AdvocateBook Privacy Policy

1 Platform Overview & Scope

This Privacy Policy governs the collection, processing, storage, and transfer of personal data collected through AdvocateBook.in (referred to as "AdvocateBook", "Platform", "we", "us", or "our"), operated by the leadership of AdvocateBook from its registered headquarters in Sonarpur, South 24 Parganas, West Bengal – 700150, India.

This policy applies to all visitors, registered clients, practicing Advocates, Chartered Accountants, Marriage Registrars, Online Legal Consultants, and Career Applicants across India. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2 Information We Collect

We collect personal data only to the extent necessary to deliver seamless professional discovery, secure appointment bookings, confidential consultations, and verified credential management:

2.1 Information Provided Directly by Users

• Account Credentials: Full Name, Email Address, 10-digit Mobile Number, Residential City, District, and encrypted passwords.
• Consultation Requests: High-level case category (e.g. Criminal, Family, Property, Tax), preferred date/time slots, preferred consultation format (Chamber visit or Remote Online Room), and uploaded briefing notes.
• Support Communications: Inquiries submitted through our Contact Form, WhatsApp helpline, or support ticketing system.

2.2 Automatically Collected Technical Information

• Network & Device Identifiers: IP address, browser type, operating system, device classification (desktop/mobile), and referring URLs.
• Usage & Interaction Data: Search keywords, profile view timestamps, category filter interactions, and page load durations for performance optimization.

3 The 4-Pillar Professional Data Ecosystem

AdvocateBook collects specialized professional onboarding data to ensure genuine credential validation for each professional pillar:

4 Legal Confidentiality & Advocate Privilege

We recognize the sacrosanct nature of legal counsel and client communications under Indian jurisprudence:

5 Purpose of Data Processing

We process personal and professional data solely for lawful purposes:

• To enable search, filtering, and geolocation-based discovery of verified Advocates, CAs, and Marriage Registrars.
• To schedule chamber appointments, online video consultations, and send automated booking notifications.
• To verify professional credentials against State Bar Councils, ICAI, and relevant statutory registries.
• To process transaction receipts and maintain mandatory tax records under Indian GST and Income Tax regulations.
• To prevent fraudulent profiles, identity misrepresentation, and platform misuse.

6 Data Sharing & Third-Party Disclosure

We do not sell, rent, or monetize your personal data. Data is shared only under strict operational necessity:

• Between User and Selected Professional: When you book an appointment, your name, contact phone, and matter summary are shared exclusively with the chosen professional.
• Authorized Technology Infrastructure: Secure cloud database servers (AWS/GCP in Indian data centers), SMS notification gateways, and email dispatchers bound by confidentiality agreements.
• Statutory & Court Orders: When strictly mandated by a valid judicial court order, warrant, or statutory directive from Indian law enforcement agencies.

7 Technical & Organizational Security

We implement multi-layered defense protocols in line with the IT (Reasonable Security Practices and Procedures) Rules, 2011:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser and our servers is secured using modern TLS 1.3 cryptographic protocols.
• Secure Password Hashing: Passwords are encrypted using irreversible Bcrypt hashing algorithms with high cost-factor salting.
• Anti-CSRF & SQL Injection Defense: Prepared PDO statements and unique anti-CSRF session tokens on all input forms.
• Upload Sandbox Protection: User resumes and documents are stored in non-executable upload directories protected by server-level execution prohibitions.

8 Payment Gateway & Financial Security

All online consultation fees and subscription payments on AdvocateBook are processed through RBI-authorized, PCI-DSS Level 1 compliant payment gateways (such as PayU / Razorpay).

9 Your Rights Under the DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you enjoy full sovereignty over your data:

• Right to Access & Summary: Request an overview of all personal data held by AdvocateBook regarding your profile.
• Right to Correction & Erasure: Request the rectification of inaccurate details or the complete deletion of your account and profile.
• Right of Grievance Redressal: Direct access to our designated Grievance Redressal Officer for prompt inquiry resolution.
• Right to Nominate: Designate a representative to exercise your privacy rights in the event of incapacitation.

10 Cookies & Session Management

We use essential, secure HTTP-only cookies solely for maintaining your authenticated login session, preserving search filters, and preventing CSRF attacks. We do not employ third-party behavioral ad tracking trackers. You can modify your browser settings to decline non-essential cookies at any time.

11 Data Retention & Disposal

We retain user data only for as long as your account remains active or as required to fulfill the purposes outlined herein. In accordance with statutory Indian taxation, financial transaction records are securely preserved for 7 years as mandated by the Income Tax Act and GST regulations, following which they are permanently purged.

12 Grievance Officer & Contact Information

In compliance with Rule 5(9) of the Information Technology Rules, 2011 and Section 12 of the DPDP Act, 2023, the details of our designated Grievance Redressal Officer are as follows: