Privacy Policy

Scope

This Privacy Policy applies to:

• website visitors;
• prospective clients;
• existing clients;
• individuals who submit inquiries through our website, email, phone, WhatsApp, LinkedIn or other communication channels;
• and any other individuals whose personal data we process in connection with our advisory services or website operations.

Personal Data We May Collect

We may collect the following categories of personal data:

• Identification and contact details: name, email address, phone number, designation, company name, location and business type.
• Inquiry and communication data: information submitted through forms, emails, calls, messages, consultation requests, documents shared for advisory purposes, and prior correspondence.
• Professional and business information: company profile, transaction details, contract requirements, compliance concerns, legal matter descriptions, and other professional information voluntarily provided in connection with an inquiry or engagement.
• Website and technical data: IP address, browser type, device information, pages visited, referral source, usage patterns, and other standard technical data generated through website interactions.
• Sensitive or confidential information: only where voluntarily provided or necessary for a legal engagement. We request that individuals avoid submitting sensitive information through website forms prior to a formal engagement being confirmed.

Purpose of Processing

We may process personal data for the following purposes:

• to respond to inquiries and consultation requests; to assess whether we can assist you; to provide legal advisory, drafting, and structuring services;
• to communicate with clients and prospective clients;
• to prepare proposals, engagement letters, invoices and professional records;
• to improve website functionality and user experience;
• to comply with legal, regulatory, tax, accounting and professional obligations;
• to protect our rights, prevent misuse, and maintain website security.

Legal Basis for Processing

Where applicable, we process personal data on one or more of the following bases:

• consent;
• performance of a contract or pre-contractual steps;
• legitimate business and professional interests;
• compliance with legal or professional obligations;
• protection of legal rights and interests.

Privacy and Data Protection Frameworks

Depending on the location of the individual, nature of the engagement, and applicable law, our privacy practices may be informed by:

• the General Data Protection Regulation (GDPR);
• India's Digital Personal Data Protection Act, 2023 (DPDP Act);
• California privacy laws including CCPA/CPRA, where applicable;
• applicable Personal Data Protection Law frameworks in Middle East jurisdictions;
• and healthcare privacy frameworks such as HIPAA where relevant to healthcare-related advisory or documentation.

Cookies and Tracking Technologies

Biz Soter does not intentionally use non-essential cookies, advertising trackers, behavioural analytics tools, or similar third-party tracking technologies on this website.

Limited technical mechanisms associated with website hosting, security, functionality, or communication processes may necessarily involve the generation or storage of certain technical data. Such data is used solely for operational and security purposes and is not used for advertising or behavioural profiling.

Sharing and Disclosure of Personal Data

We do not sell personal data. We may share personal data only where necessary, including with:

• website hosting providers;
• email and communication service providers;
• payment, accounting or administrative service providers;
• professional advisors;
• regulatory, legal or governmental authorities where required by law;
• and third parties where necessary for service delivery and subject to appropriate confidentiality obligations.

International Data Transfers

As Biz Soter provides legal advisory services to clients across jurisdictions, personal data may be accessed, stored or processed outside India in connection with advisory services, communication tools, or hosting infrastructure.

Where applicable, we take reasonable steps to ensure that cross-border transfers are subject to appropriate safeguards, consistent with applicable data protection requirements.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal advisory and professional service obligations, statutory retention requirements, tax and accounting obligations, and professional liability considerations.

When personal data is no longer required, we take reasonable steps to delete, anonymise or securely restrict access to such data, in accordance with applicable law and professional obligations.

Your Privacy Rights

Subject to applicable law, you may have the following rights:

• Right to access your personal data.
• Right to correction or rectification of inaccurate or incomplete data.
• Right to erasure or deletion, subject to legal, professional or contractual retention requirements.
• Right to restrict processing in certain circumstances.
• Right to object to certain forms of processing.
• Right to withdraw consent where processing is based on consent.
• Right to data portability where applicable.
• Right to know the categories of personal data collected, used or disclosed, where applicable.
• Right to opt out of sale or sharing of personal data, where applicable. Biz Soter does not sell personal data.
• Right to non-discrimination for exercising applicable privacy rights.

To exercise any applicable right, please contact us at the details provided in Section 16 below.

Confidentiality and Lawyer-Client Relationship

Users should avoid submitting confidential, privileged or sensitive information through website forms unless a formal engagement has been confirmed. Information submitted prior to formal engagement may not be subject to the same professional confidentiality protections that apply within an established engagement.

Data Security

We implement reasonable technical, organisational and administrative safeguards to protect personal data against unauthorised access, disclosure, alteration or destruction.

However, no online transmission or storage system can be guaranteed to be completely secure. If you have reason to believe that your interaction with us has been compromised, please contact us immediately.

Third-Party Links, Children's Privacy & Updates

Third-Party Links: Our website may contain links to third-party websites, platforms or resources. We are not responsible for the privacy practices or content of such third-party sites. We encourage users to review the privacy policies of any external websites they visit.

Children's Privacy: Our website and services are intended for business, professional and adult users. We do not knowingly collect personal data from individuals under the age of 18. If we become aware of such collection, we will take appropriate steps to delete the relevant data.

Updates: We may update this Privacy Policy from time to time to reflect legal, regulatory, operational or website-related changes. Updates will be published on this page with a revised effective date. Continued use of the website after such updates constitutes acceptance of the revised policy.

Contact

For privacy-related requests, concerns or questions, you may contact: