PRIVACY & COOKIE POLICY

Shivadass & Shivadass (Law Chambers)

Level 3, No. 4/2, Millers Road, Bengaluru – 560052  

  www.sdlaw.co.in  |  admin@sdlaw.co.in  |  +91-80 43779955

Effective: 1 April 2026

Important Notice: This website is maintained solely for informational purposes and does not constitute an advertisement, solicitation, or inducement of any kind. No attorney-client relationship is created by its use. Shivadass & Shivadass (Law Chambers) fully adheres to the Bar Council of India Rules, 1975.

PART A

PRIVACY POLICY

Shivadass & Shivadass (Law Chambers) (“the Firm”, “we”, “us”) is a boutique law firm in Bengaluru practising, among other areas, Data Privacy and Protection. This Policy governs personal data collected through www.sdlaw.co.in (the “Website”) from visitors worldwide, including those in the EU/UK, the US, and South-East Asia. It does not apply to data processed in the course of client engagements, which is governed by separate retainer terms and professional obligations of confidentiality. Read this Policy together with Part B (Cookie Policy) below.

1. Applicable Legal Framework

Where multiple frameworks apply, we apply whichever affords the higher level of protection to the individual.

2. Personal Data We Collect

Our Website is purely informational. The data we collect is limited to: (a) data you provide voluntarily — name, job title, employer, contact details, and the content of any message sent to us by email or contact form – such form submissions may be processed through secure third – party services for communication purposes; and (b) data collected automatically by our server infrastructure — IP address (truncated or anonymised where required), browser and device type, visit date/time, pages viewed, and referring URL — processed in aggregate for security and operational monitoring only. We do not use third-party analytics platforms. We do not collect Sensitive Personal Data intentionally; if you include such data in a message to us, it will be used only for the purpose for which it was shared. Cookies are addressed in Part B.

3. Purpose and Legal Basis

4. Disclosure to Third Parties

We do not sell, rent, share, or trade personal data for commercial purposes under any framework. We do not engage in cross-context behavioural advertising (CCPA/CPRA). We may disclose personal data, strictly and only, to: IT/hosting providers (under data processing agreements, for operational purposes); professional advisers (auditors, insurers); regulatory or law enforcement authorities (where legally required); and successors of the Firm (subject to equivalent protections).

5. Cross-Border Transfers

Our hosting infrastructure is in India; we do not ordinarily transfer data outside India. Where transfers do occur: EU/UK data is transferred under Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) — India has no EU/UK adequacy decision. US data is not sold or shared. SEA transfers comply with jurisdiction-specific requirements: Singapore (PDPC contractual protections), Thailand (Section 28 PDPA safeguards), Malaysia (ministerially-approved countries or equivalent contracts), Philippines (NPC-compliant contracts), and Indonesia (Law No. 27 of 2022 safeguards).

6. Data Retention

7. Security

We implement appropriate technical and organisational measures including HTTPS/TLS encryption, role-based access controls, and periodic security reviews. We apply the “reasonable security practices” standard under the SPDI Rules (ISO/IEC 27001 or equivalent), Article 32 GDPR, and equivalent SEA standards. In the event of a notifiable breach, we will notify the relevant supervisory authority within the timeframes required by law (e.g., 72 hours under the GDPR and Singapore PDPA).

8. No Automated Decision-Making or Profiling

We do not carry out automated decision-making or profiling of any kind in connection with data collected through this Website.

9. Your Rights

The table below summarises your key rights by jurisdiction. To exercise any right, contact us at admin@sdlaw.co.in. We acknowledge requests within 48 hours and respond within the timeframe required by your applicable law (1 month under GDPR; 45 days under CCPA; 30 days under the IT Act/SPDI Rules).

10. Minors, External Links, Changes & Governing Law

Minors: This Website is not directed at persons under 18 (or the applicable minimum age in your jurisdiction). We do not knowingly collect data from minors; contact us immediately if you believe a minor has submitted data. External Links: We are not responsible for the privacy practices of third-party websites linked from this Website. Changes: We may update this Policy at any time; the revised version will be posted with an updated effective date. Material changes will be signposted on the Website. Governing Law: This Policy is governed by the laws of India; disputes are subject to the exclusive jurisdiction of the courts in Bengaluru, without prejudice to your right to complain to your local supervisory authority.

11. Contact & Grievance Officer

Grievance Officer (India — IT Act / SPDI Rules) and general privacy contact for all jurisdictions:

Shivadass & Shivadass (Law Chambers)

Level 3, No. 4/2, Millers Road, Bengaluru, Karnataka – 560052, India

Email: admin@sdlaw.co.in  |  Tel: +91-80 43779955

Response: acknowledgement within 48 hours; resolution within 30 days.

PART B

COOKIE POLICY

1.  Cookies We Use

We use only strictly necessary cookies — no analytics, advertising, social media, or tracking cookies of any kind. Strictly necessary cookies are essential to the Website’s operation and cannot be switched off without impairing functionality. They do not collect personal information for profiling or marketing.

2.  Legal Basis for Cookie Processing

India (DPDPA): consent (via banner) or legitimate use (operational necessity). EU/UK (GDPR/ePrivacy): legitimate interests under Article 6(1)(f) — strictly necessary cookies are exempt from the consent requirement under the ePrivacy Directive. US (CCPA/CPRA): strictly necessary cookie data does not constitute a “sale” or “sharing” of personal information. SEA (Singapore PDPA, Thailand PDPA, Malaysia PDPA, Philippines DPA, Indonesia PDPL): strictly necessary cookies fall within the operational necessity exception in each regime and do not require separate consent.

3.  Managing Cookies

You may block or delete cookies through your browser settings (Chrome, Firefox, Safari, Edge — refer to each browser’s help documentation) or by using private/incognito mode. Blocking strictly necessary cookies may impair Website functionality. We do not permit third-party providers to set non-essential cookies on this Website. We accept no responsibility for cookie practices of external websites linked from here.

4.  Data Transfers, Minors & Changes

All cookie data is processed and stored within India. Any future cross-border transfer will comply with the DPDPA and the transfer frameworks in Section 5 of Part A. This Website is not directed at persons under 18; we do not knowingly collect cookie data from minors. We may update this Cookie Policy from time to time; the current version will always be available at www.sdlaw.co.in with the effective date shown above.

5.  Contact

For questions or complaints about our use of cookies, contact us at admin@sdlaw.co.in or at the address in Section 11 of Part A.

This document is for informational purposes only and does not constitute legal advice. This website does not solicit work and is maintained in compliance with the Bar Council of India Rules, 1975.

© Shivadass & Shivadass (Law Chambers). All rights reserved.