Terms of Service

  1. Introduction
    Rebizco (“Company,” “we,” “our,” or “us”) is a legal services firm providing compliance consulting, startup advisory, and legal drafting services. We are committed to protecting your privacy and handling your personal and confidential information in accordance with Indian privacy laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), and international standards including GDPR and CCPA where applicable.
    This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you engage our legal services or visit our website www.rebizcoadvisory.com  
  1. Legal Basis for Processing
    Under Indian law and international frameworks, we process personal data based on: 
  • Legitimate interests for providing legal services and business operations 
  • Contractual necessity for fulfilling legal service agreements 
  • Legal obligation for compliance with Indian laws, Bar Council regulations, and court requirements 
  • Consent for marketing communications and non-essential processing 
  • Vital interests for preventing legal harm or protecting rights 
  1. Categories of Personal Data We Collect
    3.1 Client Identity and Contact Information 
  • Full name, aliases, and previous names 
  • Residential and business addresses 
  • Phone numbers, email addresses, and communication preferences 
  • Identity documents (PAN, Aadhaar, passport, voter ID) 
  • Professional credentials and business registration details
    3.2 Financial and Commercial Data 
  • Bank account details and financial statements 
  • Income tax returns and GST registration information 
  • Investment details and asset information 
  • Transaction records and payment history 
  • Credit reports and financial assessments 
  • Revenue and business performance data
    3.3 Legal and Regulatory Documents 
  • Corporate documents (MOA, AOA, board resolutions) 
  • Contracts, agreements, and legal correspondence 
  • Regulatory filings and compliance records 
  • Intellectual property documents 
  • Litigation history and court records 
  • Due diligence materials and legal opinions
    3.4 Sensitive Personal Data (as defined under Indian law) 
  • Financial information and payment data 
  • Legal proceedings and criminal history (where relevant) 
  • Health information (for insurance or benefit matters) 
  • Biometric data (for verification purposes) 
  • Religious or political beliefs (where relevant to legal matters)
    3.5 Digital and Technical Information 
  • IP addresses and device identifiers 
  • Website usage patterns and analytics 
  • Email communication metadata 
  • Document access logs and version history 
  • Security credentials and authentication data
    3.6 Third-Party Information 
  • Information about directors, partners, and key personnel 
  • Family member details (for succession planning) 
  • Counterparty information in transactions 
  • Witness and reference information 
  1. How We Use Your Information
    4.1 Primary Legal Services 
  • Providing legal advice, consultation, and representation 
  • Drafting, reviewing, and negotiating legal documents 
  • Regulatory compliance assessment and guidance 
  • Due diligence and risk assessment 
  • Dispute resolution and litigation support 
  • Corporate structuring and business advisory
    4.2 Regulatory and Compliance Obligations 
  • Know Your Customer (KYC) verification 
  • Anti-Money Laundering (AML) compliance 
  • Prevention of Money Laundering Act (PMLA) requirements 
  • Foreign Exchange Management Act (FEMA) compliance 
  • Companies Act and Securities law compliance 
  • Tax law compliance and reporting
    4.3 Business Operations 
  • Client onboarding and conflict checks 
  • Billing, invoicing, and payment processing 
  • Professional indemnity insurance claims 
  • Quality assurance and file management 
  • Training and professional development
    4.4 Communication and Marketing 
  • Service-related communications 
  • Legal updates and regulatory changes 
  • Marketing materials (with consent) 
  • Event invitations and professional networking 
  1. Legal Professional Obligations
    5.1 Attorney-Client Privilege
    Communications between clients and our legal professionals are protected by attorney-client privilege under Section 126 of the Indian Evidence Act, 1872. This privilege belongs to the client and can only be waived by the client.
    5.2 Professional Confidentiality
    We maintain strict confidentiality in accordance with: 
  • Bar Council of India Rules 
  • Standards of Professional Conduct and Etiquette 
  • Fiduciary duties to clients 
  • Professional indemnity insurance requirements
    5.3 Conflict of Interest Management
    We maintain comprehensive conflict checking systems to ensure we can represent clients without conflicts of interest, which may require processing information about potential and existing clients. 
