Privacy Policy

This policy describes how Saya & Associates ("the firm", "we") handles personal data in connection with this website, sayaassociates.com, and with enquiries sent to the firm. We have designed this website to collect as little data as possible — a position we consider consistent with the privacy practice we run.

1. What this website collects

• It has no contact forms, accounts or log-ins, so the website itself collects nothing you type.
• It sets no cookies unless you accept them. On your first visit you are asked whether Google Analytics may be used. Decline, or simply do not answer, and no cookie is set and no request leaves this domain. Your choice is kept in your browser's local storage under saya-consent and is never transmitted to us.
• If you accept, Google Analytics 4 records which pages are read, approximate location, and how you arrived. It does not tell us who you are, and we do not link it to enquiries you send us. The cookies are listed in the Cookie Policy.

2. Third-party requests the site makes

Fonts, styles, scripts and images are all served from this domain. The only external provider this site may contact is Google, for Analytics, and only after you have accepted. Before that, and if you decline, no external provider receives your IP address or request headers.

Where you accept, Google acts as our processor. Google's servers are outside India, including in the United States, so that acceptance involves a transfer abroad. IP addresses are anonymised by Google before storage. Google's own handling is governed by its privacy policy and its Google Analytics terms.

If you follow an outbound link — WhatsApp or LinkedIn — you leave this site, and your use of those services is governed by their own privacy policies.

3. Information you choose to send us

If you contact the firm by email, telephone or WhatsApp, we receive the information you provide — typically your name, contact details and a description of your matter. We use it to respond to your enquiry, run a conflict check where relevant, and, if an engagement follows, to provide legal services. We do not use enquiry information for marketing, and we do not sell or share it for advertising.

4. Legal basis and retention

We process enquiry information on the basis of your voluntary provision of it for the purpose of seeking a response, and any subsequent engagement on the basis of the engagement itself and our professional obligations. Information relating to actual or potential engagements is retained as long as professional, limitation and record-keeping obligations require; casual enquiries that do not proceed are deleted in the ordinary course.

For analytics, the basis is your consent, given through the banner and withdrawable at any time by clearing this site's data in your browser. Under the Digital Personal Data Protection Act, 2023 consent must be as easy to withdraw as to give; under the GDPR, Article 6(1)(a) applies. Analytics data is retained by Google for 14 months and then deleted automatically.

5. Confidentiality and security

Communications with the firm are handled with the confidentiality the legal profession requires. Please note, as stated on the contact page, that information sent before an engagement is confirmed may not be protected by privilege — send a summary first, and keep sensitive detail for after the conflict check.

6. Your rights

You may ask us what information of yours we hold, ask for it to be corrected or deleted (subject to professional record-keeping obligations), and raise any grievance about its handling. Write to [email protected]; we respond to data requests on the timelines applicable law requires.

7. Changes

If our practices change — for example, if analytics are ever added — this policy and the cookie policy will be updated first, with the "last updated" date revised.