Privacy Policy & Data Protection Statement

Avnish S & Associates ("The Firm") operates on a foundation of absolute discretion and trust. We are committed to protecting the privacy and confidentiality of the information provided by our enterprise clients and visitors. This Privacy Policy is published in strict compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act);
• Section 43A of the Information Technology Act, 2000; and
• Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011 (the "SPDI Rules").

1. Definition & Scope of Information

1.1 Personal Data

Data about an individual who is identifiable by or in relation to such data (e.g., Name, Official Email Address, Corporate Contact Numbers) collected during general inquiries or consultations.

1.2 Sensitive Personal Data or Information (SPDI)

Includes high-stakes corporate financial records, banking details, board resolutions, and strategic intellectual property. The Firm mandates that such SPDI is exclusively transmitted through our encrypted, proprietary platforms like LawOrbit and LexLedger, ensuring a zero-trust security environment.

2. Collection and Purpose of Processing

The Firm acts as a Data Fiduciary. We collect and process your digital personal data only for lawful purposes, explicitly including:

• Professional Engagement: Conflict-of-interest checks and onboarding protocols.
• Regulatory Execution: To execute mandatory filings with the Ministry of Corporate Affairs (MCA), Reserve Bank of India (RBI), National Company Law Tribunal (NCLT), and Tax Authorities on behalf of the Client.
• Platform Access: To provision access credentials for LawOrbit (Compliance Dashboard) and LexLedger (Financial/Billing Software).

3. Attorney-Client Privilege & Strategic Alliances

Information shared with Avnish S & Associates during a formal mandate is legally shielded under the doctrine of Attorney-Client Privilege (Indian Evidence Act, 1872). However, by engaging the Firm, the client consents that data may be securely shared with our strategic alliance partner, LAW WHEELS SERVICES LLP, solely when cross-functional legal expertise (e.g., Real Estate Due Diligence or specific Litigation) is required for the successful execution of the mandate.

4. Lawful Disclosures

The Firm may be compelled to disclose data without prior consent strictly under the following conditions:

• Statutory Mandates: When explicitly ordered by a court of competent jurisdiction, the Enforcement Directorate (ED), or statutory tribunals (NCLT/NCLAT).
• Operational Necessity: To authorized third-party auditors or valuers bound by strict Non-Disclosure Agreements (NDAs) to facilitate specific corporate restructuring or FEMA valuations.

5. Enterprise-Grade Security Architecture

We deploy robust, industry-standard security protocols. Our digital ecosystem, particularly LawOrbit and LexLedger, utilizes end-to-end encryption, multi-factor authentication (MFA), and secure cloud infrastructure to prevent unauthorized access, data breaches, or cyber-espionage.

6. Data Retention & Erasure

In accordance with the DPDP Act, personal and corporate data will be retained only as long as necessary to fulfill the operational purpose or to comply with statutory record-keeping mandates (e.g., an 8-year retention requirement under the Companies Act, 2013). Upon expiration of the mandate or statutory period, data is securely purged.

7. Consent Manager & Grievance Redressal

Clients possess the right to access, correct, or erase their personal data (subject to legal retention requirements). For any grievances, data requests, or withdrawal of consent, please contact our designated Data Protection Officer: