Privacy Policy

1. Introduction

AVP Legis Chambers ("AVP", "we", "us" or "our") respects the privacy of individuals whose personal data is provided to or collected by us in connection with our website, communications, professional services, recruitment activities and related interactions.

This Privacy Policy explains how AVP collects, receives, uses, stores, discloses and otherwise processes personal data, and the rights and choices available to individuals in relation to such processing.

This Privacy Policy applies principally to personal data processed by AVP in connection with:

• the website avplegischambers.com;
• website enquiries and consultation requests;
• service enquiries;
• communications with existing, prospective or former clients and other professional contacts;
• recruitment and career-related applications;
• professional engagements and related administrative activities; and
• other interactions with AVP in which personal data is provided to us.

AVP seeks to follow the principles of necessity, purpose limitation, data minimisation, transparency, security, accountability and appropriate retention in its handling of personal data.

This Policy is intended to operate consistently with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules made thereunder, as and when the relevant provisions become applicable.

2. About AVP Legis Chambers

AVP Legis Chambers is an unregistered partnership law firm based in Patna, Bihar, India.

For purposes of applicable data-protection law, AVP may act as a Data Fiduciary in respect of personal data that it determines the purposes and means of processing.

Contact details

AVP Legis Chambers
Road No. 6, Rajendra Nagar
Patna – 800016
Bihar, India

General email: info@avplegischambers.com
Privacy and data-protection enquiries: privacy@avplegischambers.com

3. What is Personal Data?

"Personal data" means information about an individual who is identifiable by or in relation to such information.

Depending upon the nature of the interaction, personal data may include information such as:

• name;
• email address;
• telephone/mobile number;
• correspondence and messages;
• professional or organisational information;
• information contained in a curriculum vitae or application;
• information relating to a professional or legal engagement;
• records of communications and enquiries;
• website and technical information; and
• other information voluntarily provided to AVP.

AVP seeks to collect only personal data that is reasonably necessary for the particular purpose for which it is processed.

4. Personal Data We Collect

The personal data collected by AVP depends upon how an individual interacts with us.

4.1 Website enquiries

When an individual submits an enquiry through the Contact Us form or the consultation form on the website, AVP may collect:

• name;
• email address;
• telephone number;
• subject of the enquiry; and
• message or other information voluntarily entered into the form.

The website enquiry forms contain a separate privacy notice and an unchecked consent checkbox requiring affirmative action before submission.

4.2 Service enquiries

When an individual submits a service-related enquiry through the website, AVP may collect:

• name;
• telephone number;
• email address;
• the service selected or enquired about; and
• the date and time of the enquiry.

The applicable service-enquiry form contains a privacy notice and requires affirmative consent before submission.

4.3 Direct communications

If an individual communicates with AVP by email, telephone, post, messaging service or other means, AVP may process information contained in that communication together with reasonable contact and administrative information necessary to respond.

4.4 Professional engagements

Where AVP is engaged in a professional or legal matter, the personal data processed may be considerably broader than the information collected through the public website.

Depending upon the nature of the matter, such information may include:

• identity and contact details;
• professional information;
• information relating to a legal dispute, transaction, proceeding or matter;
• information contained in documents supplied to AVP;
• information relating to counterparties, witnesses, representatives or other persons connected with a matter;
• correspondence and communications; and
• information required for professional, legal, regulatory, accounting or administrative purposes.

Such information will be processed only to the extent reasonably necessary for the relevant professional, legal, contractual, administrative or other lawful purpose.

4.5 Recruitment and career applications

AVP may receive personal data through applications for employment, internships, retainerships, clerkships or other professional opportunities.

This may include:

• name and contact details;
• educational qualifications;
• professional qualifications;
• employment or experience information;
• CV/resume and cover letter;
• information voluntarily supplied by the applicant; and
• information reasonably necessary for recruitment and related communication.

Applicants should not submit unnecessary sensitive personal information, passwords, financial credentials or unnecessary identity documents.

4.6 Technical and website information

When individuals access the website, certain technical information may be processed as part of normal website operation and security, such as:

• IP address or related network information;
• browser and device information;
• operating-system information;
• date and time of access;
• pages or resources requested; and
• technical information necessary for security, troubleshooting and website administration.

The extent of such processing depends upon the website's technical configuration and services used from time to time.

5. Information We Ask You Not to Submit Through Public Website Forms

The public website is not intended to be a secure document-exchange or confidential legal-file transmission system.

