Privacy Policy

This privacy policy (the “Privacy Policy”) governs the collection, use, disclosure, transfer, retention or otherwise processing of personal data or sensitive personal data (collectively “Information”) by Sancupp and Associates (“us, we, our or the Firm”). This Privacy Policy shall be applicable to any person or entity (“you, your”) that accesses our Website www.sancupplegal.com (“Website”) or has shared any Information with us including our retainers and staff. We value your privacy, and our organization is committed to safeguarding your information and ensuring its security. Rest assured that we will handle your data with utmost care and respect.

1. The Information That We Collect

We collect your information in limited and specific circumstances listed under this clause only where required for employment, statutory compliance, client onboarding, or professional engagement purposes, and not from general website visitors. The Information we collect includes, but is not restricted to, the following:

1.1. Name, qualifications, an identification number for our personnel, work and home contact details (email address, phone numbers, physical address), language(s) spoken, gender, date of birth, Voter ID, passport number, PAN Card, marital status, dependents, emergency contact information, photograph, biometric information and medical records.

1.2. Financial details (including bank and Demat accounts), salaries, retainership fees and stipends.

1.3. Career management information, designation, contractual information, system and application access data and device-related information.

1.4. Performance-related information: letters of application, resume / CV, or other provided documents, performance and development reviews.

1.5. Anonymous data collected while using the website, including data collected automatically such as device ID, IP Address, web browser type, page views, operating system, timing and frequency of use of the Website or application, application/website navigation. Such communications do not disclose confidential or personal data of clients unless expressly permitted or required by applicable law.

1.6. Any other Information that is collected pursuant to our contractual relations with service providers or clients while providing services or during onboarding.

Aadhaar information: Aadhaar information is not collected from website visitors. Aadhaar details may be requested only where expressly required under applicable law and only for limited statutory or regulatory purposes. Where Aadhaar is required, individuals shall be informed of the legal basis for such requirement and alternative identification options, where permissible, shall be provided.

2. Uses of Information

We may use your Information to achieve any of the following objectives:

2.1. Managing our interactions with you, including concerning your employment or engagement with us and your access to our premises and assets;

2.2. Facilitating communication with you (including in case of emergencies);

2.3. In operating and managing our business operations;

2.4. Providing services to our clients;

2.5. Displaying or communicating highlights of our work with the Firm's clients, whether on our Website or to third parties;

2.6. Providing insight into key developments, legal issues, and knowledge management;

2.7. Complying with legal requirements worldwide and defending the Firm's legal rights;

2.8. Monitoring your use of our systems; and

2.9. Conducting data analytics to improve the quality of our services and streamline internal processes.

In case we are required to process your personal information or Aadhaar information for a purpose not contemplated hereunder, we shall seek your consent.

3. Your Rights

Personal data is processed only in accordance with the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025, and only on lawful grounds including voluntary provision of information, performance of professional engagements, compliance with legal obligations, employment-related purposes, or explicit consent where required.

Right of Access, Modification, and Deletion: You can access your Information at any time to review any Information you have supplied. You may modify any Information that is inaccurate during this review. You may also request the deletion of any Information you have provided to us by emailing the Data Protection Officer mentioned below. Please note, however, that this may affect our ability to process or enable communication with you and may lead to the discontinuation of our relationship for which this information was being used at our sole discretion. Any deletion request shall be only entertained subject to applicable data retention laws.

Security and Confidentiality: We have adopted reasonable security practices and standards as per applicable law to protect your Information, and such standards are in line with the best industry practices for confidentiality and security and are commensurate to the nature of Information processed by us.

4. Disclosures and Transfer

All Information that we collect is disclosed or transferred only under the following circumstances to the entities/individuals identified below:

Disclosures to our personnel and within Firm: Access to your Information within Firm will be limited to the personnel who need to know the information for the purposes described in this Privacy Policy. Due to the pan-India presence of Firm, we may disclose Information throughout Firm to fulfill the purposes described in this Privacy Policy. We may use third-party vendor solutions for storing your Information. However, we will ensure that the Information is protected in the same manner as Firm protects your information and that same data protection standards are implemented.

Disclosures or Transfers to Third Parties: We may disclose Information to third parties for other purposes with your explicit consent or when such disclosure is essential for the performance of a contractual agreement between Firm and yourself. To this end you explicitly consent to the transfer of your Information (including Aadhaar information) for any of the purposes set out in this Privacy Policy. Our practice is to only provide third parties with Information that is strictly necessary to achieve the intended processing purposes and enable them to deliver the expected services. We are committed to refraining from sharing personal data unless required by law or when it aligns with the intended purposes of the data processing. To the best of our abilities, we endeavor to modify our contracts to ensure the security of shared data. In all our arrangements, we include provisions to safeguard personal data and prevent any unauthorized or inappropriate use. We take utmost care in protecting your information and maintaining the highest level of data privacy standards.

Mandatory Disclosures or Transfers: We may disclose Information if required to do so by law or if it is necessary to comply with a court order, judicial or other government warrant, or to otherwise cooperate with law enforcement or other governmental agencies.

Right to Withdraw Consent: Where processing of personal data is based on consent, individuals may withdraw such consent at any time by contacting the Data Protection Officer. Withdrawal shall not affect processing required under applicable law.

Children's Personal Data: Our Website and services are not directed at children under the age of 18, and we do not knowingly collect personal data of children.

5. Data Retention

All personal data or sensitive personal data including Aadhaar information we collect will be retained only as long as it is necessary by Firm or is otherwise required under any other law for the time being in force.

6. Amendments to this Privacy Policy

We may revise the Privacy Policy from time to time. Any such changes will be posted on our Website. We may not be able to separately notify you of the revisions each time we make them. We encourage you to check this page periodically for modifications or corrections to the Privacy Policy to understand how it affects the use of your Information. We will not be responsible for your failure to remain informed about such changes. Personal data shall not be retained beyond the period necessary for the purpose for which it was collected, unless retention is required under applicable law.

7. Data Protection Officer

You may contact our grievance officer if you have any concerns or questions regarding our Privacy Policy. The name and address of the officer are as follows: