Riva Legal Associates ("the firm", "we", "us") respects the privacy of visitors to this website (rivalegal.in) and is committed to handling personal data responsibly and in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.
1. What this policy covers
This policy describes the personal data we collect through this website, the purposes for which we use it, and the rights you have in respect of that data.
2. Personal data we collect
We collect personal data only when you choose to share it with us, primarily through:
- The contact form — your name, email address, phone number (if you provide one), the subject of your enquiry, and the message you write.
- Direct email or WhatsApp — any information you choose to share when you contact us by these means.
- Server logs — your IP address, browser type, referrer URL, and the pages you view, retained briefly for security and operational purposes.
3. Why we collect it
We process the personal data you submit solely to respond to your enquiry and to determine whether the firm is in a position to assist you. We do not use your data for marketing or send unsolicited communications.
4. Who receives the data
Contact-form submissions are delivered directly to rivalegal@outlook.com. The firm does not use a third-party customer-relationship-management service or any third-party form processor that would receive a copy of your submission. Server logs are retained by our hosting provider (Cloudflare) under their standard terms.
5. How long we keep it
Enquiries that do not lead to an engagement are retained for no longer than ninety (90) days from the date of submission, after which they are deleted. If your enquiry leads to an engagement with the firm, your data becomes part of the matter file and is retained for the duration required by professional and regulatory obligations.
6. Cookies
The website uses a single essential cookie (rivalegal_disclaimer_accepted) to remember that
you have read and accepted the disclaimer; it expires after 30 days. The website does not use
advertising, profiling, or third-party tracking cookies.
See the Cookie Notice for details.
7. Your rights under the DPDP Act
You have the right to:
- Access the personal data we hold about you;
- Correct inaccurate personal data;
- Request erasure of your personal data;
- Withdraw consent for any further processing;
- Lodge a grievance with the firm or, ultimately, with the Data Protection Board of India.
8. How to exercise your rights
To exercise any of the rights above, please write to rivalegal@outlook.com with the subject line "DPDP request". We will acknowledge your request and respond within a reasonable period.
9. Updates to this policy
We may update this policy from time to time. The current version is always available on this page.