Privacy Policy & Cookie Statement

1. Introduction & Data Fiduciary

This Privacy Policy explains how SARFAESI Consultant ("we", "us", or "our"), acting as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, collects, processes, stores, and protects personal data provided by visitors and users ("Data Principals") on our website https://sarfaesiconsultant.com.

2. Nature of Data Collected

In accordance with Bar Council of India Rule 36 and the principle of data minimization, we do not collect personal information without your active and explicit consent. We only collect information when you voluntarily submit an enquiry form or contact us via email or WhatsApp:

• Identity Information: Name, professional title, and organization/firm name.
• Contact Information: Telephone/WhatsApp number and email address.
• Matter Information: General information regarding loan exposure range (e.g. ₹5 Cr+) and stage of recovery proceedings. We request that confidential bank passwords, account numbers, or PAN details not be transmitted via unencrypted web forms.

3. Purpose Limitation & Lawful Processing

We process your personal data exclusively for specified, legitimate, and lawful purposes:

• Responding to voluntary informational queries submitted through our contact forms.
• Facilitating scheduling of consultations requested by the user.
• Maintaining technical records of voluntary consent under Bar Council of India regulations.

We do not sell, rent, monetize, or disclose your personal data to commercial third parties, marketing agencies, or advertisers under any circumstances.

4. Cookie Policy

Our website is engineered for minimal digital footprint:

• Essential Cookies: We store minimal functional state in local storage (such as recording your acknowledgment of the Bar Council of India disclaimer and your preferred language setting EN/HI/PA). These cookies do not track your browsing activity across other websites.
• Analytics Cookies: Optional aggregate technical statistics (such as page visits and device screen widths) are loaded only if you explicitly choose "Accept All" on our cookie consent banner.
• Suppression of Third-Party Trackers: We do not deploy cross-site tracking pixels or behavioural profiling cookies.

5. Data Retention & Storage Security

Information submitted via contact forms is retained only as long as necessary to address the specific inquiry or as required under professional record-keeping regulations. All digital records are stored in secure, encrypted cloud environments adhering to standard industry safeguards.

6. Rights of Data Principals under DPDP Act 2023

As a Data Principal under Indian law, you possess the following statutory rights:

1. Right to Access: You may request a summary of the personal data processed by us.
2. Right to Correction & Erasure: You may request the correction of inaccurate data or the deletion of data when the processing purpose has been fulfilled.
3. Right of Grievance Redressal: You may register grievances regarding the processing of your data with our designated Grievance Officer.

7. Grievance Officer Details

Pursuant to Section 6 of the DPDP Act 2023, any privacy-related requests, questions, or grievances may be addressed to our designated officer:

8. Jurisdiction

Any disputes, claims, or inquiries arising out of the use of this website or this Privacy Policy shall be governed by the laws of India and subject to the exclusive jurisdiction of the competent courts at Chandigarh, India.