means the individual to whom the personal data relates, as defined under Section 2(j) of the DPDP Act. For the purposes of this Website, the user/visitor is the Data Principal.
• “Processing” includes collection, recording, organization, structuring, storage, adaptation, retrieval, use, alignment, combination, indexing, sharing, disclosure, restriction, erasure, or destruction of data.

2. Data Fiduciary Information

The Data Fiduciary for this Website is:

Ravinder Singh Dhull

Advocate, Punjab & Haryana High Court, Chandigarh

Address: Panchkula, Haryana, India

Email: office.rsdhull@gmail.com

Website: ravindersinghdhull.net

3. Information We Collect

3.1 Information You Provide Voluntarily

When you interact with our Website, you may voluntarily provide personal data including but not limited to:

• Full name
• Phone number and/or WhatsApp number
• Email address
• Subject matter of your legal query
• Message content submitted through the contact form
• Any other information you choose to share

We collect this information when you fill out the contact form, send an email, or otherwise communicate with us through the Website. We do not collect Sensitive Personal Data or Information (SPDI) through this Website.

3.2 Information Collected Automatically

When you visit the Website, certain information may be collected automatically, including:

• Log Data: Your IP address, browser type, browser version, operating system, referring URL, pages visited, date and time of access, and time spent on pages.
• Device Information: Device type, screen resolution, language preferences, and unique device identifiers.
• Cookies and Similar Technologies: Small data files stored on your device to enhance user experience. See Section 8 (Cookie Policy) below for details.
• Analytics Data: If third-party analytics tools (such as Google Analytics) are used, anonymized usage data may be collected for understanding website traffic and improving user experience.

3.3 Information We Do NOT Collect

This Website does not collect:

• Financial information (bank accounts, credit/debit card numbers)
• Aadhaar number or other government-issued identity numbers
• Passwords of any other service or platform
• Biometric data
• Data related to health, sexual orientation, or religious beliefs
• Information from children under the age of 18 (knowingly)

4. Purpose of Data Collection and Processing

We collect and process personal data solely for the following purposes:

We do not use your personal data for marketing, advertising, profiling, automated decision-making, or any purpose other than those stated above. Your data shall not be sold, traded, or transferred to any third party for commercial purposes.

5. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data based on the following lawful grounds:

1. Consent (Section 6, DPDP Act): When you submit information through the contact form, you provide your informed and explicit consent for us to process that data for the stated purpose.
2. Legitimate Use (Section 7, DPDP Act): Where processing is necessary for compliance with legal obligations or for responding to a lawful request.
3. Contractual Necessity: Where processing is necessary for the performance of a contract or for taking steps at the request of the Data Principal prior to entering into a formal engagement.

6. Data Sharing and Disclosure

We do not sell, rent, lease, or trade your personal data to any third party. Your personal data may be shared only in the following limited circumstances:

• With Your Consent: When you have expressly authorized us to share your data with a specific party.
• Legal Obligations: When required by law, court order, subpoena, or government authority to disclose information.
• Service Providers: With trusted third-party service providers who assist in website hosting, maintenance, or analytics, subject to confidentiality obligations and only to the extent necessary for their services. Such providers include web hosting services and email service providers.
• Professional Privilege: Any information shared in the course of a formal advocate-client relationship shall be protected by advocate-client privilege and shall not be disclosed except as required by law or with the client’s consent.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required under applicable law:

• Contact form data: Retained for a period of 1 (one) year from the date of submission, unless a formal engagement is entered into, in which case the data shall be retained as per professional obligations.
• Automatically collected data: Server logs and analytics data are retained for up to 12 months.
• Advocate-client records: Where a formal advocate-client relationship is established, records shall be retained for such period as may be required under applicable law and professional standards.

Upon expiration of the retention period, or upon request for erasure by the Data Principal, personal data shall be securely deleted or anonymized.

8. Cookie Policy

Cookies are small text files stored on your device when you visit a website. This Website may use the following types of cookies:

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect the functionality of certain features of the Website. For more information about cookies, visit www.allaboutcookies.org.

