Privacy Policy

Kshetry & Co. ("we," "us," "our," or "the firm") is committed to protecting your privacy and ensuring transparency in how we collect, use, and manage your personal data. This Privacy Policy explains our data practices for visitors to our website, clients, prospective clients, employees, and other individuals who interact with us. This policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR), the Personal Data Protection Act (PDPA), and other relevant jurisdictional requirements.

We collect personal data in the following ways:

Our website uses cookies and similar tracking technologies to:

• •Remember your preferences and login information (session cookies)
• •Analyze website usage and improve our digital experience
• •Deliver personalized content and recommendations
• •Measure the effectiveness of marketing campaigns
• •Prevent fraud and enhance security

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect your ability to access certain features of our website.

We use personal data for the following purposes:

• •Providing legal services: Delivering consultation, advisory, and representation services
• •Communication: Responding to inquiries, sending updates, and maintaining correspondence
• •Business development: Understanding client needs, sending marketing materials (with consent)
• •Compliance: Meeting regulatory, tax, and legal obligations across jurisdictions
• •Quality assurance: Improving our services and client experience
• •Website operation: Maintaining and optimizing our digital platforms
• •Analytics: Understanding visitor behavior and improving user experience
• •Dispute resolution: Managing complaints, legal disputes, or regulatory investigations
• •Due diligence: Conducting background checks for prospective clients and partners

We do not sell or rent your personal data. However, we may share information in the following circumstances:

We retain personal data for as long as necessary to provide services and fulfill legal obligations. Retention periods vary by data type:

• •Client files: Retained for the duration of engagement plus 7–10 years (or as required by law)
• •Email communications: Typically retained for 2–3 years or longer for active matters
• •Website analytics: Generally retained for 12–24 months
• •Marketing data: Retained until you opt out or 3 years from last interaction

Upon request, we will delete personal data no longer needed, subject to legal obligations and litigation holds.

We implement comprehensive technical, administrative, and physical security measures to protect your data:

• •SSL/TLS encryption for website communications
• •Secure password management and multi-factor authentication
• •Regular security audits and vulnerability assessments
• •Access controls limiting data access to authorized personnel only
• •Secure backup and disaster recovery procedures
• •Confidentiality agreements with employees and contractors

While we strive to protect your data, no security system is impenetrable. We cannot guarantee absolute protection against all risks, including unauthorized access or data breaches.

Depending on your jurisdiction, you may have the following rights:

• •Right to Access: Request a copy of your personal data
• •Right to Rectification: Request correction of inaccurate data
• •Right to Erasure: Request deletion of your data (subject to legal constraints)
• •Right to Data Portability: Receive your data in a portable format
• •Right to Object: Object to processing of your data for marketing or profiling
• •Right to Restrict Processing: Request limitation on how we use your data
• •Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at privacy@kshetryco.com with clear details of your request.

Kshetry & Co. operates in multiple jurisdictions (India, UAE, UK, USA, Thailand). Your personal data may be transferred to, stored in, or processed in any of these countries. Where required by law (such as GDPR), we ensure appropriate safeguards are in place, including Standard Contractual Clauses, adequacy decisions, or your explicit consent. By using our website or engaging with us, you consent to such transfers.

Information shared with our attorneys in the course of seeking legal advice is protected by attorney-client privilege. This means such communications are confidential and cannot be disclosed without your consent, except as required by law or professional conduct rules. This protection applies only to communications with Kshetry & Co. after a formal attorney-client relationship has been established.

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we discover that a minor has provided personal information, we will delete such data immediately. If you believe a child has submitted information to us, please contact privacy@kshetryco.com.

In the event of a data breach that compromises the security or privacy of personal data, we will notify affected individuals without unreasonable delay, and no later than the timeframes required by applicable law. Notifications will include details of the breach, the data affected, and recommended protective measures.

Our website may contain links to external websites and social media platforms. We are not responsible for the privacy practices of these third-party sites. We recommend reviewing their privacy policies before providing any personal information.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated via email or posted prominently on our website. Your continued use of our website following such changes constitutes acceptance of the updated policy.