Privacy Policy

This policy explains how Ziama Legal LLP handles personal data collected through www.ziamalegal.com and in our legal practice. It is issued under India’s Digital Personal Data Protection Act, 2023 and its Rules, and the Information Technology Act, 2000. It also covers the GDPR where that applies (see Section 9).

On request, this policy is available in any language listed in the Eighth Schedule to the Constitution of India.

Contacting us does not create a lawyer–client relationship. Please don’t send confidential information until we confirm that we can act for you. Once you are our client, our terms of engagement and professional privilege also protect your information.

When you contact us, we collect your name, email, phone number and organisation. We use these to reply to you, check for conflicts of interest, and provide our services. If you instruct us on a matter, we also collect your instructions, documents and billing details. We use these to advise you, bill for our work, and meet our legal obligations.

If you apply for a job or internship, we use your CV and qualifications to assess your application. If you sign up for our newsletter, we use your name and email to send you the updates you requested. When you visit the Website, we collect technical data such as your IP address, browser type, the pages you visit, and cookie information. We use this to run and secure the Website.

We may also receive personal data from clients, other parties, courts or public records when a matter requires it. Giving us your data is voluntary. However, without it we may not be able to help you. We do not make automated decisions about you.

We use your data either with your consent or where the law otherwise permits. For example, the law permits us to use data you have given us for a specific purpose, and to use data to comply with our legal obligations. Processing needed to enforce or defend legal rights or claims is exempt from some obligations under Section 17 of the DPDP Act.

You can withdraw your consent at any time by emailing privacy@ziamalegal.com or by unsubscribing from our emails. We will then stop using your data within a reasonable time, unless the law requires us to keep it.

We never sell personal data. We share it only with our IT, hosting, email and payment providers, who are bound by contract; with co-counsel or experts working on your matter; and with courts or authorities when the law requires it.

Your data may be stored on servers outside India. We do this only in countries the Government of India permits, and with appropriate safeguards in place.

We keep matter files for three (3) years after a matter closes. We keep enquiries and job/internship applications for twenty-four (24) months. We keep system logs for at least one year, as the law requires. After these periods, we delete the data securely.

We use reasonable safeguards to protect your data, including encryption, access controls and backups. If a breach affects your data, we will inform you and the Data Protection Board of India as the law requires.

You have the right to access your personal data, including information about who we have shared it with. You can also ask us to correct, update or erase it, and you can withdraw your consent at any time. You may nominate someone to exercise these rights on your behalf if you die or become incapacitated. You also have the right to raise a complaint with us.

To make a request, email privacy@ziamalegal.com with your name and the contact details you used with us. We will respond within thirty (30) days. Some requests may be limited by law or by professional privilege.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

The Website is not meant for anyone under the age of 18 years. We process the data of a child, or of a person with a disability who has a lawful guardian, only with the verifiable consent of a parent or lawful guardian.

We use essential cookies to run the Website. We use analytics cookies only with your consent.

We send newsletters only if you opt in. Every email includes an unsubscribe link.

If the GDPR or UK GDPR applies to you, we rely on four legal bases. We rely on contract to provide our services, and on legal obligation for record-keeping. We rely on our legitimate interests to run and secure our practice and to defend legal claims. We rely on your consent for newsletters and analytics.

You also have the right to restrict or object to our processing of your data, and to receive your data in a portable format. You can complain to your local data protection authority; in the UK, this is the Information Commissioner’s Office.

Where transfers of your data outside the EU or UK need safeguards, we use Standard Contractual Clauses.

For any privacy question, request or complaint, please contact Sonam Griyaghey, Partner / Founder, at privacy@ziamalegal.com or +91 98736 48120, or write to us at 306, Meera’s Empire, Goregaon West, Mumbai, 400 104.

We may update this policy from time to time. The current version, with its date, will always be on this page.

Last updated: 23 September 2026