Privacy and data handling

What is collected

The website processes information you submit and limited technical information generated when the site and its third-party services load.

Information you submit

If you complete an enquiry form, the following is collected: your name, your email address, the nature of the enquiry and time sensitivity you select, and the description you write. Two technical fields are submitted alongside it — the page you were on when you sent the enquiry, and the website that referred you — so that enquiries can be answered in context.

No other personal information is requested. Nothing is required beyond what appears on the form.

Information collected automatically

This website uses Google Analytics, loaded through Google Tag Manager, to record how pages are used. This includes pages visited, approximate location derived from IP address, device and browser type, referring website, and interactions such as scrolling, opening a question, following an internal link and starting or attempting to submit a form. Google-hosted fonts also cause the browser to connect to Google when a page loads.

Analytics records the fact and category of an enquiry — that a form was submitted, and the enquiry type and urgency selected. It does not receive your name, your email address, or anything you write in the description field.

Where the information goes

Enquiry form submissions are processed by Formspree, a third-party form service operating outside India, which transmits them by email and may retain submission records according to the account configuration and its service terms. Copies may also be retained by the email provider and in ordinary email backups.

Analytics data is processed by Google through Google Analytics and Google Tag Manager, on infrastructure that may be located outside India.

Information submitted through this website may therefore cross borders in the ordinary course of the services used to operate it. Ordinary email may also be processed outside India and is not a secure substitute for sensitive material. If cross-border processing or security is a concern, send only a minimal contact request and ask for a secure channel before sending anything substantive.

How it is used

• To respond to your enquiry and, if a matter proceeds, to conduct it.
• To carry out conflict checks before a matter is accepted.
• To understand which pages are useful, in aggregate, and improve them.

Enquiry information is not sold, rented, or shared for marketing. There is no advertising on this website and no advertising or remarketing tracking is used. You will not be added to a mailing list by sending an enquiry.

How long it is kept

Enquiries that do not proceed to a matter are kept for 90 days from the date of the last correspondence, to allow the enquiry to be answered and a conflict check to be completed, and are then deleted from the inbox and from Formspree. A short record limited to the fact and category of the enquiry — not its content — may be kept longer for conflict-check purposes. Copies may persist for a further period in routine email backups, which are not manually purged on a shorter cycle. Where a matter is accepted, records are kept for the period applicable to professional and regulatory record-keeping obligations for that type of matter.

Analytics data is retained in Google Analytics for 14 months from collection, after which it is automatically deleted. Analytics identifiers may distinguish a browser or device even though the enquiry form itself does not send Google your name, email address or message text.

Asking for your information

You may ask what enquiry information is held about you, ask for it to be corrected, or ask for it to be deleted. Write to info@bylaw.in and say what you are asking for.

Deletion cannot be applied to records that must be retained for a matter that has been accepted, or where retention is required for professional or legal reasons. Where that applies, it will be explained rather than the request simply refused.

To stop analytics collection, use your browser’s tracking protection or Google’s opt-out browser add-on. The website works normally without analytics.

Security

This website is served over HTTPS. Enquiry form submissions are transmitted over an encrypted connection. No system is completely secure, and the practical protection for anything genuinely sensitive is not to send it through a web form — which is why the instruction at the top of this page exists.

Digital Personal Data Protection Act, 2023

The DPDP Act, 2023 and the DPDP Rules, 2025 establish the framework governing personal data in India. Commencement is staged: different provisions apply from publication, one year after publication, or eighteen months after 13 November 2025. The applicable provision and date should be checked individually rather than described as one universal commencement date.

Who is responsible for this information

Information submitted through this website is handled by Gaurav Rohilla, Advocate, practising under the Bylaw.in portal. Questions, corrections and deletion requests should be sent to info@bylaw.in, which is the single point of contact for anything on this page.

Changes to this page

This page will be updated when the way information is handled changes. The date below records when it was last reviewed.

Reviewed as at 9 August 2026