Privacy Policy

Last updated: June 2026

1. Introduction

NexEra Legal LLP ("we", "us", "our") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information.

2. Information we collect

Information you provide directly:

Name, email address, phone number
Business information and details of your matter
Case information shared during consultations
Communications and correspondence

Information collected automatically:

IP address and browser information (standard server logs kept by our hosting provider)
Device type and operating system
Referring URL and navigation data

3. How we use your information

Provide legal services and consultations
Respond to enquiries and requests
Send case updates and communications
Comply with legal obligations
Prevent fraud and enhance security
Marketing and promotional communications by email, phone/SMS and WhatsApp, only where you have given separate, specific consent for this on our enquiry form or elsewhere. This is optional and distinct from the consent you give for your enquiry to be assessed

You can withdraw marketing consent at any time, as easily as you gave it, by writing to anmol.singla@nexeralegal.co.in, without affecting our ability to respond to your underlying enquiry or provide legal services. Withdrawal does not affect the lawfulness of any marketing communication sent before you withdrew. For calls, SMS and WhatsApp marketing we also honour registrations on the National Customer Preference Register / Do Not Disturb (NDNC) as required under TRAI's Telecom Commercial Communications Customer Preference Regulations.

4. Legal basis for processing (GDPR)

For EU and UK residents, we process your data on the following bases:

Contractual necessity: processing necessary to provide legal services
Consent: your separate, explicit consent for marketing communications and (where used) analytics
Legal obligation: compliance with court orders and regulations
Legitimate interest: business operations, security and fraud prevention

5. Data sharing

We do not sell your personal data. We may share information with:

Service providers: hosting and communication platforms
Legal authorities: when required by law or court order
Affiliates: for service delivery and case management
Business partners: with your explicit consent only

6. Data retention

We retain personal data only for as long as necessary for the purpose it was collected for, and no longer.

Case and client data: retained for the duration of the engagement plus statutory limitation periods (typically 3-6 years in India).
Enquiries that do not become a matter: if you submit our enquiry form and do not go on to engage us, we retain that enquiry (your contact details and the information you gave) for up to 6 months from submission, to allow for follow-up, and then delete it. You can request earlier deletion at any time.
Marketing opt-ins: if you separately consented to marketing communications, we retain your contact details for that purpose until you withdraw consent or unsubscribe, after which we stop using them for marketing and delete them unless retained for another stated purpose.

You can request deletion of non-case data at any time by writing to anmol.singla@nexeralegal.co.in.

7. Your rights

For all users:

Access your personal data
Request correction of inaccurate data
Opt out of marketing communications
Request deletion (where applicable)

For Indian users (DPDP Act, 2023):

Right to access a summary of your personal data and how it is processed
Right to correction, completion, updating and erasure of your data
Right to withdraw consent at any time, as easily as it was given
Right to nominate another person to exercise your rights in the event of death or incapacity
Right of grievance redressal, and to complain to the Data Protection Board of India if unresolved

For EU and UK residents (GDPR):

Right of access and portability
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to object to processing
Right to lodge a complaint with a supervisory authority

8. India compliance (DPDP Act, 2023 and IT Rules, 2011)

NexEra Legal is a Data Fiduciary under the Digital Personal Data Protection Act, 2023, and also complies with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Accordingly, we:

Give you a clear, itemised notice before or at the time we ask for your consent, setting out what data we collect and the purpose for it
Collect consent that is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. We never pre-tick consent boxes
Limit collection to the personal data necessary for the stated purpose (data minimisation)
Process your data only for the purpose for which consent was given
Let you withdraw consent at any time, as easily as you gave it, and stop processing within a reasonable time of withdrawal
Erase personal data once the purpose is served and retention is no longer required by law
Implement reasonable security safeguards to prevent personal data breaches, and notify affected users and the Data Protection Board of India of any breach as required
Maintain client confidentiality as required by legal ethics and the Bar Council of India rules

Where our processing is based on your consent, the lawful basis under the DPDP Act is your consent. Where we process data to provide legal services you have requested, or to comply with a legal obligation or court direction, we may rely on legitimate uses permitted under Section 7 of the Act.

9. Security measures

SSL encryption for data transmission
Secure access controls and authentication
Regular security audits and updates
Confidentiality agreements with staff and partners
Incident response procedures

10. Third-party links

Our website may contain links to third-party websites (for example WhatsApp). We are not responsible for their privacy practices. Please review their policies before providing personal information.

11. Children's privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy periodically. Changes become effective upon posting to the website.

13. Contact us

For questions, requests or complaints regarding this Privacy Policy:

Email: anmol.singla@nexeralegal.co.in
Phone: +91 6284 178 468
Address: Awfis, Royal Business Park, Motiaz Royal Citi, Zirakpur, Punjab 140603, India
LLPIN: ACW-9415
Grievance Officer (DPDP Act, 2023): Anmol Singla, anmol.singla@nexeralegal.co.in

If you are not satisfied with how we have handled your grievance, you have the right to escalate your complaint to the Data Protection Board of India.

14. Data Processing Addendum (DPA)

Clients located in the EU or UK may request a Data Processing Addendum (DPA) for compliance with GDPR Article 28. Please contact us for more information.

Cookie Policy · Disclaimer