Kshetry & Co.
Global Offices India UAE UK USA Thailand

Privacy Policy

How We Collect, Use, and Protect Your Data

1. Introduction

Kshetry & Co. and its affiliates ("Law Firm", "Firm", "we", "our", or "us") is committed to safeguarding the privacy of any person who accesses and uses the website ("You", "Your") (https://kshetryandco.com) ("Website") that is owned and operated by Kshetry & Co.

We are committed to protecting the privacy, confidentiality, integrity, and security of the personal data entrusted to us. As a law firm engaged in providing legal services, we recognize that safeguarding information is fundamental to our professional responsibilities and to the trust placed in us by our clients.

This Privacy Policy ("Privacy Policy") describes how we collect, receive, record, organize, store, use, process, disclose, transfer, retain, secure, and otherwise handle personal data obtained through our website (https://kshetryandco.com), our offices, correspondence, meetings, recruitment processes, seminars, webinars, newsletters, client engagements, business relationships, and any other interaction with the Firm.

By accessing and using the Website, you accept the terms of, and be bound by this privacy policy. This privacy policy may be updated from time to time at its sole discretion or on account of changes in law. Unless otherwise specified, such revisions shall take effect from the day and date they are posted on the Website. Kshetry & Co. shall be under no obligation to notify the User about the changes. You are advised to consult this privacy policy regularly for any changes, as your continued access and use of the Website shall be deemed to be your approval and acceptance of all changes to this privacy policy.

This privacy policy should be at all times read along with the terms and conditions of use of the Website. By accessing and using this Website, you accept and agree to be bound by and comply with (i) this Privacy Policy, (ii) the Disclaimer, and (iii) the Terms of Use.

If a User visits the Website, after choosing to do so, then any dispute regarding breach of privacy will be subject to this privacy policy and its terms and conditions of use. The applicable law for any such dispute shall be the laws of the Republic of India.

This Policy shall be construed to be provided in compliance with the Information Technology Act 2000 and the rules framed thereunder (as amended from time to time) ("IT Act"). The words and expressions used in this Policy but not defined herein will have the meaning assigned to them under the IT Act. It is published in compliance with inter alia:

  • • Section 43A of the Information Technology Act, 2000 ("IT Act");
  • • Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
  • • Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011.

2. General

2.1 This Privacy Policy applies to all current and former users accessing or using Our Platform, or otherwise engaging with us through email or other means (collectively, "You" or "Your").

2.2 The collection and processing of information in the course of our delivery of Services, or other contractual or commercial engagements that we may enter into, will be done in accordance with the specific terms applicable thereto, and not by this Privacy Policy.

2.3 By accessing or using Our Platform or by otherwise giving Us Your information, You confirm that You have the capacity to enter into a legally binding contract and have read, understood and agreed to the practices and policies outlined in this Privacy Policy.

2.4 You hereby consent to Our collection, use, sharing, and disclosure of Your information as described in this Privacy Policy.

2.5 We may modify, add or delete from, this Privacy Policy from time to time, and Your continued access to, or use of the Platform, will be deemed to be an acceptance of the said changes. If You do not agree with this Privacy Policy at any time, in part or as a whole, do not access/use the Platform or services provided through the Platform, or provide Us with any of Your Information.

2.6 If You are accessing or using the Platform from any location outside India, You do so at Your own risk, and will be solely liable for compliance with any local laws, as may be applicable.

3. Information We Collect

Kshetry & Co. collects and processes only such personal information as is necessary for the legitimate conduct of our legal practice, professional obligations, contractual relationships, regulatory compliance, and business operations. The nature and extent of the information collected depend on your relationship with the Firm, the services requested, and applicable legal or regulatory requirements.

For the purposes of this Privacy Policy, "Personal Information" means any information that relates to an identified or identifiable natural person and includes any information capable of identifying an individual, either directly or indirectly, whether collected electronically, physically, or through any other lawful means.

We may collect Personal Information directly from you, through your authorised representatives, from publicly available sources, from our clients where necessary for the provision of legal services, or from third parties authorised to share such information with us in accordance with applicable law.

