Privacy Policy

Velmont Chambers: Privacy Policy

Last updated: 19-09-2026

1. Introduction

1.1 This Privacy Policy ("Policy") explains how Velmont Chambers ("Velmont Chambers", "we", "us" or "our") collects, uses, shares, stores and protects information relating to individuals who visit our website at [www.velmontchambers.com] (the "Website"), who contact us through it, or who interact with us in person or online as described in Clause 4.7.

1.2 This Policy is published in accordance with, among other laws:

(a) Section 43A of the Information Technology Act, 2000 ("IT Act");

(b) the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and

(c) the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Law"), to the extent their provisions are in force.

1.3 This Policy sets out what information we collect, how and why we collect it, with whom we share it, how long we keep it, how we protect it, and how you can exercise your rights in relation to it.

1.4 This Policy should be read together with our Terms of Use [link] and our Cookie Policy [link]. Capitalised terms used but not defined here have the meaning given to them in the Terms of Use.

2. Scope

2.1 This Policy applies to every person, whether a current or past visitor, who accesses the Website, contacts us through the contact form, email link or WhatsApp link available on the Website, visits our offices, or attends any meeting, seminar, webinar, conference or event organised by us (collectively, "you" or "your").

2.2 This Policy does not apply to personal data we process while providing legal services to a client, or under any other contractual or commercial engagement. That processing is governed by the terms of the relevant engagement letter or contract, and by our professional duties of confidentiality as advocates.

3. Acceptance and Consent

3.1 By using the Website or by sharing your information with us, you confirm that you are legally competent to enter into a binding contract and that you have read, understood and accepted this Policy.

3.2 Where the law requires your consent, you give us your free, specific and informed consent to collect, use, store, share and disclose your information as described in this Policy, for the purposes set out in it.

3.3 If you do not agree with this Policy, in whole or in part, please do not use the Website or share any information with us.

4. Information We Collect

We collect only the limited information described below.

4.1 Contact form. When you submit the contact form on the Website, we collect your name, your email address and the contents of your message.

4.2 Email. When you write to us at hello@velmontchambers.com using the email link on the Website, we receive your email address, your name as it appears in your email account, the contents of your email and any attachments you choose to send.

4.3 WhatsApp. When you use the phone link on the Website, you are redirected to WhatsApp. If you message or call us there, we receive your phone number, your WhatsApp display name and profile picture (depending on your privacy settings), and the contents of any messages, voice notes or files you send.

4.4 Technical information. When you visit the Website, our hosting and service providers may automatically record certain technical information, such as your IP address, browser type, operating system, device type, the pages you view, the date and time of your visit, and the referring website ("Technical Information").

4.5 Information about other people. If you share with us any information about another individual, you confirm that you are entitled to do so and that you have obtained any consent from that individual that the law requires.

4.6 Sensitive information. We do not ask for, and you should not send us through the Website, any sensitive personal data such as passwords, financial or payment details, health or medical information, biometric data or information about sexual orientation. If you choose to include any such information in a message, you consent to us processing it only to the extent necessary to respond to you. Please also note Clause 2.4 of our Terms of Use: until we confirm an engagement in writing, we cannot guarantee that information sent to us will be treated as privileged or confidential.

4.7 Office visits, meetings and events. We may also collect your name, contact details, organisation and designation when you visit our offices to make an enquiry about or engage our services, or when you register for or attend any seminar, webinar, conference or event we organise. If you attend a meeting or event, you may also tell us about any accessibility or dietary requirements you have. Such information may reveal or suggest details of your health or other matters that could qualify as sensitive personal data under the SPDI Rules. You acknowledge and consent to our collecting this information solely to make appropriate arrangements for the relevant meeting or event, and we will keep it only for as long as needed for that limited purpose.

4.8 All information you share with us is provided voluntarily. You may choose not to share it, but if you do so, we may be unable to respond to your enquiry.

5. How We Use Your Information

5.1 We use your information for the following purposes (the "Purposes"):

(a) to read and respond to your enquiries, messages and requests;

(b) to decide whether we are able to act for you, including carrying out conflict checks before any engagement;

(c) to operate, maintain, secure and improve the Website and to diagnose technical problems;

(d) to keep internal records, and to meet our accounting, tax, regulatory and professional obligations;

(e) to detect, investigate and prevent fraud, misuse of the Website, security incidents or other unlawful activity;

(f) with your consent, to send you Insights articles, legal updates, or invitations to events and webinars that we think may interest you;

(g) to comply with applicable law, court orders or requests from lawful authorities, and to establish, exercise or defend legal claims; and

(h) to arrange and manage meetings at our offices and any seminars, webinars, conferences or events we organise, including making arrangements for any accessibility or dietary requirements you share with us.

