Privacy Policy · Alba Law Offices

Alba Law Offices (“Alba”, “the Firm”, “we”, “us”, or “our”) is committed to protecting the privacy of individuals and entities who interact with us, including visitors to our website: www.albalawoffices.com (the “Website”), who may share personal data with us including our retainers and staff.

This Privacy Policy (“Policy”) explains what personal data we collect, why and how we process it, and the rights available to you under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as amended from time to time (together, the “DPDP Law”).

By accessing or using the Website, you (“user”, “you”, or “your”) agree that you have read and understood this Privacy Policy, Terms of Use and Disclaimer and to comply with and be bound by the same.

By accessing and using this Website, you represent that you are at least eighteen (18) years of age and possess the legal capacity to consent to the processing of your personal data. Where personal data relating to an individual below eighteen (18) years of age is shared with us, it shall be provided only by, or with the consent of, a parent or lawful guardian.

By accessing and using the Website, you consent to the collection, use, and transfer of your personal data for the purposes set out in this Policy.

Personal Data We Collect

We collect only such personal data as is reasonably necessary for the purposes described in this Policy. Depending on the nature of your interaction with us, this may include:

Identification & Basic Personal Information: name, age, gender, email address, mailing address, identification numbers (voter ID, PAN Card), marital status, telephone number, date of birth, emergency contact number, photograph, home/ business/ postal addresses;
Professional Data: job title, qualifications, curriculum vitae, work experience, and related professional background, language(s) spoken, employment/ contractual information, retainership details, performance & developmental reviews, where shared with us for recruitment, empanelment, referrals, or professional correspondence, bank account details, demat account details, salary information, retainership fees;
Case-Specific Data: information relevant to a legal matter for which you have engaged us, or on which you have sought our advice. This may include sensitive personal data (such as information relating to health, or involvement in judicial or quasi-judicial proceedings) and financial data (such as income, assets, bank details, or transaction records), to the extent shared with, or obtained by, us in connection with that matter;
Technical, Device & Website Usage Information: we do not use cookies or any similar tracking technology on the Website. However, when you access the Website, we may automatically collect certain limited technical data, such as your device type, browser type, IP address, operating system, and website page views; and
Other personal data voluntarily provided by you.

How We Collect Your Personal Data

directly from you, when you contact us through the Website, by email or telephone, or in person, subscribe to our newsletter, or when you engage us to provide services;
in the ordinary course of an engagement, including through the documents, instructions, and correspondence exchanged during the course of representation;
from third parties connected with a matter, such as opposing counsel, courts, tribunals, regulators, or your authorised representatives, where relevant to the legal services being provided; and
from publicly available sources, where reasonably necessary for the conduct of a legal matter or related due diligence.

Purpose and Basis of Processing

We process personal data only for specified and lawful purposes, and only to the extent necessary for those purposes, including to:

provide legal advice, representation, and related professional services;
respond to enquiries received through the Website or otherwise;
manage our engagement with individuals, including clients, employees, personnel, applicants, professionals and other stakeholders;
manage correspondence, billing, and administration aspects of the client matters;
comply with our obligations under applicable law, including obligations relating to record-keeping and regulatory or court requirements and defending our legal rights;
consider your professional data where shared with us for the purpose of recruitment or association with the Firm;
monitor use of the Firm’s systems, networks, applications and other technology resources;
manage access to the Firm’s premises, systems, facilities and assets; and
conduct data analytics.

Consent and its Withdrawal

You may withdraw your consent at any time by writing to us at the contact details set out in the Policy below. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to such withdrawal, and will operate prospectively only. Please note that, where consent is withdrawn in respect of an ongoing engagement, this may affect our ability to continue providing services to you, and we reserve the right to discontinue such services accordingly, subject to our applicable professional obligations.

Disclosure and Sharing of Personal Data

We do not sell or rent your personal data. We may share your personal data in the following circumstances:

with courts, tribunals, arbitral bodies, regulators, opposing counsel, or other parties to a proceeding, where necessary for the conduct of a legal matter;
with professionals engaged by us in connection with a matter, such as the Firm’s personnel, retainers, counsels, experts, or auditors, and with our service providers (for example, IT support), who are bound by confidentiality obligations and who process such data solely under our instructions;
with your consent, or at your direction;
where required by law, by a court order, or pursuant to a lawful request of a government or regulatory authority; and
in connection with the establishment, exercise, or defence of the Firm’s legal rights.

Cross-Border Transfer

As a matter of ordinary practice, we do not transfer personal data outside India. Where a matter necessarily requires personal data to be shared with a party located outside India, including in the context of cross-border litigation, transactions, or arbitration, we will do so only to the extent necessary for that purpose and in accordance with applicable law, including any restrictions notified by the Central Government under the DPDP Law from time to time.

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including to comply with our legal, regulatory, accounting, or professional obligations, or as may be required for the establishment, exercise, or defence of the Firm’s legal claims/ rights. Where retention is no longer necessary or required by law, we take reasonable steps to erase or anonymise the personal data in our possession.

Security of your Personal Data

We implement reasonable technical and organisational measures, appropriate to the nature of the personal data and the risks involved, to protect personal data in our possession or under our control against unauthorised access, use, alteration, disclosure, or loss. Access to personal data within the Firm is limited to personnel who require it for the purposes set out in this Policy.

Your Rights

Subject to applicable law, you have certain rights in respect of your personal data under the DPDP Law, including the right to access, correction, and erasure of your personal data, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of your death or incapacity. You may exercise these rights by writing to us at admin@albalawoffices.com. We may take reasonable steps to verify your identity before acting on any such request. Some of these rights may be limited where personal data is processed for the establishment, exercise, or defence of the Firm’s legal claims/ rights, or where restricted by applicable law, including obligations of confidentiality and legal privilege.

Grievance Redressal and Contact

If you have any question, request, or grievance concerning the processing of your personal data or this Policy, you may write to our Grievance Officer at the details below. We will endeavour to address your grievance within the timelines prescribed under the DPDP Law. If you remain dissatisfied with our response, you may approach the Data Protection Board of India.

Grievance Officer: Jyoti Rajpurohit
Alba Law Offices, New Delhi, India
Email: admin@albalawoffices.com

Changes to this Policy

We may update, amend, or modify this Privacy Policy at any time. The revised Policy will be posted on our website, at albalawoffices.com. We encourage you to review this Policy periodically.

Last updated: August 2026.