Privacy Policy

Privacy Policy

Last updated: 17 May 2026 · Data Fiduciary: Law Tarazoo Technologies LLP (LLPIN AAH-4330), 14, 3rd Asha Nagar, 1A, Borivli (East), Mumbai – 400066, Maharashtra.

DPDP · 2023

1. Our Commitment

Law Tarazoo handles your personal data with the care expected of a legal practice. This Privacy Policy describes what personal data we collect, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have. Our practices are aligned with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and with the obligations of confidentiality and privilege applicable to advocates.

2. Categories of Personal Data We Collect

We collect personal data that you voluntarily provide, in three categories:

(a) Identification and contact data: name, age, gender, contact phone number, email address, postal address, government-issued identifiers (where required for engagement onboarding, such as PAN or Aadhaar — collected and used only to the extent strictly necessary).

(b) Engagement data: information you share during consultations and supporting documents you upload — including details of your assets, family structure, prior legal instruments, business interests, and succession intentions. This category is treated as strictly privileged.

(c) Technical data: IP address, browser type and version, device type, pages visited, and approximate location, collected automatically when you visit the Website (see Section 7 on cookies).

3. Purposes for Which We Process Your Data

We process your data only for the following purposes:

  1. to deliver the Services you have engaged us for, including consultations, drafting, revisions, and (where applicable) registration assistance;
  2. to communicate with you about your engagement (scheduling, draft delivery, follow-ups);
  3. to comply with applicable law, including tax law, anti-money-laundering checks where applicable, and Bar Council Rules;
  4. to respond to your queries and to provide customer support;
  5. to improve the Website, with all analytics performed on de-identified data wherever feasible;
  6. where you have given separate, specific consent, to send you legal-literacy updates and blog content. You may withdraw this consent at any time.

We do not process your data for advertising profiling, automated decision-making with legal effect, or sale to third parties.

4. Legal Basis (Consent and Necessity)

Most processing is undertaken on the basis of your explicit consent, captured at the point of engagement or via the consent checkbox on our forms. Where processing is necessary for the performance of a contract (your engagement with us) or for compliance with a legal obligation, the relevant lawful basis under the DPDP Act applies.

5. Sharing of Personal Data

We share your data only as follows:

(a) With Empanelled Professionals working on your engagement, under written confidentiality undertakings and attorney-client privilege protections.

(b) With service providers that process data on our behalf strictly under written data-processing agreements — for example, secure document storage, video-conferencing platforms used for consultations, and accounting software used for invoicing. Each such provider is contractually obligated to maintain confidentiality and to process data only on our instructions.

(c) With government and regulatory authorities where disclosure is required by law (for example, in response to a valid court order, tax authority notice, or anti-money-laundering inquiry).

We do not sell, rent, trade, or otherwise commercially exploit your data.

6. Data Storage, Security, and Retention

Your data is stored on secure servers located within the country (or, where international data residency is unavoidable, with providers that comply with the DPDP Act's cross-border transfer requirements). Access is restricted on a need-to-know basis. All data in transit is encrypted using industry-standard TLS, and stored documents are encrypted at rest.

Retention: Engagement records (including final Will drafts) are retained for a minimum of seven (7) years from the close of the engagement, in line with our regulatory and tax obligations. Where you request earlier deletion of data not subject to a retention obligation, we will honour the request within a reasonable period.

7. Cookies and Analytics

The Website uses cookies and similar technologies for two purposes: (a) essential functioning (session management, security, fraud prevention), and (b) anonymous analytics to improve the Website. We do not use third-party advertising cookies, retargeting pixels, or behavioural tracking. You can disable non-essential cookies via your browser settings or via the cookie banner shown on first visit.

8. Your Rights as a Data Principal under the DPDP Act, 2023

Subject to the conditions of the DPDP Act, you have the right to:

  1. request access to the personal data we hold about you;
  2. request correction or completion of inaccurate or incomplete data;
  3. request erasure of personal data, where it is no longer necessary or where you have withdrawn consent (subject to our retention obligations under law);
  4. withdraw consent to processing at any time, without affecting the lawfulness of processing carried out before withdrawal;
  5. nominate another individual to exercise these rights on your behalf in the event of death or incapacity;
  6. grievance redressal — see Section 10.

To exercise these rights, please write to experts@lawtarazoo.com with the subject line "DPDP Request."

9. Children's Data

The Services are intended for adults aged 18 and over. We do not knowingly collect personal data of minors. If we become aware that we have collected data of a minor without verifiable parental consent, we will delete such data promptly.

10. Grievance Officer

In accordance with the DPDP Act, 2023, the designated Grievance Officer is:

Name: Ms. Shweta A. Tungare
Designation: Grievance Officer, Law Tarazoo Technologies LLP
Email: shweta@lawtarazoo.com
Address: 14, 3rd Asha Nagar, 1A, Borivli (East), Mumbai – 400066, Maharashtra
Response timeline: Within fifteen (15) working days of receipt of a grievance.

11. Changes to This Policy

We may revise this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated by email to existing clients where reasonably practicable.

12. Contact

For any privacy-related question, please write to experts@lawtarazoo.com.

Chat with our legal teamFree 12-hour callback · WhatsApp