Privacy Policy

True North Legal Partners Last Updated: April 21, 2026 Effective Date: April 21, 2026

---

1. Introduction

True North Legal Partners (“the Firm,” “we,” “us,” or “our”), a registered legal practice with advocates enrolled under the Bar Council of India, is committed to protecting the privacy and confidentiality of all individuals who visit our website at truenorthlegal.in or engage with our services.

This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have with respect to your data. It is drafted in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

By accessing this website or submitting information to us, you acknowledge that you have read and understood this Policy.

---

2. Scope

This Policy applies to:

• Visitors to truenorthlegal.in
• Prospective clients who complete our “Find Your Direction” or self-assessment forms
• Existing and former clients of the Firm
• Correspondents who contact us via email, phone, or any other channel

It does not apply to third-party websites linked from our website. We are not responsible for the privacy practices of those external sites.

---

3. Information We Collect

3.1 Information You Provide Directly

• Contact details: Name, email address, phone number, postal address
• Matter-related information: Details of your legal query or situation submitted through intake or assessment forms
• Identity documents: Where required for client onboarding (e.g., Know Your Client compliance), copies of government-issued ID
• Financial information: Limited financial details shared in the context of Banking & Finance, Property, or White-Collar matters

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent, and navigation path (via cookies or analytics tools)
• Referring URLs

3.3 Sensitive Personal Data or Information (SPDI)

In the course of legal representation, we may collect SPDI as defined under applicable Indian law, including financial records, legal history, and information relating to offences or proceedings. Such data is collected only with your explicit consent and strictly for the purposes of rendering legal services.

---

4. How We Use Your Information

We use your information for the following purposes:

We do not use your personal data for unsolicited marketing without your explicit consent.

---

5. Attorney-Client Privilege & Confidentiality

All communications between the Firm and its formally engaged clients are subject to attorney-client privilege under applicable Indian law. We maintain strict professional secrecy in accordance with the Bar Council of India Rules of Professional Conduct and Etiquette.

Please note: Information submitted through website forms or email prior to the execution of a formal engagement agreement may not be treated as privileged. Do not transmit sensitive or confidential information before a formal attorney-client relationship has been established.

---

6. Sharing of Information

We do not sell, rent, or trade your personal data. We may share information only in the following limited circumstances:

• Within the Firm: Shared among our advocates and staff on a need-to-know basis to service your matter
• Service providers: Trusted third parties (e.g., IT support, cloud storage, billing software) who process data solely on our behalf under written confidentiality agreements
• Courts, tribunals, and regulators: As required by law, court order, or regulatory mandate
• Opposing counsel and parties: To the extent required in the course of litigation or dispute resolution
• Professional advisors: Accountants, consultants, or co-counsel engaged under confidentiality obligations
• Law enforcement: Where legally compelled or required to prevent serious harm

---

7. Cookies and Tracking Technologies

Our website uses cookies to:

• Ensure proper website functionality (essential cookies)
• Analyse traffic and usage patterns (analytics cookies)
• Retain your preferences across sessions

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not use cookies for targeted advertising.

---

8. Data Retention

We retain your personal data for as long as:

• An active attorney-client relationship exists
• Required by law, professional rules, or statute of limitations applicable to the matter handled
• Necessary for legitimate business purposes (e.g., billing records, conflict-of-interest archives)

Generally, client matter files are retained for a minimum of 7 years following closure, in accordance with professional and tax compliance requirements. Website contact data is retained for 12 months from the date of last interaction unless converted into an active matter.

---

9. Data Security

We implement appropriate technical and organisational measures to safeguard your data, including:

• Encrypted data storage and transmission (SSL/TLS)
• Access controls limiting data to authorised personnel
• Regular security assessments
• Confidentiality training for all staff

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

---

10. Your Rights

Under the Digital Personal Data Protection Act, 2023, and applicable Indian law, you have the right to:

• Access: Request a summary of personal data we hold about you
• Correction: Request rectification of inaccurate or incomplete data
• Erasure: Request deletion of your data, subject to legal and professional retention obligations
• Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 13)
• Withdrawal of Consent: Where processing is based on consent, withdraw it at any time (without affecting the lawfulness of prior processing)

To exercise any of these rights, please contact us in writing at the address in Section 13. We will respond within 30 days.

---

11. Cross-Border Data Transfers

We primarily store and process data within India. In limited cases where third-party service providers are located outside India, we ensure that appropriate safeguards are in place, consistent with the requirements of the DPDP Act, 2023.

---

12. Children’s Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

---

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have designated the following Grievance Officer:

Name: Rajesh Kumar, Founding Partner & Principal Counsel Firm: True North Legal Partners Address: Sabari Complex, Field Marshal Cariappa Rd, Shanthala Nagar, Ashok Nagar, Bengaluru, Karnataka – 560025 Email: admin@truenorthlegal.in Phone: +91 81972 13540

Grievances will be addressed within 30 days of receipt.

---

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The revised version will be posted on this page with an updated “Last Updated” date. We encourage you to review this Policy periodically.

Material changes that affect how we handle your personal data will be communicated to active clients via email.

---

15. Governing Law

This Privacy Policy is governed by the laws of the Republic of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of Bengaluru, Karnataka.

---

True North Legal Partners — Bar Council of India Registered Advocates. This Privacy Policy is drafted for informational and operational purposes and does not itself constitute legal advice.