9. Data Security

We implement reasonable security practices and procedures in accordance with Rule 8 of the SPDI Rules, 2011 and Section 8 of the DPDP Act, 2023 to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Sockets Layer (SSL/TLS) encryption for data transmitted between your browser and our server
• Restricted access to personal data on a need-to-know basis
• Regular security assessments and updates to the Website
• Use of secure and reputable hosting service providers
• Password-protected access to administrative areas of the Website

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach, we shall take reasonable steps to notify the affected Data Principal and the relevant authority as required under Section 8(6) of the DPDP Act, 2023.

10. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights:

To exercise any of these rights, please contact us at: advocate@ravindersinghdhull.net. We shall respond to your request within 30 (thirty) days of receipt.

11. Children’s Privacy

This Website is not intended for use by individuals below the age of 18 years. We do not knowingly collect personal data from children. In accordance with Section 9 of the DPDP Act, 2023, any processing of personal data of a child (below 18 years) requires verifiable consent of the parent or lawful guardian.

If we become aware that personal data of a child has been collected without appropriate consent, we shall take immediate steps to delete such data. If you believe that we have inadvertently collected data from a child, please contact us immediately.

12. Third-Party Links and Services

This Website may contain links to external websites, including but not limited to government portals (e.g., indiankanoon.org, sci.gov.in, highcourtchd.gov.in), legal databases, YouTube channels, and social media platforms. These third-party websites have their own privacy policies and data collection practices over which we have no control.

We are not responsible for the privacy practices of these third-party websites. We encourage you to review the privacy policy of every website you visit through links on our Website.

13. Cross-Border Data Transfer

Your personal data is primarily stored and processed within the territory of India. We do not intentionally transfer personal data outside India. However, in the course of using third-party service providers (such as web hosting or email services), some data may be processed in servers located outside India. In such cases, we ensure that appropriate safeguards are in place in accordance with Section 16 of the DPDP Act, 2023 and applicable regulations.

14. Grievance Redressal

In accordance with Section 13 of the DPDP Act, 2023 and Rule 5(9) of the SPDI Rules, 2011, we have designated the following Grievance Officer:

Grievance Officer: Ravinder Singh Dhull

Address: Panchkula, Haryana, India

Email: advocate@ravindersinghdhull.net

If you have any grievance regarding the processing of your personal data, you may contact the Grievance Officer. We shall acknowledge your grievance within 48 hours and resolve it within 30 days from the date of receipt.

If you are not satisfied with the resolution, you may approach the Data Protection Board of India established under the DPDP Act, 2023, for further redressal.

15. Applicable Laws and Regulatory Framework

This Privacy Policy is governed by and shall be construed in accordance with the following laws of India:

• The Information Technology Act, 2000 (as amended) — Sections 43A, 72A
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act, 2023 (to the extent notified and in force)
• The Advocates Act, 1961 — Standards of Professional Conduct (regarding confidentiality of client information)
• Bar Council of India Rules — Chapter II, Part VI (Professional Conduct and Etiquette)
• The Indian Contract Act, 1872 — provisions relating to consent and lawful consideration

16. Advocate-Client Confidentiality

This Privacy Policy operates in addition to, and not in derogation of, the advocate-client privilege recognized under Indian law. Any information shared by a client in the course of a formal advocate-client relationship (established through a signed Vakalatnama) shall be treated as strictly confidential and shall be protected by the principles of professional privilege.

The advocate shall not disclose any communication, information, or document shared by the client, except where disclosure is required by law, ordered by a competent court, or expressly consented to by the client.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically. Your continued use of the Website after any changes constitutes your acceptance of the revised Privacy Policy.

Material changes that significantly affect the processing of your personal data shall be communicated through a prominent notice on the Website.

18. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts at Chandigarh, India.

19. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Ravinder Singh Dhull

Advocate, Punjab & Haryana High Court, Chandigarh

Address: Panchkula, Haryana, India

Email: office.rsdhull@gmail.com

Website: ravindersinghdhull.net