The categories of information we may collect include, but are not limited to, the following:

3.1 Identity and Personal Information

This may include your name, photograph, date of birth, gender, nationality, languages spoken, signatures, government-issued identification details (such as PAN, Passport, Voter Identity Card, Driving Licence or any other legally acceptable identification document), professional qualifications, enrolment or registration details, and other information necessary to establish your identity or professional credentials.

3.2 Contact Information

We may collect your residential and business addresses, email addresses, telephone and mobile numbers, emergency contact details, correspondence addresses, and other communication details required to facilitate our professional engagement with you.

3.3 Professional and Employment Information

Where relevant, we may collect information relating to your employer, designation, organisation, practice area, educational qualifications, professional experience, curriculum vitae, employment history, contractual information, performance records, letters of application, references, and other documents submitted during recruitment, engagement, or employment with the Firm.

3.4 Financial Information

Where necessary for billing, payments, statutory compliance, or contractual obligations, we may collect financial information including bank account details, payment records, invoices, tax identification details, remuneration, retainership fees, stipends, reimbursement information, and other financial records required for lawful business purposes.

3.5 Client and Matter Information

In the course of providing legal services, we may receive or process information relating to legal matters, transactions, disputes, investigations, arbitration proceedings, regulatory filings, contracts, correspondence, due diligence materials, pleadings, evidence, witness statements, legal opinions, and other documents relevant to the engagement. Such information may include Personal Information belonging to clients, their representatives, counterparties, witnesses, or other individuals connected with a legal matter.

3.6 Technical and Digital Information

When you access our website or interact with our digital platforms, we may automatically collect technical information including your IP address, browser type, operating system, device identifiers, internet service provider, referring URLs, website usage patterns, page visits, session duration, clickstream data, timestamps, cookies, analytics data, and other technical information necessary for website administration, security, and performance.

3.7 System Access and Security Information

Where you are employed, retained, or otherwise authorised to access the Firm's systems, we may collect information relating to user credentials, access logs, device information, application usage, authentication records, network activity, and other security-related information for the protection of our systems, confidential information, and legal obligations.

3.8 Health and Accessibility Information

Where voluntarily provided or required by law, we may process limited information relating to physical or mental health, medical conditions, disabilities, dietary requirements, accessibility requirements, emergency contacts, biometric information, or medical records solely for lawful employment, workplace safety, accessibility, or legal compliance purposes.

3.9 Information Collected During Recruitment

Applicants seeking employment, internships, or professional engagement with the Firm may provide application forms, resumes, educational records, identity documents, references, interview assessments, writing samples, background verification information, and any other documents reasonably required to evaluate their candidature.

3.10 Information Obtained Through Professional Engagements

We may collect additional information that is reasonably necessary for client onboarding, conflict checks, know-your-client (KYC) procedures, anti-money laundering compliance, sanctions screening, vendor onboarding, regulatory compliance, litigation management, dispute resolution, arbitration, or any other lawful purpose connected with our professional services.

3.11 Aadhaar Information

Where permitted or required under applicable law, Kshetry & Co. may collect Aadhaar information solely for purposes authorised by law or where its collection is necessary to discharge a statutory or regulatory obligation. Unless mandated by applicable law, furnishing Aadhaar information is voluntary, and alternative government-issued identification documents, such as a PAN Card, Passport, or Driving Licence, may ordinarily be accepted for identification purposes. Wherever Aadhaar information is required by law, we will inform you of the legal basis and purpose for such collection.

3.12 Data Minimisation

Kshetry & Co. is committed to the principle of data minimisation. We collect, process, and retain only such Personal Information as is reasonably necessary to fulfil the purposes set out in this Privacy Policy, to comply with applicable legal and regulatory requirements, to provide our professional services, and to protect the legitimate interests of the Firm and its clients. We do not knowingly collect information that is excessive, irrelevant, or unrelated to these purposes.

