Privacy Policy

1. Introduction

Lynx Legal Partners LLP is a law firm based in Mumbai, Maharashtra, India, registered under Registrar of Companies, ROC Mumbai and its corporate identification number is (CIN) ABB-6277. This Policy applies to lynxlegal.in and all subdomains, forms, and services we make available through this website (together, the "Website").

We process personal data as a "Data Fiduciary" under the DPDP Act in respect of personal data collected through the Website, and we are also bound by professional confidentiality and privilege obligations that apply to lawyer-client communications, which operate in addition to (and in some respects take precedence over) this Policy.

2. Scope of this Policy

This Policy covers personal data collected through:

• Website forms — contact, appointment requests, newsletter sign-ups, and career applications
• Direct communication — email, WhatsApp, and phone enquiries initiated through the Website
• Automated technologies — cookies, analytics, and similar tracking on the Website

This Policy does not govern personal data we receive in the course of an existing client engagement, which is instead governed by the engagement letter, applicable professional conduct rules, and attorney-client privilege.

3. Information We Collect

Information you provide to us

• Name, email address, phone number, and company/organisation name
• Details of your legal query or reason for contacting us, submitted via contact or appointment forms
• Documents or attachments you choose to share with us
• Career applications — resume, cover letter, and related information, if you apply for a role

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent on the Website, and referring website
• Cookie identifiers and similar tracking data (see Section 7)

4. How We Use Your Information

We use the personal data we collect to:

• Respond to enquiries and requests for appointments or consultations
• Provide, manage, and improve our legal services
• Send updates, newsletters, or legal insights, where you have opted in
• Process career applications
• Maintain the security and proper functioning of the Website
• Comply with applicable law, regulatory requirements, and professional obligations

5. Basis for Processing

Under the DPDP Act, we process your personal data on the basis of:

• Your consent — for example, when you submit a contact form or subscribe to our newsletter, given freely, specifically, and after being informed of the purpose
• Legitimate uses recognised under the DPDP Act, such as responding to a request you have voluntarily made to us

You may withdraw consent at any time (see Section 10), without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing & Disclosure of Information

We do not sell your personal data. We may share it with:

• Service providers who support our Website and operations — for example, hosting providers, email and CRM platforms, and analytics providers — bound by confidentiality obligations
• Professional advisors where necessary for the operation of our practice
• Regulators or authorities, where required by law, court order, or a valid legal process
• Successors, in the event of a merger, restructuring, or transfer of business, subject to equivalent privacy protections

7. Cookies & Tracking Technologies

The Website uses cookies and similar technologies to operate correctly, understand how visitors use the site, and improve the experience.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect Website functionality.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal, regulatory, or professional obligations, and resolve disputes. Contact form and enquiry data not converted into a client engagement is retained for 12 months and then securely deleted or anonymised.

9. Data Security

We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encrypted transmission where applicable, and restricted internal access on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities carried out
• Correction and completion of inaccurate or incomplete personal data
• Erasure of personal data that is no longer necessary for the purpose it was collected
• Withdraw consent at any time, where processing is based on consent
• Grievance redressal, including the right to register a complaint with our Grievance Officer (Section 15) and, thereafter, the Data Protection Board of India
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity

To exercise any of these rights, please contact our Grievance Officer using the details in Section 15. We will respond within the timelines prescribed under the DPDP Act.

11. Children's Privacy

The Website is not directed at children, and we do not knowingly collect personal data from individuals under 18 years of age. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

12. Third-Party Links

The Website may contain links to third-party websites, including our social media pages. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies separately.

13. Cross-Border Data Transfers

Where we use service providers located outside India (for example, cloud hosting or analytics providers), your personal data may be processed outside India. Where this occurs, we take reasonable steps to ensure it receives a comparable standard of protection, in line with applicable requirements under the DPDP Act.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. Material changes will be notified through the Website.

15. Grievance Officer & Contact Us

For any questions about this Privacy Policy, or to exercise your rights as a Data Principal under the DPDP Act, please contact our Grievance Officer:

If you are not satisfied with our response, you may approach the Data Protection Board of India as provided under the DPDP Act.