Privacy notice
What this website does with personal data, written for the Digital Personal Data Protection Act 2023. The short answer is that the site collects nothing on a server and the enquiry form sends nothing until you send it yourself.
Version 1.0, effective 23 August 2026
This notice explains what VR1 Associates does with personal data collected through this website. It is written for the Digital Personal Data Protection Act 2023 and the rules made under it, which are being brought into force in stages. Where a provision of that framework is not yet in force, we are applying the standard set out here anyway.
The short version
This website has no server behind it that collects anything about you. There is no analytics, no advertising network, no tracking pixel, and no third party script. The only personal data VR1 Associates receives from this site is what you type into the enquiry form and then choose to send yourself, using your own email application or WhatsApp.
What is stored in your browser
Two small items are kept in your own browser's local storage, on your device. They are not sent anywhere and they are not readable by us.
- Your theme choice. So the site opens in dark or light the way you left it.
- Your acknowledgement of the storage notice. So the notice does not appear on every page.
Clearing your browser data removes both. Nothing on this site sets an advertising or analytics cookie, so there is no consent choice to make about one, and we do not pretend to offer you a choice that would have no effect.
The tools on this site
The limitation calculator, the appeal planner, the compliance calendar and the matter triage all run entirely inside your browser. Any date, figure or selection you enter stays on your device and is not transmitted. The desk assistant is the same: it is a fixed set of answers held in the page, not a service, and nothing you type into it is sent anywhere.
What the enquiry form collects, and why
The form asks for your name, your email address, and optionally your organisation and phone number, together with what has happened in your matter. We ask for these to respond to your enquiry and, if an engagement follows, to carry it out. That is the only purpose, and we do not use these details for marketing you have not asked for.
When you press prepare, your browser composes a message and opens it in your own email application or in WhatsApp. Nothing is transmitted from this page. You read the message and you send it. If you send by WhatsApp, that message travels through the WhatsApp service under its own terms before it reaches us.
Please do not attach a notice, an order or any document at the enquiry stage. Once an engagement is in place we will tell you how to send documents properly.
The basis on which we process it
Consent. You give it by ticking the box on the form, having read this notice, and you can withdraw it at any time by writing to the contact on the grievance page. Withdrawal does not affect anything done before it, and where we are required to retain a record by law we will say so.
We do not knowingly collect personal data of a child through this website. Where verifiable parental consent is required under the law for any processing, we will obtain it.
Where it is kept, and for how long
An enquiry that reaches us becomes an ordinary business record of the firm, held in India. Enquiries that do not lead to an engagement are kept only as long as needed to deal with the enquiry and any follow up. Where an engagement follows, the file is retained for the period the firm's professional and statutory record keeping requires, and then it is disposed of.
Who else sees it
People inside the firm who are working on your matter. Beyond that, only where the law requires disclosure, or where you have asked us to deal with someone on your behalf. We do not sell personal data and we do not share it for anyone else's marketing.
Your rights
- Access. A summary of the personal data of yours we hold and what we have done with it.
- Correction and completion. Correction of anything inaccurate, and completion of anything incomplete.
- Erasure. Erasure of personal data we no longer need for the purpose it was given, subject to any legal requirement to retain it.
- Grievance redressal. A route to complain, set out on the grievance page, and a further route to the Data Protection Board of India if you are not satisfied.
- Nomination. To nominate another person to exercise these rights in the event of your death or incapacity.
Security
This site is served over an encrypted connection and it holds no database. Enquiries that reach the firm are kept on access controlled systems, and access is limited to those who need it for the matter. No system is perfect and we do not claim otherwise. Where a personal data breach affects you, we will notify you and the Board as the framework requires.
Links to other sites
Where this site refers to a government portal or another external site, that site is governed by its own privacy practices, not by this notice.
Changes
If this notice changes, the version and the effective date at the top of the page change with it. Material changes affecting how we use data already given will be communicated to the people affected.
Contact
Questions about this notice, or a request to exercise any of the rights above, go to the contact on the grievance page. That page carries the name, designation, email and postal address of the person responsible, together with the timelines we work to.