4. Use of Information

4.1 We may collect, use, process, store, and otherwise handle your Information for one or more of the following purposes:

  • • Managing our professional relationship with you, including your engagement, employment, consultancy, internship, or any other association with the Firm.
  • • Communicating with you regarding legal services, enquiries, appointments, events, newsletters, legal updates, administrative matters, and emergency situations.
  • • Providing services to our clients.
  • • Conducting client onboarding, conflict checks, know-your-client (KYC) procedures, due diligence, billing, invoicing, and compliance with applicable legal and regulatory requirements.
  • • Operating, administering, and improving our business, internal processes, knowledge management systems, and professional services.
  • • Administering and securing our website, digital platforms, information technology systems, and network infrastructure, including monitoring authorised use and preventing fraud, cyber threats, or unauthorised access.
  • • Analysing website usage and other data to improve user experience, service quality, operational efficiency, and business performance.
  • • Publishing or communicating legal insights, thought leadership, publications, event information, and, where appropriate, highlights of the Firm's work without disclosing confidential or privileged information.
  • • Complying with applicable laws, judicial or regulatory requirements, professional obligations, and lawful requests from governmental or regulatory authorities.
  • • Establishing, exercising, or defending the legal rights, interests, or claims of the Firm, our clients, or other stakeholders.
  • • Maintaining the security of our offices, personnel, assets, confidential information, and business operations.
  • • Processing Personal Information for any other purpose that is reasonably connected with the provision of our services or the operation of the Firm and is permitted under applicable law.

Where we intend to process your Personal Information, including Aadhaar information where applicable, for a purpose that is materially different from those set out above, we shall obtain your consent or rely upon another lawful basis for processing, where required under applicable law.

5. Your Rights

Subject to applicable law, you may have the following rights in relation to your Information:

5.1 Right to Access, Correction and Erasure

You may request access to the Personal Information that Kshetry & Co. holds about you and request the correction, updating, or completion of any inaccurate or incomplete information. Where permitted under applicable law, you may also request the erasure of your Personal Information by contacting the Firm at the details provided below.

Please note that the exercise of these rights may be subject to applicable legal, regulatory, contractual, professional, or record-retention obligations. In certain circumstances, we may be unable to delete or modify specific information where its retention is necessary for the provision of legal services, compliance with applicable law, the establishment, exercise, or defence of legal claims, or the fulfilment of our professional obligations. Where deletion or withdrawal of information materially affects our ability to provide services or maintain our professional relationship with you, the Firm reserves the right to discontinue such services or engagement.

5.2 Security and Confidentiality

Kshetry & Co. maintains appropriate technical, organisational, and administrative safeguards to protect Personal Information against unauthorised access, disclosure, alteration, misuse, loss, or destruction. Our information security practices are designed in accordance with applicable laws and recognised industry standards and are proportionate to the nature, sensitivity, and volume of the Personal Information processed by the Firm. Access to Personal Information is restricted to authorised personnel and trusted service providers who require such access for legitimate business or legal purposes and are bound by appropriate confidentiality obligations.

5.3 Additional Rights

  • • Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
  • • Right to Object: Object to processing of your data for marketing or profiling purposes.
  • • Right to Restrict Processing: Request limitation on how we use your data.
  • • Right to Withdraw Consent: Withdraw consent for marketing communications at any time.

6. Disclosure and Transfer of Personal Information

Kshetry & Co. treats all Personal Information with the highest standards of confidentiality and will disclose or transfer such information only where necessary for the purposes set out in this Privacy Policy, where required by applicable law, or with your consent where such consent is required.

6.1 Disclosure Within the Firm

Access to your Personal Information is restricted to our partners, associates, employees, consultants, interns, and other authorised personnel who require such information for the provision of legal services, administration of the Firm, compliance with legal or professional obligations, or other legitimate business purposes. All such persons are subject to strict confidentiality obligations.

The Firm may also engage trusted third-party service providers, including providers of cloud hosting, document management, information technology, cybersecurity, accounting, communications, and other professional support services. Where such service providers process Personal Information on our behalf, we require them to implement appropriate technical and organisational safeguards and maintain confidentiality in accordance with applicable law.

6.2 Disclosure to Third Parties

We may disclose or transfer your Personal Information to clients, counsel, courts, tribunals, arbitrators, experts, regulators, governmental authorities, service providers, business partners, or other third parties where such disclosure is:

  • • necessary for the provision of legal or professional services;
  • • required for the performance or administration of a contractual or professional relationship;
  • • made with your consent, where required under applicable law;
  • • necessary to protect the legitimate rights, interests, or legal claims of the Firm or our clients; or
  • • otherwise permitted or required under applicable law.

In all such cases, we endeavour to disclose only the minimum Personal Information reasonably necessary for the relevant purpose and, where appropriate, require recipients to maintain adequate confidentiality and data protection standards.

