Scope of this policy
This policy applies to novalex.example and to personal information NovaLex collects through this website, by email, or during an enquiry. It does not extend to information you give us after we are formally engaged on a matter, which is governed by your engagement letter and by professional obligations of confidentiality.
We process personal information in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it.
Information we collect
We collect only what is needed to respond to you and to run a conflict check.
- Identity and contact details you provide, such as name, email address, and telephone number
- The city or jurisdiction relevant to your enquiry
- A description of the matter you choose to share with us
- Technical information generated by your visit, including IP address, browser type, and pages viewed
Please do not send confidential documents through the enquiry form. Wait until we have confirmed that no conflict exists and that we are able to act.
Why we hold it
- To reply to your enquiry and arrange a consultation
- To carry out the conflict check required before we can advise you
- To meet record keeping obligations that apply to advocates
- To keep this website secure and functioning
We do not sell personal information, and we do not use it to send marketing. Bar Council of India norms prohibit advocates from soliciting work, so you will not receive promotional messages from us.
Who we share it with
Information is shared only where it is necessary and only with parties bound to protect it. That may include counsel briefed on your matter, our hosting and email providers, and our accountants and auditors. Disclosure is otherwise made only where a court, regulator, or statute requires it.
How long we keep it
Enquiries that do not result in an engagement are deleted within twenty four months. Where we are engaged, the file is retained for the period required by professional and statutory obligations, generally not less than seven years from closure, after which it is securely destroyed.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to do the following.
- Confirm what personal information about you we hold and how it is being used
- Correct information that is inaccurate, misleading, or incomplete
- Erase information we no longer need for the purpose it was collected
- Nominate another person to exercise these rights if you are unable to
- Raise a grievance with us, and escalate it to the Data Protection Board of India
Write to consult@novalex.example to make a request. We respond within thirty days. Some information may need to be retained where an overriding legal or professional obligation applies, and we will tell you if that is the case.
Security
This site is served over TLS. Access to enquiry data is limited to advocates and staff who need it, and devices used by the firm are encrypted and password protected. No transmission over the internet is completely secure, and we cannot guarantee the security of information sent to us before an engagement is in place.
Contact
Questions about this policy, or a request to exercise a right, should be addressed to the Grievance Officer at consult@novalex.example, or by post to NovaLex, Level 4, Kaveri Chambers, 12 Rosewood Avenue, Bengaluru 560025, Karnataka.