5.2 We do not sell your personal data, and we do not use it for targeted advertising or automated decision-making.

6. Lawful Grounds for Processing

6.1 We process your personal data on one or more of the following grounds:

(a) your consent, which you may withdraw at any time under Clause 12;

(b) where you have voluntarily provided your personal data for a specified purpose (such as submitting an enquiry) and have not indicated that you do not consent to its use for that purpose; and

(c) any other legitimate use permitted under the DPDP Law or other applicable law, including compliance with legal obligations and the performance of functions required by law.

6.2 Our processing of Technical Information is necessary for us to operate a secure and functional website for information and communication purposes.

7. Communications and Opting Out

7.1 We will send you Insights articles, legal updates or event invitations only if you have asked to receive them or have otherwise consented.

7.2 You may stop receiving such communications at any time by using the unsubscribe link in the communication or by writing to us at hello@velmontchambers.com with the subject line "Unsubscribe". Opting out will not affect communications that relate to an ongoing enquiry or engagement.

8. Sharing and Disclosure

8.1 We may share your information, only to the extent necessary for the Purposes, with:

(a) service providers who support our operations, such as website hosting, form processing, email, cloud storage, IT support and security providers, who process information on our behalf and under our instructions;

(b) our professional advisers, auditors and insurers;

(c) where you have asked us to act for you, counsel, experts or other professionals whose involvement is necessary for your matter, subject to your instructions; and

(d) any successor entity, in the event of a reorganisation, merger or transfer of our practice, subject to that entity being bound by obligations equivalent to this Policy.

8.2 Website platform and form processing. The Website is built and hosted on Framer, a third-party website building and hosting platform, and submissions made through our contact form are processed by Formspark, a third-party form handling service. In particular:

(a) Framer hosts the Website and may automatically collect Technical Information when you visit it, which it may use to deliver the Website, keep it secure, and provide us with information about how the Website is used;

(b) Formspark receives, stores and forwards to us the name, email address and message you submit through the contact form[, and may apply spam-protection measures to submissions]; and

(c) both providers process your information on our behalf and under our instructions, and their handling of your information is also subject to their own privacy policies and terms, available on their respective websites.

8.3 We may also disclose your information where we believe in good faith that disclosure is necessary to:

(a) comply with applicable law, a court order, legal process or a lawful request from a government authority;

(b) protect our rights, property or safety, or those of our clients or others;

(c) prevent, detect or investigate a crime, or protect national security; or

(d) protect the personal safety of any individual or of the public.

8.4 We may share aggregated or anonymised information, which cannot reasonably identify you, with third parties for any lawful purpose.

9. Transfers Outside India

9.1 Some of our service providers, including Framer and Formspark, may store or process information on servers located outside India. By using the Website, you consent to such transfers.

9.2 Any such transfer will be made in compliance with applicable law, and we will not transfer personal data to any country or territory to which transfers are restricted by the Government of India under the DPDP Law.

10. Third-Party Services and Links

10.1 WhatsApp and email providers. When you contact us through WhatsApp or by email, your communications are also processed by those service providers (such as Meta Platforms, Inc. for WhatsApp) under their own terms and privacy policies. We have no control over how they collect, use or disclose your information and are not responsible for their practices.

10.2 Other websites. The Website may contain links to third-party websites, applications or resources, including social media platforms such as LinkedIn. We do not control those services and are not responsible for their collection or disclosure of your information. If you engage with us through any such service, your engagement will be governed by that service's terms and privacy policy, which we encourage you to read before sharing any information.

10.3 We will not be liable for any loss or damage you suffer as a result of the collection, use or disclosure of your information by any third-party service referred to in this Clause 10, or for any dispute between you and such a third party.

11. Cookies

11.1 The Website uses cookies and similar technologies. Details of the cookies we use, the purposes for which we use them, and how you can manage or disable them are set out in our Cookie Policy [link], which forms part of this Policy.

