Privacy Policy

Last Updated: 21 May 2026

​

TrailBlazer Advocates ("TBA", "we", "us" or "our") respects the privacy of every person who accesses or uses our website at www.tbalaw.in and any associated mobile applications (collectively, the "Website"). This privacy policy ("Policy") describes the manner in which TBA collects, uses, shares, discloses, retains and protects personal data of users ("you" or "your") and the rights available to you in respect of such personal data.

​

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), to the extent each is in force, read with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), which continue to apply during the phased commencement of the DPDP Act.

​

By accessing or using the Website, you acknowledge that you have read, understood and consent (where consent is the lawful basis) to the collection, use, sharing, disclosure and retention of your personal data in the manner described in this Policy. We may modify or update this Policy from time to time, and your continued access to or use of the Website following any such modification shall be deemed acceptance of the modified Policy.

​

1. Definitions

​

For the purposes of this Policy:

​

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, and includes "sensitive personal data or information" as defined under the SPDI Rules to the extent the SPDI Rules remain applicable.

• "Data Principal" means the individual to whom the Personal Data relates.

• "Data Fiduciary" means the entity which, alone or in conjunction with others, determines the purpose and means of processing Personal Data. For the purposes of this Policy, TBA is the Data Fiduciary.

• "Processing" has the meaning assigned to it under Section 2(x) of the DPDP Act.

 

2. Personal Data We Collect

​

We may collect and process the following categories of Personal Data:

​

• your name, employer, designation or position, e-mail address, postal address and telephone number;

• identification and background information provided by you, including through your business card or any form submitted on the Website;

• technical and usage data relating to your visit to the Website, including IP address, device identifiers, browser type, referring URL, pages viewed and timestamps (collected through cookies and similar technologies, as described in Section 8);

• inputs submitted by you to any interactive utility on the Website (including but not limited to the Cap Table Simulator, Court Fee Calculator, Arbitration Fee Calculator and any AI Assistant tools) and the outputs generated for you; and

• any other Personal Data that you voluntarily provide to us, or that we lawfully obtain from a third-party source.

 

We typically collect Personal Data when you: (a) browse the Website; (b) provide your business card or similar identifier to us; (c) submit information through any form, utility or tool on the Website; or (d) subscribe to receive legal updates, newsletters or other publications from us in a non-client capacity.

​

Personal Data collected by us from clients, retainers, interns, trainees, service providers or other counterparties in the course of our engagement as legal advisors, or under any contractual arrangement, is governed by the terms of the relevant engagement letter, retainer or contract, and not by this Policy.

​

3. Notice and Lawful Basis of Processing

​

Where consent is the lawful basis of processing, the itemised notice and consent request will be provided to you separately at the point of collection in accordance with Section 5 of the DPDP Act and Rule 3 of the DPDP Rules. Such notice will describe, in clear and plain language, the Personal Data sought to be collected, the specific purpose of processing, the manner in which you may withdraw consent, the manner in which you may exercise your rights under the DPDP Act and the manner in which you may lodge a complaint with the Data Protection Board of India.

​

We process your Personal Data only on one or more of the following lawful bases recognised under the DPDP Act:

​

• the consent given by you for one or more specified purposes;

• certain "legitimate uses" as set out in Section 7 of the DPDP Act, including where you voluntarily provide Personal Data for a specified purpose and have not indicated that you do not consent to its use;

• the performance of any contract or arrangement to which you are a party; and

• compliance with any judgment, decree, order or applicable law (including the discharge of any obligation under law applicable to TBA as a regulated profession).

​

4. Purposes of Processing

​

We process your Personal Data for the following purposes:

​

• to administer, operate, improve and develop the Website and the services and utilities offered through it;

• to provide legal updates, newsletters, publications and event invitations to subscribers for informational purposes;

• to respond to your enquiries, requests, feedback or grievances;

• to maintain records of communications, transactions and engagements;

• to comply with applicable laws and to respond to lawful requests from courts, tribunals, regulators or other public authorities; and

• to protect our legal rights and interests, and to detect, prevent and address fraud, security incidents and misuse of the Website.

​

5. Sharing and Disclosure

​

We do not sell, rent or trade your Personal Data. We may share your Personal Data only in the following circumstances:

​

• with your consent or at your direction;

• with our Data Processors and service providers (including IT, hosting, analytics, communications and customer relationship management providers) engaged by us under written contracts that require them to process Personal Data only on our instructions and to maintain reasonable security safeguards;

• with our professional advisors (auditors, accountants, insurers and lawyers) on a need-to-know basis;

• where required to do so to comply with applicable law, judicial order, regulatory direction or governmental request, including any direction issued by the Data Protection Board of India or under the Indian Computer Emergency Response Team (CERT-In) Directions dated 28 April 2022; and

• in connection with any actual or proposed restructuring, merger, acquisition or transfer of all or part of our practice, subject to the recipient agreeing to handle your Personal Data in accordance with this Policy.

