Privacy Policy

1. Introduction

NexEra Legal LLP ("we," "us," "our," or "Company") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

3. How We Use Your Information

• Provide legal services and consultations
• Respond to inquiries and requests
• Send case updates and communications
• Analyze website usage and improve services
• Comply with legal obligations
• Marketing and promotional communications by email, phone/SMS and WhatsApp — only where you have given separate, specific consent for this on our enquiry form or elsewhere. This is optional and distinct from the consent you give to have your enquiry assessed
• Prevent fraud and enhance security

You can withdraw marketing consent at any time — as easily as you gave it — by writing to anmol.singla@nexeralegal.co.in, without affecting our ability to respond to your underlying enquiry or provide legal services. Withdrawal does not affect the lawfulness of any marketing communication sent before you withdrew. For calls, SMS and WhatsApp marketing, we also honour registrations on the National Customer Preference Register / Do Not Disturb (NDNC) as required under TRAI's Telecom Commercial Communications Customer Preference Regulations.

4. Legal Basis for Processing (GDPR)

For EU residents, we process your data based on:

• Contractual Necessity: Processing necessary to provide legal services
• Consent: Your separate, explicit consent for marketing communications and (where used) analytics
• Legal Obligation: Compliance with court orders and regulations
• Legitimate Interest: Business operations, security, and fraud prevention

5. Data Sharing

We do not sell your personal data. We may share information with:

• Service Providers: Hosting, analytics, and communication platforms
• Legal Authorities: When required by law or court order
• Affiliates: For service delivery and case management
• Business Partners: With your explicit consent only

6. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected for, and no longer:

• Case & client data: retained for the duration of the engagement plus statutory limitation periods (typically 3-6 years in India).
• Case assessment enquiries that do not become a matter: if you submit our Free Case Assessment form and do not go on to engage us, we retain that enquiry (your contact details and claim information) for up to 6 months from your submission, to allow for follow-up, and then delete it. You can request earlier deletion at any time.
• Marketing opt-ins: if you separately consented to marketing communications, we retain your contact details for that purpose until you withdraw consent or unsubscribe, after which we stop using it for marketing and delete it unless retained for another stated purpose.

You can request deletion of non-case data at any time by writing to anmol.singla@nexeralegal.co.in.

7. Your Rights

8. India Compliance (DPDP Act, 2023 & IT Rules, 2011)

NexEra Legal is a Data Fiduciary under the Digital Personal Data Protection Act, 2023, and also complies with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Accordingly, we:

• Give you a clear, itemised notice before or at the time we ask for your consent, setting out what data we collect and the purpose for it
• Collect consent that is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action — we never pre-tick consent boxes
• Limit collection to the personal data necessary for the stated purpose (data minimisation)
• Process your data only for the purpose for which consent was given
• Let you withdraw consent at any time, as easily as you gave it, and stop processing within a reasonable time of withdrawal
• Erase personal data once the purpose is served and retention is no longer required by law
• Implement reasonable security safeguards to prevent personal data breaches, and notify affected users and the Data Protection Board of India of any breach as required
• Maintain client confidentiality as required by legal ethics and the Bar Council of India rules

Where our processing is based on your consent, the lawful basis under the DPDP Act is your consent. Where we process data to provide legal services you have requested, or to comply with a legal obligation or court direction, we may rely on legitimate uses permitted under Section 7 of the Act.

9. Security Measures

We implement technical, administrative, and physical safeguards including:

• SSL encryption for data transmission
• Secure access controls and authentication
• Regular security audits and updates
• Confidentiality agreements with staff and partners
• Incident response procedures

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal information.

11. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes become effective upon posting to the website. Your continued use indicates acceptance of the updated policy.

13. Contact Us

For questions, requests, or complaints regarding this Privacy Policy:

If you are not satisfied with how we have handled your grievance, you have the right to escalate your complaint to the Data Protection Board of India.

14. Data Processing Addendum (DPA)

Clients located in the EU may request a Data Processing Addendum (DPA) for compliance with GDPR Article 28. Please contact us for more information.