PRIVACY POLICY

This Privacy Policy (“Privacy Policy“) sets forth Obhan Mason’s commitment to respecting your online privacy and recognises your need for appropriate protection and management of any Personal Data (as defined hereinafter) you share with us.

Obhan Mason Processes (as defined hereinafter) Personal Data strictly in accordance with applicable Indian law including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (“Applicable Law“). This Privacy Policy describes specifically how we collect, use, store, disclose, and protect your Personal Data when you use or access our website www.obhanmason.com (“Website“).

  1. ScopeThis Privacy Policy applies to all individuals whose Personal Data is collected by us. It does not, however, apply to information that you provide to, or that is collected by, any third-party, such as social networks that you use in connection with our services. We encourage you to consult directly with such third parties about their privacy practices.
  2. Definitions
    • “Data Fiduciary” means any person who alone or in conjunction with other persons determines the purpose and means of Processing Personal Data.
    • “Data Processor” means any person who Processes Personal Data on behalf of a Data Fiduciary.
    • “Person” includes an individual, a Hindu undivided family, a company, a firm, an association of persons or a body of individuals, whether incorporated or not, the State, and every artificial juristic person, not falling within any of the preceding categories.
    • “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
    • “Processing” or “Process” means a wholly or partly automated operation or set of operations performed on Personal Data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.
  3. The Personal Data We CollectWe collect Personal Data in the manner detailed in this Policy. This Personal Data may include:
    • Name;
    • Email Address;
    • Device identifiers (including IP Address, Device ID);
    • Domain and host from which you access the internet; and
    • Browsing behaviour and activity;

    We may also collect other forms of Personal Data that you provide to us voluntarily, or Personal Data that is mentioned in the Consent Notice presented to you at the point of collection.

  4. How and When We Collect Your Personal DataWe collect the afore-mentioned Personal Data through various channels including when you:
    • Access or browse our Website;
    • Contact us through service channels (contact us page on the Website, phone, email);
    • Apply for employment or business partnerships with us;
    • Through cookies and similar technologies on our Website; and
    • Visit our office(s).
  5. Why and How We Use Your Personal DataWe collect your Personal Data only after you have consented to that Personal Data being collected by us and Processed for the limited purpose for which you have provided your consent. This consent to Process your Personal Data to carry out the purpose is obtained through the Consent Notice provided to you at the time of providing the Personal Data. We may also Process your Personal Data in certain specific cases provided for or mandated by Applicable Law. Some of the purposes for which we may Process your Personal Data and the uses enabled by it include:
    • For responding to queries or requests submitted via our contact forms;
    • For compliance with legal, regulatory, statutory, and contractual obligations;
    • For providing legal news, updates, newsletter and related product or service information; and
    • For any other purpose specifically disclosed to you at the time of collection or as consented to by you.
  6. Data Retention and DeletionWe will retain your Personal Data, together with associated traffic data and logs of Processing activities, for a minimum period of 1 (one) year from the date of such Processing, or longer as necessary to fulfil the stated purposes or as required under Applicable Law. Once this period ends, we will securely delete your Personal Data. At least 48 (forty-eight) hours before erasure, we will notify you so that you may choose to log in to your account or contact us if you wish to retain your data.
  7. Disclosure of Personal DataWe may also use your Personal Data to deliver information to you that, in some cases, are targeted to your interests. The following are some circumstances under which and people to whom we would share your information with from time-to-time:
    • to our trusted partners, associates, attorneys and other Data Processors who work on behalf of or with us under confidentiality agreements. These entities may use your Personal Data for purposes of responding to your requests or otherwise as necessary;
    • to respond to summons, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
    • to share Personal Data in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of the Terms of Use and Privacy Policy, or as otherwise required by law;
    • from time to time, to reveal general statistical information about our Website and visitors, such as number of visitors, number and type of services purchased, etc.; and
    • Government agencies mandated under the law to obtain information including sensitive personal data or information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences.
  8. Children’s DataWe do not knowingly collect or Process Personal Data of children (i.e. individuals under the age of 18 (eighteen) years) without verifiable parental consent. If we become aware that we have collected Personal Data from a child without valid consent, we will delete such Personal Data promptly.
  9. Updates to this Privacy PolicyWe reserve the right to update, change or modify this Privacy Policy at any time. Any material amendments to this Privacy Policy shall be communicated through our Website and/or email.
  10. Governing Law and Dispute ResolutionThis Privacy Policy and the Terms of Use shall be governed by and constructed in accordance with the laws of India only without reference to conflict of laws principles and disputes arising in relation hereto shall be subject to the exclusive jurisdiction of the courts of New Delhi, India.
  11. Data SecurityWe implement stringent technical and organizational measures to protect your Personal Data and are committed to protecting you from unauthorized access, alteration, disclosure, or destruction of Personal Data we hold.
  12. Acting as Data ProcessorWhere we Process Personal Data on behalf of a Data Fiduciary, we do so strictly in accordance with their lawful instructions. For any queries to exercise your rights, please contact the relevant Data Fiduciary directly.
  13. Your Rights You are entitled to the following rights in relation to your Personal Data:
      • Right to access your Personal Data:

    You have the right to obtain a summary of your Personal Data being Processed and the identities of all Data Processors with whom your Personal Data has been shared.

      • Right to withdraw consent:

    You have the right to withdraw your consent to the Processing of your Personal Data at any time. Upon such withdrawal, we will cease Processing your Personal Data, unless required by law.

      • Right to request correction and erasure of your Personal Data:

    You have the right to request the correction, completion, updation of your Personal Data if it is inaccurate or misleading. You may also request the erasure of your Personal Data if it is no longer necessary for the purposes for which it was collected.

      • Right to Grievance Redressal:

    In case of any concerns regarding the Processing of your Personal Data, you may raise your grievance with our designated Grievance Officer. If unsatisfied with our response, you may escalate the matter to the appropriate authority including the Data Protection Board of India.

      • Right to nominate:

    You may nominate another individual, who in the event of your death or incapacity may exercise your rights.

      • Right to Access this Privacy Policy in Other Languages:

    You have the option to access the contents of this Privacy Policy in Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Malayalam, Manipuri, Marathi, Maithili, Nepali, Oriya, Punjabi, Sanskrit, Santhali, Sindhi, Tamil, Telugu, or Urdu.

    Requests to exercise these rights may be made raising a request in writing to our Grievance Officer at the contact details provided below.

  14. Grievance Redressal For complaints or concerns regarding your Personal Data, please contact our Grievance Officer:

    We aim to resolve all grievances within timelines prescribed under Applicable Law.

  15. Complaint to the Data Protection Board In case you are not satisfied with the actions we have taken in relation to the exercise of your rights, you may make approach the Data Protection Board of India in accordance with Applicable Law.