Last updated: May 21, 2026
This Privacy Policy explains how Cipher Legal ("Firm", "we", "us", "our") collects, uses, stores, and protects personal information when you visit our website or interact with us through any digital channel. We are committed to safeguarding your privacy and handling your data with transparency and care.
1. Introduction
This policy applies to all personal information collected through this website and any associated services. By using our website, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of this website.
Cipher Legal is committed to compliance with applicable data protection laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as amended from time to time.
2. Information We Collect
We may collect the following categories of information when you use our website:
- Contact information: Your name, email address, phone number, and any other details you submit through our contact or enquiry forms.
- Usage data: Information about how you interact with our website, including pages visited, time spent, referring URLs, browser type, device type, and IP address.
- Communication records: Records of correspondence if you contact us by email or through our website forms.
- Cookie data: Information collected through cookies and similar tracking technologies (see our Cookies section below).
We do not intentionally collect sensitive personal data (such as financial information, health data, or government identification numbers) through this website.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your enquiries and communicate with you about potential or ongoing legal matters.
- To provide you with information about our services, publications, and events that may be of interest.
- To administer, improve, and personalise your experience on our website.
- To comply with our legal and regulatory obligations.
- To protect against fraud, security threats, or unlawful activity.
We will not use your personal information for purposes that are incompatible with the reasons for which it was originally collected without your consent.
4. Disclosure of Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
- Service providers: We may engage trusted third-party vendors (e.g., IT service providers, hosting companies, analytics platforms) who process data on our behalf and are bound by confidentiality obligations.
- Legal requirements: We may disclose your information if required by law, regulation, court order, or government authority.
- Professional obligations: As a law firm, we may be required to share information in connection with conflict-of-interest checks, professional regulatory obligations, or legal proceedings.
- Business transfers: In the event of a merger, acquisition, or restructuring of the Firm, your data may be transferred as part of that transaction.
6. Data Security
We implement appropriate technical and organisational security measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, encrypted transmissions (where applicable), and access controls.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
7. Your Rights
Subject to applicable law, you may have the following rights with respect to your personal data:
- Access: The right to request a copy of the personal data we hold about you.
- Correction: The right to request that we correct inaccurate or incomplete information.
- Erasure: The right to request deletion of your personal data where we have no compelling reason to continue processing it.
- Objection: The right to object to our use of your data for direct marketing purposes.
- Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details provided below. We will respond within a reasonable timeframe and in accordance with applicable law.
8. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we will securely delete or anonymise it.
9. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of the website after any changes constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us: