How KBJ & CO handles personal data collected through www.kbjandco.com, written to meet the notice requirement of the Digital Personal Data Protection Act, 2023.
KBJ & CO, KD 213, Pitampura, Near Kohat Enclave Metro Station, New Delhi - 110034. This notice covers personal data collected through www.kbjandco.com, including the client portal. It does not cover information you give us in the course of a matter by any other means, which is governed by the professional obligations of confidentiality and privilege that attach to it.
Your name, email address, telephone number and the message you write. This is sent to us by email so that we can answer you. It is not stored in a database on this site.
Your name, email address and telephone number; a cryptographic hash of your password, never the password itself; and the date you last signed in. Against your matters we hold the case reference, title, the court or tribunal, its status, the next listed date and a summary.
The portal also holds the messages exchanged between you and this office and any documents attached to them, and the consultations you request or we confirm — the subject, your notes and ours, the time, and the place or joining link.
Invoices raised to you, and the work and outlay recorded against them.
For each payment made through this site: the name, email address and telephone number given at checkout, any reference you supply, the amount, and the order and payment identifiers issued by our payment gateway.
We never see or hold your card, UPI or bank details. Those are entered on the payment gateway's own hosted checkout and never reach this site.
A record of sign-in attempts against the network address they came from, kept so that repeated failed attempts can be slowed down. These records are deleted automatically after twenty-four hours.
This site sets two cookies, and only after you sign in: one for a client portal session and one for a staff session. They hold nothing but an opaque random value, they are marked HttpOnly and Secure so no script can read them, and they expire after seven days.
There are no analytics, advertising or tracking cookies on this site, and no third-party tracking of any kind. That is why you are not asked to consent to any: there is nothing to consent to.
We use the following service providers, and no others. We do not sell personal data, and we do not share it for anyone else's marketing.
Some of these providers operate outside India, so personal data may be processed outside India.
TO CONFIRM — the firm must set retention periods before this page is published — how long a closed matter's portal records and documents are kept, and how long billing records are kept. Billing records are ordinarily governed by statutory requirements; matter records by the firm's own file-retention practice and its professional obligations.
Sign-in attempt records are deleted after twenty-four hours. Portal sessions expire after seven days. Enquiry emails are retained in our mailbox.
Under the Digital Personal Data Protection Act, 2023 you may ask us for a summary of the personal data we hold about you and how it is processed; ask us to correct or complete it; ask us to erase it, where we are not required to keep it; and nominate someone to exercise these rights if you die or become incapable of exercising them.
Where we hold personal data because you are our client in a matter, our ability to erase it is limited by the obligations that attach to a lawyer's file.
TO CONFIRM — the Act requires a named contact able to answer questions about processing. Give the name and designation of the person at the firm who will hold this, and the address for their notices, before publishing.
Write to advocate@kbjandco.com, or to KBJ & CO, KD 213, Pitampura, Near Kohat Enclave Metro Station, New Delhi - 110034, or telephone +91-8826456565.
If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
If this notice changes we will publish the revised version at www.kbjandco.com/privacy.html.