Privacy Policy

Who we are

Thinkspire Consultancy LLP ("Thinkspire", "we", "us", or "our") is a limited liability partnership registered in India, providing integrated legal, regulatory, financial, and technology advisory services. Our registered office is in Mumbai, Maharashtra, India.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website at thethinkspire.com, contact us by any channel, or engage us for professional services.

We are committed to protecting your privacy in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules. By using our website or contacting us, you consent to the practices described in this policy.

Information we collect

Information you provide directly

• Contact inquiries: when you reach out via WhatsApp, email, or phone, your name, phone number, email address, and the nature of your inquiry.
• Consultation requests: business name, your role, and details about the matter you wish to discuss.
• Client engagements: once you become a client, we collect additional information necessary to provide professional services, governed by our engagement letter and applicable professional obligations.

Information collected automatically

• Usage data: pages visited, time spent, referring URL, browser type, and device information, collected via standard web server logs.
• Cookies: we use only essential cookies necessary for the website to function. We do not use tracking or advertising cookies.

Information we do not collect

We do not collect sensitive personal data (such as health information, financial account numbers, or government ID numbers) through this website. Any such information required for a professional engagement is handled under separate confidentiality arrangements.

How we use your information

• To respond to your inquiry and determine whether we can assist you
• To schedule and conduct consultations
• To provide professional advisory services where engaged
• To send you updates, alerts, or insights that are relevant to your matter or industry (only where you have indicated interest)
• To comply with our legal and professional obligations, including conflict-of-interest checks
• To improve our website and service quality

We do not use your personal information for automated decision-making or profiling.

Sharing your information

We treat all information shared with us as confidential. We do not sell, rent, or trade personal information. We may share information only in the following limited circumstances:

• Professional network: with barristers, co-counsel, or other professionals engaged specifically on your matter, and only to the extent necessary.
• Service providers: with technology vendors who help us operate (email, cloud storage, communication tools), under confidentiality obligations and, where applicable, data processing agreements.
• Legal obligation: where required by law, court order, or a regulatory authority with jurisdiction over us.
• With your consent: in any other circumstance, only with your explicit prior consent.

Legal professional privilege

Where you engage us for legal services, communications between you and our legal team may be protected by legal professional privilege under applicable Indian law. We are committed to preserving this privilege and will not disclose privileged communications without your consent, except as required by law or court order.

Data retention

We retain personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and professional regulations:

• Inquiry-only contacts: up to 12 months from the last interaction if no engagement follows.
• Client records: for the duration of the engagement and thereafter as required by the Bar Council of India rules, the Companies Act, income-tax law, and other applicable professional regulations, typically 7–8 years.
• Website logs: typically 90 days, unless required for a security investigation.

Your rights under the DPDP Act

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data:

• Right to access: request a summary of the personal data we hold about you and how it is being used.
• Right to correction: request correction of inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data, subject to legal and professional retention requirements.
• Right to grievance redressal: raise a complaint with us regarding how your data is handled.
• Right to nominate: nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us at communication@thethinkspire.com. We will respond within a reasonable time and in any event within the statutory period.

Security

We apply reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. This includes encrypted communications, access controls, and confidentiality obligations on our staff and vendors.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Third-party links

Our website may contain links to third-party platforms (such as LinkedIn or WhatsApp). This Privacy Policy does not cover those platforms. We encourage you to review the privacy policies of any third-party service you access through our website.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The date of the most recent revision will be noted at the top of this page. Continued use of our website after any such changes constitutes your acceptance of the updated policy.