Privacy Policy

Last updated: 05.10.2025

At Thistle & Law LLP, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you interact with us digitally, including through our website, social media pages, newsletters, webinars, or other online platforms.

This Policy does not extend to the personal information we collect in the course of our professional engagement as your legal advisors. Such information is governed by attorney–client privilege, professional confidentiality obligations, and our engagement terms.

By accessing our website, subscribing to our communications, or interacting with us online, you agree to the practices described in this Privacy Policy.

Information We Collect

We may collect personal information that you provide voluntarily, such as your name, email address, phone number, job title, organization, or any details you share with us when filling out forms, sending us emails, applying for a position, or registering for our events and webinars.

We may also collect information available from public sources, such as professional networking sites like LinkedIn, or information received from recruitment agencies, event partners, or similar third parties.

In addition, when you visit our website, we automatically collect certain technical information about your device, including your browser type, operating system, IP address, unique device identifiers, and browsing activity, such as the pages visited and the time spent on them. We also use cookies, which are small text files placed on your browser, to support website functionality and to analyse usage trends. You can disable cookies through your browser settings, though some features of the website may not function properly as a result.

We do not intentionally collect sensitive personal data, such as financial details, health information, or biometric data, through our website. Should such information be provided, we will treat it with heightened safeguards.

How We Use Your Information

We use your personal information only for the purposes for which it was collected. For example, if you contact us with a query, we use your information to respond to it. If you apply for a position with us, we use your information to process your application. If you subscribe to our newsletters or register for our events, we use your information to share updates with you.

In addition to these purposes, we may also use your information to operate and improve our website, to comply with our legal obligations, or for other purposes that you consent to. We do not sell your personal data, nor do we use it for unsolicited marketing.

Legal Basis for Processing

We process your personal information on the basis of your consent, our contractual obligations, compliance with legal requirements, or our legitimate interests, such as ensuring the security and efficiency of our website.

Sharing Your Information

We may share your information with trusted third-party service providers who process data on our behalf, such as email marketing platforms, cloud storage services, or webinar hosting providers. These providers are bound by confidentiality and data protection obligations. We may also disclose information if required by law or by a regulatory authority.

Where personal data is transferred outside India, we ensure that appropriate safeguards are in place, consistent with applicable data protection laws.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. For instance, applications for employment are retained for up to six months unless you consent to longer retention, while newsletter subscription data is retained until you unsubscribe. Website logs and cookies are retained only for as long as technically necessary. Thereafter, your information is securely deleted or anonymised.

Your Rights

Under the Digital Personal Data Protection Act, 2023, and, where applicable, the GDPR, you have certain rights in relation to your personal data. These include the right to access your data, to request corrections or updates, to withdraw your consent, to request deletion of your data, to restrict or object to processing in certain cases, and, where applicable, to request data portability.

To exercise these rights, you may contact us at any time (see Section “Contact & Grievance Redressal”). We endeavour to respond to such requests within 30 days, or earlier if required by law.

Data Security and Breach Notification

We employ industry-standard technical, organisational, and physical safeguards to protect your personal information from unauthorised access, use, alteration, or disclosure. In the event of a personal data breach that is likely to cause harm, we will notify you and the relevant authority promptly, in accordance with legal requirements.

Contact and Grievance Redressal

If you have any questions, requests, or concerns regarding this Privacy Policy or the way we handle your personal data, you may write to us at info@thistleandlaw.com for the speedy redressal of your grievance. 

Updates to This Policy

We may update this Privacy Policy periodically to reflect legal, operational, or technological changes. Updated versions will be posted on this page with the “Last Updated” date revised.

I believe in taking a client-focused approach to each case, ensuring that my clients are informed and involved throughout the legal process. I am always available to answer questions and provide guidance, and I work tirelessly to achieve the best possible outcome for each client.