LawQuest, India and the Law Office of Poorvi Chothani, PLLC (United States of America) are committed to protecting personal data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 of India (“DPDP Act”) and, European data protection laws. We will responsibly protect the information you provide to us and the information we collect in the course of operating our practices.

For the purposes of the DPDP Act, LawQuest and LawQuest Global, PLLC act as Data Fiduciaries in relation to personal data processed through this website and in the course of providing legal and advisory services.

This Privacy Policy describes how the firms may collect, use, and share information.

LawQuest and the Law Office of Poorvi Chothani, PLLC are the data controllers (Data Fiduciaries under Indian law) for processing the personal information we have received from you. We can be contacted at shyam@lawquestinternational.com for all matters related to this policy.

We do not use cookies on our website. However, while using our services or our website we collect certain personal information.

Committed to Protecting Data
LawQuest and the Law Office of Poorvi Chothani, PLLC processes personal data and have therefore adopted this privacy policy, which tells you how we treat your data.

Collection of Data
We may gain information about you from your use of our website, through our case management system or via email.

Type of Data Used
We use data about you as a client (or employee of a client) of either LawQuest or the Law Office of Poorvi Chothani, PLLC. This includes personal data that we must treat according to the law, but also personal data that are necessary in relation to services that we render to you under our contract with you or with your employer. The data we use includes: general personal data, such as your name, date of birth, your phone number (landline and/or mobile) your contact email address, photograph and information about your country of nationality and residence. Please note, we do not process sensitive personal data about you unless our agreement includes a need for this.

The Firm does not knowingly collect personal data from children (persons under 18 years of age) through the website without verifiable consent of a parent or lawful guardian, where applicable under law.

Purpose of Collecting and Storing Data
We rely on the following legal grounds to collect and process your personal information:

• Performance of a contract – We may need to collect and use your personal information to render services to you or your employer under a contract that you or your employer has with us for such specific services that are in your legitimate interest.
• Scheduling Appointments on Our Website – When you use the appointment tool on our website, we will gather your personal information to respond to your requests and provide you with services as per your request.
• Consent – On occasion we may require your consent to use your data to perform our services under a contract with you or your employer.
• Legitimate interests – We may use your personal information for your legitimate interests.

Consent
Where personal data is collected through our website, our case management system or via email, such data is processed based on the consent of the individual providing the information. Submission of information through the website constitutes clear affirmative action signifying consent for the Firm to process such data for the purposes stated in this Policy. Individuals may withdraw their consent at any time by contacting the Firm using the contact details provided in this Policy. Upon withdrawal of consent, processing of personal data shall cease unless such processing is required under applicable law.

Collection and Treatment of Data
We only deal with data about you that are relevant and sufficient in relation to the purposes defined above. The purpose is crucial to what type of data about you is relevant to us. The same applies to the amount of personal data we use – we do not use more data than needed.

We collect, process and store only the personal data needed to meet our intended purpose. Additionally, it may be decided by law what type of data is required to be collected and stored for LawQuest and the Law Office of Poorvi Chothani, PLLC to render services to you under a contract with you or your employer in your legitimate interest. The type and extent of the personal data we process is necessary to fulfil the contract or other legal obligations.

Data Verification, Accuracy and Retention
We verify that the personal data we deal with about you is not incorrect or misleading. We also make sure we update your personal data continuously, which happens when you contact us. As our service is dependent on your data being accurate and up to date, please inform us about relevant changes to your data. You can use the contact details above to notify us of any changes. In order to ensure the quality of your data, we are adopting internal rules and establishing procedures to check and update your personal data.

Our team that has authorized access to your information shall delete your personal data when they are no longer necessary for the purpose of the collection, processing and storage of your data.

Purpose of Collecting Data
We need your personal data to render services at LawQuest and the Law Office of Poorvi Chothani, PLLC. which are legal purposes. If we do not have a contractual basis for collecting your personal data, we will obtain your consent before processing your personal data for the purposes described above. If we need your consent, your consent is voluntary and you can withdraw it at any time by contacting us by using the contact information above.

Sharing of Data
The firms are providers of legal services. Our offices share information with each other for business purposes such as internal administration, billing, promoting our events and services, and providing you or your organization with services. On occasion, to meet our contractual obligations to you or for a legal need we may share information with third party service providers who are subject to this Privacy Policy and data protection requirements listed herein.

We do not sell, rent, or otherwise share information that reasonably identifies you or your organization with unaffiliated entities for their independent use except as expressly described in this Privacy Policy or with your prior permission.

We will pass your personal data to partners if we have a legitimate legal basis. This may be because we are legally required to disclose your personal data, for example in connection with the registration with a local government or if there is a contractual basis to do so. We do not pass or share personal data for marketing purposes.

Internal Data Protection
We have adopted internal rules on information security that contain instructions and actions that protect your personal data against being destroyed, lost or modified, from unauthorized disclosure, and against unauthorized access or knowledge of them. We have established procedures for granting access rights to those of our members or employees who handle sensitive personal data and data that reveal information about personal interests and consumption on a need-to-know basis. We control their actual access through logging and supervision. To avoid data loss, we are continuously backing up our data sets. In case of a security breach that results in a high risk of discrimination, ID theft, financial loss, loss of reputation or other significant disadvantages, we will notify you.

Your Rights

In accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and relevant international data protection standards, you have the following rights in relation to your personal data:

Access to Personal Data

You may request confirmation of whether your personal data is being processed and obtain a summary of such data, the purposes of processing, its source (where applicable), and details of third parties with whom it has been shared, subject to legal limitations and the rights of others.

Correction and Erasure

You are entitled to request correction, completion, or updating of personal data that is inaccurate, incomplete, or misleading. You may also request erasure of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn and no other legal basis exists, or where processing is in violation of applicable law. Such erasure may be subject to statutory or regulatory record-retention requirements.

Consent and Processing Controls

Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to such withdrawal. You may also object to the processing of your personal data in circumstances permitted by applicable law, particularly where processing is based on legitimate interests. If such objection is justified, processing will cease unless there are compelling legal grounds to continue.

Data Portability

You are entitled to receive the personal data you have provided to us, and data processed based on your consent, in a structured, commonly used format, and to request transmission of such data to another service provider where technically feasible.

Grievance Redressal and Nomination

You have the right to seek grievance redressal in relation to the processing of your personal data. If you are not satisfied with the response provided, you may escalate the matter to the Data Protection Board of India or the relevant supervisory authority, as applicable. Under Indian law, you may nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

You may exercise any of the above rights by contacting the Firm’s designated Data Protection and Grievance Officers:

Ms. Rupali Nayak
Mr. Shyam Pandey
Email: shyam@lawquestinternational.com

Requests should clearly specify the nature of the right being exercised and provide sufficient information to identify the relevant data. The Firm may seek verification of identity before acting on a request to ensure data security. All requests and grievances will be addressed within a reasonable timeframe or within such period as may be prescribed under applicable law.