Data Protection
Notice of personal data processing under the Digital Personal Data Protection Act, 2023.
This notice is given under the Digital Personal Data Protection Act, 2023 (DPDP Act). SCT Legal Associates, Prayagraj, acts as the Data Fiduciary in respect of personal data you provide through this website or in the course of an engagement.
Name, mobile number, email address, the description of your matter and any documents you choose to send. Where a chamber account is issued to you, we also process sign-in records and activity logs required to keep the account secure.
Data is processed for the specific, lawful purpose of responding to your enquiry, arranging a consultation, conducting an engagement you have instructed, and complying with professional and statutory obligations. Data is not used for any purpose beyond the one for which it was given.
Where processing is based on consent, that consent is taken at the point of collection through an explicit checkbox, and it may be withdrawn at any time by writing to the contact below. Withdrawal does not affect processing already carried out, nor does it affect records that must be retained under professional or statutory rules.
You may request access to a summary of your personal data and its processing, correction or completion of inaccurate data, erasure of data no longer required, and nomination of another person to exercise your rights in the event of death or incapacity. Requests are answered within a reasonable period.
Any grievance about the handling of your personal data may be addressed to the Grievance Officer at the chamber address below. If the grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India.
Enquiry records are retained only as long as necessary for the purpose for which they were collected, and thereafter for the period required by professional and statutory obligations, after which they are deleted or anonymised.
Personal data is held on access-controlled systems. Case and client documents are kept in private storage that is never publicly reachable and is opened only through short-lived, individually authorised links. Access is restricted by role and is logged.
Hosting, database, storage and — where used — AI-assisted drafting services are provided by third-party processors under contract. They process data only on instruction and are not permitted to use it for their own purposes.