 

6. Cross-Border Transfer

​

The Website is hosted by Wix.com Ltd. and certain of our service providers may be located outside India. We may transfer your Personal Data to such providers strictly for the purposes described in this Policy. Any transfer of Personal Data outside India will be carried out in compliance with Section 16 of the DPDP Act and any restrictions notified by the Central Government in respect of countries or territories to which transfers are restricted.

​​

7. Security Safeguards

​

We have implemented reasonable technical and organisational security safeguards designed to protect Personal Data against unauthorised or accidental access, use, disclosure, alteration, loss or destruction. These safeguards include, where appropriate, encryption in transit, access controls, logging, periodic review and contractual obligations on our processors. No method of electronic transmission or storage is, however, completely secure, and we cannot guarantee absolute security of your Personal Data.

​

In the event of a personal data breach, we will notify the Data Protection Board of India and the affected Data Principals in the form and within the timelines prescribed under Rule 7 of the DPDP Rules, once Rule 7 becomes effective.

​​

8. Cookies and Analytics

​

The Website uses cookies and similar tracking technologies, including those deployed by the Wix.com platform on which the Website is hosted, to operate the Website, remember your preferences, measure usage and improve performance. You may control or disable cookies through your browser settings; please note that disabling cookies may affect certain features of the Website.

​

9. Children

​

The Website is not directed at children. We do not knowingly collect Personal Data of individuals below the age of 18 years (or of individuals with disabilities who have a lawful guardian) without obtaining verifiable consent from their parent or lawful guardian in accordance with Section 9 of the DPDP Act and Rules 10 and 11 of the DPDP Rules. If you believe that we have inadvertently collected such Personal Data, please contact us using the details in Section 12 and we will take prompt steps to delete it.

​

10. Data Retention

​

We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as is required under applicable law (including the Advocates Act, 1961, the Bar Council of India Rules, the Income-tax Act, 1961 and the Prevention of Money Laundering Act, 2002, where applicable). Where the specified purpose is no longer being served and retention is not required by law, we will erase the Personal Data in accordance with Section 8(7) of the DPDP Act. Retention defaults prescribed under the Third Schedule to the DPDP Rules, where applicable, will be observed.

​

11. Your Rights

​

Subject to the conditions and limitations under applicable law, you, as a Data Principal, have the following rights in respect of your Personal Data:

​

• Right to access information about Personal Data being processed by us and the processing activities undertaken (Section 11, DPDP Act);

• Right to correction, completion, updating and erasure of your Personal Data (Section 12, DPDP Act);

• Right of grievance redressal through the mechanism set out in Section 12 below (Section 13, DPDP Act);

• Right to nominate another individual to exercise your rights in the event of your death or incapacity (Section 14, DPDP Act); and

• Right to withdraw consent at any time, with such withdrawal being as easy as the act of giving consent. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal, and we may continue to retain or process Personal Data thereafter where required or permitted by law.

 

To exercise any of the above rights, please write to us at the contact details in Section 12.

​

12. Grievance Redressal

​

If you have any question, concern or grievance regarding this Policy or our processing of your Personal Data, you may contact our Grievance Officer:

​

Name: Tuhin Batra

Designation: Partner

Email: tuhin@tbalaw.in

Address: V-35, Lower Ground Floor, Green Park Main, New Delhi – 110016

 

We will acknowledge your grievance promptly and endeavour to respond and resolve it within ninety (90) days of receipt, in accordance with Rule 14(3) of the DPDP Rules. If you are dissatisfied with our response, or if your grievance is not resolved within such period, you may make a complaint to the Data Protection Board of India in the manner prescribed by it under the DPDP Act and DPDP Rules.

​

13. Disclaimer

​

As a user of the Website, you assume all responsibility and risk for your use of the Website and of the internet generally, including the information that you submit through, or access from, the Website, and for your conduct on and off the Website. Nothing on the Website is intended to constitute legal advice or to create an attorney–client relationship.

​​

14. Amendments to this Policy

​

We may revise this Policy from time to time. Any revisions will be posted on the Website at https://www.tbalaw.in/privacy-policy, with the "Last Updated" date amended accordingly. We may not separately notify you of each revision. We encourage you to review this Policy periodically. Continued use of the Website after a revision constitutes acceptance of the revised Policy.

​

15. Governing Law and Jurisdiction

​

This Policy is governed by and construed in accordance with the laws of India. Subject to the provisions of the DPDP Act and any directions of the Data Protection Board of India, the courts at New Delhi shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.