Privacy Policy

1. Confidentiality of Client Information (Advocates Act Compliance)

Jax Law is committed to upholding strict professional confidentiality obligations under the Advocates Act, 1961 and the Bar Council of India Rules. All personal data, sensitive information, documents and communications shared with us for the purpose of seeking or receiving legal advice or representation (“Client Information”) are protected by attorney–client privilege and professional duties of secrecy.

Client Information:

  • is processed without requiring separate consent, as permitted under the DPDP Act for “legal purpose”;
  • is used solely for providing legal services, compliance, representation before authorities, and conflict management;
  • is never disclosed to third parties except where required by law, by client instruction, or to experts, consultants, or service providers engaged strictly for the matter and bound by confidentiality obligations.

Nothing in this policy limits Jax Law’s professional obligation of confidentiality.

2. Personal Data Collected Outside Legal Representation

Jax Law may collect certain personal data from individuals who interact with us outside of an attorney–client relationship, including:

  • individuals subscribing to newsletters or legal updates;
  • users submitting website forms or general enquiries;
  • participants in webinars, knowledge sessions or events;
  • job applicants;
  • visitors to our digital platforms.

This personal data (“Non-Client Personal Data”) may include: name, email address, phone number, organisation, designation, city, and any information voluntarily submitted through forms or communications.

This category of processing requires explicit consent, as per the DPDP Act.

3. Purpose of Processing Non-Client Personal Data

Non-Client Personal Data is processed solely for the following purposes:

  • Sending newsletters, legal updates, invitations and knowledge-based resources;
  • Responding to queries submitted through the website or email;
  • Managing registrations for webinars, events or workshops;
  • Recruitment, evaluation and communication with applicants;
  • Website improvement, analytics (using cookie consent where applicable), and cybersecurity.

Jax Law does not sell, rent, or otherwise share Non-Client Personal Data for marketing by third parties.

4. Legal Basis for Processing

Jax Law processes:

  • Client Information under legal purpose (no separate consent required);
  • Non-Client Personal Data based on explicit consent provided through website forms, event registrations, or subscription links.

Individuals may withdraw consent at any time.

5. Sharing of Personal Data with Authorised Third Parties

To enable delivery of newsletters, event updates or website functionality, Jax Law may share Non-Client Personal Data with Authorised Third Parties, including:

  • email delivery systems;
  • CRM providers;
  • cloud storage and IT security providers;
  • webinar and event hosting platforms.

Such Authorised Third Parties act strictly as Data Processors and are contractually required to:

  • process data only on Jax Law’s instructions;
  • implement reasonable security safeguards;
  • delete data upon withdrawal instructions or at the end of the retention period.

Client Information is never shared with third parties except under legal purpose or client instruction.

6. Security Measures

Jax Law employs reasonable technical and organisational measures, appropriate for a law firm, including:

  • encrypted storage,
  • access controls,
  • secure communication practices,
  • least-privilege access,
  • confidentiality undertakings with employees and consultants.

7. Retention of Personal Data

  • Client Information is retained only for as long as required for the matter, limitation periods, regulatory requirements, or legitimate professional record-keeping.
  • Non-Client Personal Data is retained only until the purpose is fulfilled or until the individual withdraws consent, whichever is earlier.
  • Upon withdrawal, Jax Law will delete the personal data within a reasonable period and will instruct Authorised Third Parties to do the same.

8. Rights of Individuals (Data Principals)

In respect of Non-Client Personal Data processed on the basis of consent, individuals have the following rights under the DPDP Act:

  • Right to withdraw consent;
  • Right to access information on processing;
  • Right to correction and updating of their personal data;
  • Right to erasure, subject to legal purpose;
  • Right to grievance redressal;
  • Right to nominate another individual for exercising rights.

For privileged Client Information, rights are subject to professional confidentiality obligations and legal purpose. To withdraw consent or exercise rights, please use the unsubscribe option or contact our Grievance Officer.

9. Grievance Officer

In compliance with the DPDP Act, Jax Law has appointed the following Grievance Officer:

  • Grievance Officer: Vijay Singh
  • Director, Operations
  • Jax Law
  • Email: vijay.singh@jaxlawco.com
  • Phone: 0522 339 1679
  • Response Time: Within a reasonable period prescribed under applicable Rules.

10. Cross-Border Data Transfers

Jax Law operates on modern digital infrastructure that may include global email, cloud, and communication platforms. As a result, certain personal data may be processed, stored, or backed up on servers located outside India. Such transfers arise only as an incidental part of using secure, industry-standard technology solutions, or when engaging reputable foreign local counsel for client matters requiring cross-border legal support.

All cross-border transfers are undertaken strictly in accordance with the DPDP Act. Data is transferred only to jurisdictions or entities that are not subject to Government restrictions, and always under contractual and technical safeguards that ensure confidentiality, purpose limitation, and security consistent with applicable Indian law and professional privilege obligations.

11. Updates to This Policy

This policy may be amended to reflect changes in law or practice. The updated version will be available on our website.