11.2 Information collected through cookies will be handled in accordance with this Policy and our Cookie Policy.

12. Your Rights

12.1 Subject to applicable law, you have the right to:

(a) obtain a summary of the personal data we hold about you and the processing activities we carry out on it;

(b) request that we correct, complete or update any inaccurate or incomplete personal data;

(c) request that we erase your personal data, unless we are required or permitted by law to retain it;

(d) withdraw any consent you have given, at any time, with the same ease with which you gave it;

(e) have your grievances addressed by our Grievance Officer; and

(f) nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

12.2 To exercise any of these rights, please write to our Grievance Officer at the contact details in Clause 22. We may need to verify your identity before acting on your request.

12.3 We may refuse or limit a request where fulfilling it would affect the rights of another person, where we must retain the information to comply with law or for the establishment or defence of legal claims, or where the request is otherwise not permitted by applicable law.

12.4 Withdrawing consent will not affect the lawfulness of any processing carried out before withdrawal. If you withdraw consent or request erasure, we may be unable to respond to your enquiry or continue any interaction with you.

12.5 If you are not satisfied with our response to your grievance, you may approach the Data Protection Board of India in accordance with the DPDP Law, once the relevant provisions are in force.

13. Security

13.1 We take reasonable physical, technical and organisational measures to protect your information from loss, misuse, unauthorised access, disclosure, alteration or destruction. These include:

(a) restricting access to personal data to those of our members, staff and service providers who need it for the Purposes and who are bound by confidentiality obligations;

(b) using service providers who maintain appropriate security safeguards; and

(c) periodically reviewing our collection, storage and processing practices.

13.2 If a personal data breach occurs, we will notify affected individuals and the relevant authorities where and as required by applicable law.

13.3 No method of transmission over the internet or of electronic storage is completely secure. We will not be responsible for any security breach, or for any act of a third party or any event beyond our reasonable control, including acts of government, hacking, unauthorised access to computer systems or storage devices, system failures or the compromise of encryption.

14. Retention

14.1 We keep personal data only for as long as it is needed for the Purposes for which it was collected, or for as long as retention is required or permitted by law, including for record keeping, regulatory compliance, conflict checks and the establishment or defence of legal claims.

14.2 Once retention is no longer necessary, we will erase or anonymise your personal data within a reasonable period, and in any case within five (5) years.

14.3 We may retain and use information that has been anonymised or aggregated, so that it no longer identifies you, for as long as it is useful to us.

15. Children

The Website is not directed at individuals under 18 years of age, and we do not knowingly collect their personal data. If you are under 18, please contact us only through a parent or lawful guardian. If we learn that we have received a child's personal data without verifiable parental consent, we will delete it.

16. Users Outside India

If you access the Website from outside India, you do so on your own initiative and at your own risk, and you are responsible for complying with the laws of your location. Your information will be processed in India, and in any other country referred to in Clause 9, in accordance with this Policy.

17. Changes in Law

If the data protection laws applicable in India change, you consent to our continued collection, use, storage and disclosure of your information to the fullest extent the amended law permits. We may contact you to seek any further consent or approval the amended law requires. If you choose not to provide it, we may be unable to continue responding to you or interacting with you.

18. Changes to This Policy

We may revise this Policy at any time by publishing an updated version on the Website with a revised "Last updated" date. Your continued use of the Website after such publication will signify your acceptance of the revised Policy. If you do not agree with the revised Policy, please stop using the Website and do not share any further information with us.

19. Disclaimer

While we are committed to protecting your privacy, we cannot guarantee that your information will never be disclosed in a manner not described in this Policy, and you should not assume that your information or communications will always remain private. You are solely responsible for your use of the Website and of the internet generally, for the information you share or access, and for your conduct online.

20. Indemnity

You agree to indemnify and hold Velmont Chambers harmless in respect of any claim, suit or dispute brought by any third party arising out of (a) information you disclose to any third party, whether through the Website or otherwise, or (b) your use of or access to any third-party website, application or resource. We accept no liability for any act or omission of any third party in relation to information you have disclosed to that third party.

21. Governing Law and Disputes

This Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy will be resolved in accordance with the provisions on governing law, dispute resolution and time limit for claims set out in our Terms of Use.

22. Grievance Officer and Contact

In accordance with the IT Act, the SPDI Rules and the DPDP Law, you may direct any questions, requests or grievances about this Policy or the processing of your personal data to our Grievance Officer:

Mr. Akash Mehrotra
Grievance Officer, Velmont Chambers
Email: akash@velmontchambers.com

We will acknowledge and respond to grievances within the period prescribed by applicable law.