Individuals should not submit through ordinary website enquiry forms:

• passwords;
• banking or payment credentials;
• authentication codes or OTPs;
• unnecessary identity documents;
• complete case files;
• highly sensitive personal information unless specifically requested by AVP;
• information whose disclosure could cause material harm if intercepted or misdirected; or
• urgent or time-critical legal information where delay in receiving or reviewing the information could prejudice the individual's interests.

Where an individual wishes to provide substantial confidential material, the appropriate method of transmission should first be discussed with AVP.

6. Purposes for Which We Process Personal Data

AVP may process personal data for purposes including:

1. receiving, reviewing and responding to enquiries;
2. responding to requests for consultation or information;
3. communicating regarding requested legal or professional services;
4. providing and administering professional services;
5. managing professional engagements and related records;
6. communicating with clients, prospective clients, professional contacts and other relevant persons;
7. recruitment and evaluation of applications;
8. maintaining business and professional records;
9. complying with applicable legal, regulatory, professional, accounting and record-keeping requirements;
10. establishing, exercising or defending legal claims or rights;
11. preventing fraud, abuse, unauthorised access and misuse of the website or services;
12. maintaining website security and functionality;
13. detecting, investigating and responding to security incidents;
14. administering and improving the website and its functionality; and
15. carrying out other purposes that are reasonably connected with the interaction or otherwise permitted by applicable law.

AVP will not use personal data for a purpose that is materially incompatible with the purpose for which it was collected unless such further processing is permitted or required by applicable law.

7. Basis for Processing Personal Data

AVP processes personal data only where there is a lawful basis for doing so.

Depending upon the circumstances, processing may be based on:

• the individual's valid consent;
• processing necessary for a service or interaction requested by the individual, where permitted under applicable law;
• compliance with applicable legal obligations;
• compliance with applicable professional, regulatory or judicial requirements;
• protection of legal rights and interests;
• security, fraud prevention or investigation purposes where permitted by applicable law; or
• another lawful basis or permitted processing recognised under applicable Indian law.

Where AVP relies on consent, the consent will be sought through an appropriate affirmative mechanism.

Importantly, not every processing activity undertaken by AVP is necessarily based on consent. For example, certain record-keeping, security, legal-compliance or professional activities may require processing on a basis other than consent.

8. Consent

Where consent is required or relied upon as the basis for processing, AVP seeks consent through a clear affirmative action.

For website enquiry forms, the consent mechanism is separate from the submission button and is not pre-ticked.

The relevant website forms currently record, where technically implemented:

• the date and time of consent; and
• the version of the Privacy Policy applicable when consent was provided.

Consent may be withdrawn where consent is the basis of processing.

A request to withdraw consent may be sent to:

privacy@avplegischambers.com

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. It also does not require AVP to cease processing where continued processing is otherwise permitted or required by applicable law.

9. Withdrawal of Consent

Where an individual's personal data is processed on the basis of consent, the individual may withdraw that consent.

A withdrawal request may be made by contacting:

Privacy and Data Protection Contact
AVP Legis Chambers
Road No. 6, Rajendra Nagar
Patna – 800016, Bihar, India
Email: privacy@avplegischambers.com

The request should, where reasonably possible, identify:

• the individual making the request;
• the nature of the consent or processing concerned; and
• the email address or other contact information previously used for the relevant interaction.

AVP may take reasonable steps to verify the identity of the requester before acting on a request involving personal data.

10. Data Minimisation

AVP seeks to limit collection and processing of personal data to information that is reasonably necessary for the relevant purpose.

Individuals are therefore encouraged to provide only information that is relevant to their enquiry, application, engagement or communication.

AVP does not intentionally seek unnecessary personal information merely because it may be available.

11. Sources of Personal Data

AVP may obtain personal data:

• directly from the individual;
• from an authorised representative;
• from a client or prospective client;
• from an employer, organisation or professional contact;
• from documents supplied to AVP;
• through communications;
• through the AVP website;
• from publicly available sources where reasonably necessary for a lawful professional purpose; or
• from other persons or organisations where such collection is permitted by applicable law.

12. Disclosure of Personal Data

AVP does not ordinarily sell personal data.

Personal data may be disclosed or made available where reasonably necessary to:

• AVP's partners, advocates, employees, associates, consultants or authorised personnel;
• service providers and Data Processors providing website, hosting, IT, email, security, communications, document-management or other supporting services;
• professional advisers, consultants or experts engaged where appropriate;
• courts, tribunals, governmental authorities, regulators or law-enforcement authorities where legally required or permitted;
• counterparties or other persons where disclosure is necessary for a professional matter and is authorised or otherwise permitted; or
• other persons where disclosure is authorised by the individual or permitted by applicable law.