6.3 Mandatory Disclosures

Kshetry & Co. may disclose Personal Information where such disclosure is required or permitted by applicable law, pursuant to a court order, judicial direction, regulatory requirement, governmental request, or other lawful process, or where necessary to establish, exercise, or defend legal rights, comply with professional obligations, investigate suspected unlawful activities, or cooperate with competent law enforcement or regulatory authorities.

7. Data Retention

Kshetry & Co. retains Personal Information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including the provision of legal and professional services, compliance with applicable laws and regulatory obligations, the establishment, exercise, or defence of legal claims, the enforcement of contractual rights, and the fulfilment of our professional responsibilities.

Where required under applicable law or professional obligations, certain categories of Personal Information may be retained for longer periods. Upon expiry of the applicable retention period, or where the information is no longer required for the purposes for which it was collected, such information may be securely deleted, anonymised, or otherwise disposed of in accordance with our internal retention policies and applicable legal requirements.

8. International Data Transfers

Kshetry & Co. operates in multiple jurisdictions (India, UAE, UK, USA, Thailand). Your personal data may be transferred to, stored in, or processed in any of these countries. Where required by law (such as GDPR), we ensure appropriate safeguards are in place, including Standard Contractual Clauses, adequacy decisions, or your explicit consent. By using our website or engaging with us, you consent to such transfers.

9. Attorney-Client Privilege

Information shared with our attorneys in the course of seeking legal advice is protected by attorney-client privilege. This means such communications are confidential and cannot be disclosed without your consent, except as required by law or professional conduct rules. This protection applies only to communications with Kshetry & Co. after a formal attorney-client relationship has been established.

10. Children's Privacy

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor has provided personal information, we will delete such data immediately. If you believe a child has submitted information to us, please contact privacy@kshetryandco.com.

11. Data Breach Notification

In the event of a data breach that compromises the security or privacy of personal data, we will notify affected individuals without unreasonable delay, and no later than the timeframes required by applicable law. Notifications will include details of the breach, the data affected, and recommended protective measures.

12. Third-Party Links & External Websites

Our Website may contain links to third-party websites, affiliate platforms, applications, or online resources that are provided solely for your convenience or informational purposes. Such third-party websites operate independently of Kshetry & Co. and are governed by their own terms of use and privacy policies.

Kshetry & Co. does not control, endorse, or assume responsibility for the privacy practices, security measures, content, or availability of any third-party website or service. We do not disclose your Personal Information to such third-party websites except where expressly stated, authorised by you, or required by applicable law.

If you choose to access or submit Personal Information to any third-party website or service, such information will be subject to the privacy policy and practices of that third party. We encourage you to carefully review the privacy policy and terms of use of every website you visit before providing any Personal Information.

To the fullest extent permitted by applicable law, Kshetry & Co. shall not be responsible or liable for any loss, damage, claim, liability, or expense arising from or in connection with your access to, use of, or reliance upon any third-party website, application, or service linked to or accessible through our Website.

13. Changes to this Privacy Policy

Kshetry & Co. reserves the right to amend, update, or modify this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, technology, business practices, or the services provided by the Firm.

Any revised version of this Privacy Policy shall be published on our website at https://kshetryandco.com and shall become effective from the date of publication unless otherwise stated. We may, where considered appropriate or required by applicable law, notify you of material changes through appropriate means; however, we are under no obligation to provide individual notice of every amendment.

We encourage you to review this Privacy Policy periodically to remain informed about how Kshetry & Co. collects, uses, processes, and protects your Personal Information. Your continued access to or use of our website or services following the publication of any revisions shall constitute your acknowledgement of the updated Privacy Policy, to the extent permitted by applicable law.

14. Grievance Officer and Contact Information

Kshetry & Co. is committed to addressing any questions, concerns, or complaints relating to this Privacy Policy or the processing of your Personal Information in a fair, timely, and transparent manner.

If you have any queries regarding this Privacy Policy, wish to exercise your rights under applicable data protection laws, report a suspected data security incident, or raise any grievance concerning the collection, use, disclosure, or processing of your Personal Information, you may contact our designated Grievance Officer at:

Grievance Officer: info@kshetryandco.com

We will endeavour to acknowledge and respond to your grievance or request within the timelines prescribed under applicable law.