Privacy Policy

Effective date: 25 July 2026 | Last updated: 25 July 2026

This Privacy Policy explains how Aditya Narayan Shukla, Advocate (“we”, “us”, “the Chamber”, based at Jabalpur, Madhya Pradesh) collects, uses, discloses and protects personal data when you visit adityanarayanshukla.in (the “Website”) or contact us through it. We handle personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made thereunder, and other applicable Indian law.

1. Scope and our role

This Policy explains our approach to personal data in connection with the Website. The Website does not have any contact, enquiry, consultation or newsletter form, and we do not collect personal data that you submit through it. The only personal data addressed by this Policy is limited technical data collected automatically by our hosting provider (see Section 2). To the extent we determine the purpose and means of processing any such data, we act as a Data Fiduciary under the DPDP Act. This Policy does not govern personal data you provide after you formally engage us as your advocate; such information is separately protected by professional confidentiality and legal professional privilege.

2. Personal data we collect

The Website does not operate any contact form, enquiry form, consultation form or newsletter subscription, and we do not ask you to submit personal data through it. We collect only limited technical data necessary to operate and secure the Website:

  • Technical and usage data: your IP address, browser type, device information and pages viewed, collected automatically through server logs and, where enabled, analytics and cookies (see Section 9).

If you choose to contact us by e-mail, WhatsApp or telephone, please do not send confidential or sensitive details of your legal matter before we have formally accepted your engagement and completed a conflict check. Contacting us does not create an advocate–client relationship.

3. Purposes and lawful basis for processing

To the extent we process any personal data, we do so only for specified, lawful purposes, relying on the legitimate uses recognised by the DPDP Act and, where applicable, your consent under Section 6:

  • to respond to you if you choose to contact us by e-mail, WhatsApp or telephone.
  • to communicate with you about the matter on which you have approached us.
  • to operate, secure and improve the Website. and
  • to comply with legal and regulatory obligations, including those under the Advocates Act, 1961 and the Bar Council of India Rules.

We do not use your data for automated decision-making or profiling, and we do not sell your personal data.

4. Consent and its withdrawal

Where we rely on your consent, we obtain it through a clear affirmative action. You may withdraw your consent at any time by writing to us at the address in Section 12. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

5. Data retention

We retain any correspondence you send us only for as long as necessary to deal with the matter you have raised, and thereafter for a reasonable period for our record-keeping, conflict-checking and legal-compliance purposes, after which it is deleted or anonymised. Server-log and technical data is retained only for the limited period necessary for the security and operation of the Website. Where we are required by law to retain certain information for longer, we do so only for the period so required.

6. Disclosure and third-party services

We do not disclose your personal data except as follows:

  • Service providers / Data Processors: our website host and e-mail service provider, who process data on our instructions and under confidentiality obligations.
  • Third-party features on the Website: the Website uses Google Maps and may use Google Fonts, Gravatar and WhatsApp. When these load, your browser connects to those providers, who may process your IP address and device data under their own privacy policies.
  • Legal and regulatory disclosure: where required by law, court or regulatory authority, or to establish, exercise or defend legal claims.

7. Cross-border transfer

Some service providers may process data on servers located outside India. Where personal data is transferred outside India, we do so in accordance with Section 16 of the DPDP Act and any restrictions notified by the Central Government, and take reasonable steps to ensure comparable protection.

8. Security safeguards

We maintain reasonable security practices and procedures as contemplated by Section 8 of the DPDP Act and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, including HTTPS encryption of the Website, access controls and limiting collection to what is necessary. No system is completely secure; in the event of a personal-data breach we will act in accordance with our obligations under the DPDP Act and the DPDP Rules, 2025.

9. Cookies and analytics

The Website may use cookies and similar technologies that are strictly necessary for its operation and, where you consent, cookies for analytics and to enable third-party embeds (such as maps). You can control cookies through your browser settings and, where a consent banner is provided, through your choices there.

10. Your rights

Subject to the DPDP Act, you have the right to:

  • obtain confirmation of, and access to, a summary of the personal data we process about you (Section 11).
  • seek correction, completion, updating or erasure of your personal data (Section 12).
  • withdraw consent and to grievance redressal (Sections 6 and 13). and
  • nominate another individual to exercise your rights in the event of death or incapacity (Section 14).

To exercise any right, contact us using the details in Section 12. We will respond within the timelines prescribed under the DPDP Rules, 2025.

11. Children

The Website is not directed at children. We do not knowingly collect the personal data of a child (a person below eighteen years of age) without the verifiable consent of a parent or lawful guardian as required by Section 9 of the DPDP Act. If you believe a child has provided us data, please contact us and we will delete it.

12. Grievance redressal and contact

For any question about this Policy, to exercise your rights, or to raise a grievance about our handling of your personal data, please contact:

Grievance / Data Protection contact: Aditya Narayan Shukla, Advocate

E-mail: contact@adityanarayanshukla.in | Telephone: +91-91114-11109

Address: Jabalpur, Madhya Pradesh (by prior appointment only)

If your grievance is not satisfactorily resolved, you may approach the Data Protection Board of India in accordance with the DPDP Act.

13. Changes to this Policy

We may update this Policy from time to time. The current version, with its effective date, will always be available on this page. Material changes will be highlighted on the Website.