Last updated: 4 August 2026
AdvoMitra (“AdvoMitra”, “we”, “us”) operates the website www.advomitra.in/. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
AdvoMitra is a technology platform. We are not a law firm and we do not practise law. We connect users with independent advocates enrolled with their respective State Bar Councils. Anything you discuss directly with an advocate is a matter between you and that advocate.
1. Who is responsible for your data
For the purposes of the DPDP Act, AdvoMitra is the Data Fiduciary for the personal data described below.
| Entity | [REGISTERED LEGAL NAME] |
| Registered address | [REGISTERED ADDRESS] |
| CIN / registration number | [CIN] |
| Grievance Officer | [NAME] |
| [GRIEVANCE EMAIL] | |
| Telephone | +91 [NUMBER] |
2. What we collect
You give us directly
- Contact number and the description of your matter, submitted through the consultation forms on our pages
- Email address, if you subscribe to updates
- Name, city and any documents you choose to share when a matter proceeds
- Payment details, where a fee is payable — processed by our payment gateway, not stored by us
Collected automatically
- IP address, browser and device type, pages visited, time on page
- Cookies and similar technologies (section 8)
We do not knowingly collect biometric data, financial account credentials, or data relating to a child under 18 without verifiable parental consent, as required by Rule 10 of the DPDP Rules, 2025.
3. Why we process it, and on what basis
| Purpose | Lawful basis |
| Matching your enquiry with a suitable advocate | Your consent |
| Contacting you about your enquiry | Your consent |
| Passing your details to the advocate you select | Your consent |
| Processing fees and issuing receipts | Performance of contract / legitimate use |
| Site security, fraud prevention, service improvement | Legitimate use under section 7 |
| Meeting legal, tax or regulatory obligations | Legal obligation |
| Sending updates and newsletters | Your consent, withdrawable at any time |
We do not sell your personal data. We do not share it with advertisers.
4. Consent, and how to withdraw it
Where we rely on consent, we ask for it separately and in plain language, as required by section 6 of the DPDP Act. Consent is specific to the purpose stated at the time.
You may withdraw consent at any time, and it must be as easy to withdraw as it was to give. Write to [GRIEVANCE EMAIL]. Withdrawal does not affect processing already carried out, and where an advocate has already been engaged, your relationship with that advocate is governed separately.
5. Who we share it with
- The advocate you are matched with — so they can advise you. Once shared, that advocate is independently responsible for the data they hold.
- Service providers — hosting, email delivery, analytics and payment processing, under contract and only for the purposes we specify.
- Authorities — where disclosure is required by law, court order, or a lawful request from a government agency.
We do not transfer personal data outside India except to service providers operating in jurisdictions permitted under section 16 of the DPDP Act and Rule 15 of the DPDP Rules, 2025.
6. How long we keep it
- Enquiries that do not proceed — 12 months from last contact, then erased
- Matters where an advocate was engaged — as long as needed for the engagement, plus any period required by law
- Newsletter subscriptions — until you unsubscribe
- Access and security logs — one year, as required by Rule 6 of the DPDP Rules, 2025
After these periods, data is erased unless retention is required by law.
7. Your rights
Under sections 11 to 14 of the DPDP Act you may:
- Access a summary of the personal data we hold about you and who it has been shared with
- Correct data that is inaccurate, and complete data that is incomplete
- Erase your data where it is no longer needed for the purpose it was collected for
- Nominate another person to exercise these rights if you die or become incapacitated
- Complain to us, and then to the Data Protection Board of India
To exercise any of these, write to [GRIEVANCE EMAIL]. We respond within 90 days.
8. Cookies
We use cookies that are strictly necessary for the site to function, plus analytics cookies that help us understand which pages are useful. You can block cookies through your browser settings; strictly necessary cookies cannot be disabled without affecting the site.
9. Security
We apply reasonable security safeguards under section 8(5) of the DPDP Act, including encryption in transit, access control, and logging. No system is completely secure. If a personal data breach occurs, we will notify you and the Data Protection Board of India without delay, in the form and within the timelines set by Rule 7 of the DPDP Rules, 2025.
10. Grievance redressal
If you are unhappy with how we handle your data, contact our Grievance Officer:
[NAME] · [GRIEVANCE EMAIL] · +91 [NUMBER]
We acknowledge within 24 hours and resolve within 15 days, in line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
If unresolved, you may complain to the Data Protection Board of India through its online portal.
11. Changes
We may update this policy. The revision date at the top will change, and material changes will be notified to you where we hold your contact details.