AVP seeks to ensure that external service providers processing personal data on its behalf are subject to appropriate contractual or other safeguards appropriate to the nature of the processing.

13. Data Processors and Service Providers

AVP may use third-party service providers for functions such as:

• website hosting;
• website maintenance;
• email and communication services;
• cybersecurity and anti-abuse protection;
• technical support;
• backup and storage;
• professional or administrative services; and
• other infrastructure reasonably necessary for operation of the firm or website.

Where such providers process personal data on behalf of AVP, AVP seeks to impose appropriate contractual and operational safeguards consistent with applicable law.

14. Website Security and Anti-Abuse Measures

AVP takes reasonable measures appropriate to the nature of the personal data and the risks involved to protect personal data against unauthorised access, misuse, alteration, disclosure, loss or destruction.

Depending upon the circumstances, such measures may include:

• access controls;
• authentication and authorisation controls;
• secure transmission mechanisms;
• appropriate technical configuration of servers and applications;
• backups;
• monitoring and review of security-related activity;
• protection against spam and automated abuse;
• restricted access to administrative systems; and
• other technical and organisational safeguards appropriate to the processing.

The website may use Google reCAPTCHA or similar anti-abuse technology to distinguish genuine users from automated or abusive requests and to protect website forms.

No website or electronic transmission can be guaranteed to be completely secure.

15. Personal Data Breaches

AVP maintains internal procedures for identifying, assessing, responding to and documenting personal-data security incidents.

Where a personal-data breach occurs, AVP will take reasonable and appropriate steps in accordance with applicable law, including applicable notification and remedial requirements.

Where notification is legally required, affected individuals and/or the relevant regulatory authority will be notified in the manner and within the timeframe required by applicable law.

16. Retention of Personal Data

AVP does not intend to retain personal data indefinitely.

Personal data will ordinarily be retained only for as long as reasonably necessary for:

• the purpose for which it was collected;
• the relevant professional or business relationship;
• legal, regulatory or professional obligations;
• establishment, exercise or defence of legal claims;
• accounting or record-keeping requirements;
• security, audit or dispute-resolution purposes; or
• another lawful purpose for which continued retention is permitted.

Different categories of records may therefore have different retention periods.

Where personal data is no longer required and there is no legal or other lawful reason for continued retention, AVP will seek to delete, anonymise or otherwise appropriately dispose of it in accordance with its internal retention and deletion procedures.

Applicable law may require certain records to be retained for specified periods.

17. Rights of Data Principals

Subject to applicable law and any conditions or limitations prescribed by law, individuals may have rights including:

• obtaining information about processing of their personal data;
• seeking correction or updating of inaccurate or incomplete personal data;
• seeking erasure of personal data where legally applicable;
• withdrawing consent where processing is based on consent;
• exercising other rights available under applicable data-protection law; and
• making a grievance or complaint regarding processing of personal data.

AVP will deal with rights requests in accordance with applicable law and its internal rights-handling procedure.

18. How to Exercise Your Rights

A rights, consent-withdrawal or privacy-related request may be sent to:

Privacy and Data Protection Contact
Email: privacy@avplegischambers.com

Alternatively, correspondence may be addressed to:

AVP Legis Chambers
Road No. 6, Rajendra Nagar
Patna – 800016
Bihar, India

A request should contain sufficient information to enable AVP to understand the request and, where reasonably necessary, verify the identity of the requester.

AVP may request reasonable additional information where necessary to protect against unauthorised access to personal data.

19. Grievance Redressal

If an individual has a concern regarding the processing of their personal data, the individual may first contact AVP at:

privacy@avplegischambers.com

AVP will review and address privacy-related grievances in accordance with applicable law and its internal grievance-handling procedure.

Where applicable law provides a right to approach the Data Protection Board of India or another competent authority, that right remains unaffected.

20. Children's Personal Data

AVP's website is not directed specifically at children.

AVP does not knowingly seek to collect children's personal data through ordinary website enquiry forms for purposes unrelated to the enquiry.

Where processing of personal data relating to a child is subject to specific statutory requirements, AVP will seek to comply with the requirements applicable to such processing.

21. Recruitment and CV Data

Personal data contained in CVs, resumes, cover letters and related recruitment communications may be processed for:

• evaluating an application;
• communicating with the applicant;
• arranging interviews or assessments;
• considering the applicant for relevant opportunities; and
• carrying out related recruitment and administrative activities.

Applicants should provide only information reasonably relevant to their application.

Recruitment information may be retained for a reasonable period after the conclusion of the recruitment process where necessary for legitimate administrative purposes or where otherwise permitted by law.

22. Confidentiality and Advocate-Client Communications

Nothing in this Privacy Policy is intended to reduce or waive any applicable professional duty of confidentiality, legal privilege or other protection applicable to communications or information relating to a professional engagement.

However, submission of information through the public website does not, by itself, create an advocate-client relationship or guarantee that the information will receive the protections applicable to an established professional engagement.

Individuals should therefore exercise caution before submitting confidential or privileged information through public website forms.

23. Cookies and Similar Technologies

AVP may use cookies and similar technologies necessary for the functioning, security and administration of the website.

The website may also use third-party technologies for purposes such as security and prevention of automated abuse.

AVP does not presently intend to use the website for behavioural advertising, cross-site advertising or remarketing.

Further information is provided in the separate Cookie Policy published on the website.

24. Google reCAPTCHA and Similar Security Services

Certain website forms may use Google reCAPTCHA or a similar service for security and anti-abuse purposes.

Such technology may involve the processing of technical information by the relevant service provider in accordance with its own terms and privacy practices.

AVP uses such technology for website security and prevention of automated abuse rather than for behavioural advertising.

25. Third-Party Websites and Services

The website may contain links to websites or services operated by third parties.

AVP is not responsible for the privacy practices, security, content or policies of third-party websites.

Individuals should review the privacy policies applicable to those third-party services before providing personal data to them.

26. International Processing

Some technology, hosting, communications or other service providers used by AVP may process personal data from locations outside India.

Where personal data is processed outside India, AVP will take such steps as may be required by applicable Indian law and any applicable contractual or regulatory requirements.

AVP does not represent that all personal data is necessarily stored exclusively within India.

27. Automated Decision-Making and Profiling

AVP does not presently use personal data collected through its website to make decisions about individuals solely through automated processing in a manner that produces legal or similarly significant effects.

AVP does not presently undertake behavioural profiling of website visitors for advertising purposes.

If this position materially changes, AVP will update its privacy disclosures as appropriate.

28. Accuracy of Personal Data

AVP seeks to maintain personal data that is reasonably accurate and appropriate for the purpose for which it is processed.

Individuals are encouraged to inform AVP if personal data supplied by them is inaccurate, incomplete or outdated.

Requests for correction may be sent to:

privacy@avplegischambers.com

29. Data Principal Responsibilities

Individuals providing personal data to AVP are requested to:

• provide information that is accurate and not misleading;
• provide only information reasonably necessary for the relevant purpose;
• avoid submitting passwords, OTPs or financial credentials;
• avoid submitting unnecessary identity documents;
• avoid providing another person's personal data unless authorised or otherwise permitted;
• promptly inform AVP where previously supplied information requires correction; and
• exercise reasonable caution when transmitting confidential information through public electronic channels.

30. Changes to This Privacy Policy

AVP may revise this Privacy Policy from time to time to reflect:

• changes in law or regulatory requirements;
• changes to website functionality;
• changes in how AVP processes personal data;
• changes to technology or service providers; or
• improvements in privacy and security practices.

The updated version will be published on this page with a revised "Last Updated" date and version number.

Where required by applicable law, AVP will provide additional notice or obtain consent for material changes.

31. No Waiver of Statutory Rights

Nothing in this Privacy Policy is intended to exclude, restrict or waive any right or remedy that cannot lawfully be excluded, restricted or waived under applicable law.

Where this Policy conflicts with a mandatory statutory requirement, the applicable statutory requirement will prevail to the extent of the conflict.

32. Relationship with Other Website Policies

This Privacy Policy should be read together with AVP's:

• Cookie Policy;
• Website Disclaimer; and
• Terms and Conditions.

These documents address different aspects of the website and are not intended to duplicate one another.

33. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, subject to applicable statutory rights and jurisdictional requirements.

Subject to applicable law, courts and competent authorities having jurisdiction at Patna, Bihar shall have jurisdiction in relation to matters concerning this Policy.

34. Contact Us

For privacy, personal-data, consent-withdrawal, rights or grievance-related matters:

AVP Legis Chambers
Road No. 6, Rajendra Nagar
Patna – 800016
Bihar, India

Privacy and Data Protection Email:
privacy@avplegischambers.com

For general enquiries:

info@avplegischambers.com

35. Version Control

Document: Privacy Policy
Version: 2.1
Effective Date: 12 September 2026
Last Updated: 12 September 2026
Previous Version: Version 2.0