  1. Data Sharing and Disclosure
    6.1 Authorized Service Providers
    We may share information with trusted partners who assist in service delivery: 
  • Co-counsel and legal consultants 
  • Expert witnesses and technical specialists 
  • Court reporters and process servers 
  • Document management and IT service providers 
  • Banking and payment processors 
  • Professional indemnity insurers
    6.2 Regulatory and Legal Disclosures
    We may disclose information as required by: 
  • Court orders and judicial proceedings 
  • Regulatory authorities (RBI, SEBI, CCI, etc.) 
  • Tax authorities and government agencies 
  • Law enforcement agencies 
  • Bar Council disciplinary proceedings 
  • Prevention of Money Laundering Act reporting
    6.3 Client-Authorized Disclosures 
  • Counterparties in transactions (with client consent) 
  • Regulatory bodies for approvals and registrations 
  • Financial institutions for due diligence 
  • Other professional advisors (accountants, consultants)
    6.4 International Transfers
    For international transactions or multi-jurisdictional matters, we may transfer data outside India with appropriate safeguards: 
  • Standard Contractual Clauses (SCCs) 
  • Data Processing Agreements 
  • Cross-border data transfer mechanisms 
  • Client consent for necessary transfers 
  1. Data Security and Protection
    7.1 Technical Safeguards 
  • End-to-end encryption for sensitive communications 
  • Secure document management systems 
  • Multi-factor authentication and access controls 
  • Regular security audits and vulnerability assessments 
  • Encrypted data backup and disaster recovery 
  • Secure destruction of physical and digital records
    7.2 Organizational Measures 
  • Staff training on data protection and confidentiality 
  • Need-to-know access principles 
  • Regular security awareness programs 
  • Incident response and breach notification procedures 
  • Third-party security assessments 
  • Professional indemnity and cyber liability insurance
    7.3 Physical Security 
  • Secure office premises with access controls 
  • Locked filing systems for physical documents 
  • Clean desk policies and document handling procedures 
  • Visitor access restrictions and monitoring 
  • Secure disposal of confidential waste 
  1. Data Retention and Disposal
    8.1 Legal Service Records 
  • Active client files: Duration of engagement plus 7 years 
  • Closed matter files: 7 years from completion 
  • Court documents: Permanent retention for litigation matters 
  • Regulatory filings: As required by applicable regulations 
  • Financial records: 7 years from last transaction
    8.2 Privileged Communications 
  • Attorney-client privileged documents: Indefinite retention 
  • Work product materials: 7 years minimum 
  • Confidential client information: As required by professional rules
    8.3 Disposal Procedures 
  • Secure shredding of physical documents 
  • Certified digital data destruction 
  • Client notification before disposal (where required) 
  • Retention of disposal certificates and logs 
  1. Your Rights Under Indian and International Law
    9.1 Under the DPDP Act, 2023 
  • Right to information about data processing 
  • Right of access to your personal data 
  • Right to correction of inaccurate data 
  • Right to erasure (subject to legal and professional obligations) 
  • Right to grievance redressal through our designated officer 
  • Right to withdraw consent (where processing is based on consent)
    9.2 Under GDPR (for EU data subjects) 
  • Right to data portability 
  • Right to object to processing 
  • Right to restrict processing 
  • Right to be informed about automated decision-making
    9.3 Under CCPA (for California residents) 
  • Right to know about data collection and use 
  • Right to delete personal information 
  • Right to opt-out of data sales 
  • Right to non-discrimination
    9.4 Exercising Your Rights
    To exercise your rights, contact our Data Protection Officer at: 
  • Email: [Insert DPO Email] 
  • Address: [Insert Address] 
  • Phone: [Insert Phone Number]
    We will respond to your request within 30 days as required by law. 
  1. Grievance Redressal
    Escalation Process
    If you are not satisfied with our response, you may escalate to: 
  • The Data Protection Board of India 
  • Relevant Bar Council disciplinary authorities 
  • Consumer protection forums 
  • Civil courts with jurisdiction 
  1. Cookies and Website Analytics
    11.1 Essential Cookies 
  • Session management and security 
  • User authentication and preferences 
  • Website functionality and performance
    11.2 Analytics and Performance 
  • Google Analytics (anonymized data) 
  • Website usage statistics 
  • Performance monitoring tools
    11.3 Marketing Cookies (with consent) 
  • Social media integration 
  • Targeted advertising 
  • Email marketing tracking
    You can manage cookie preferences through your browser settings or our cookie consent management tool. 
  1. Third-Party Services and Links
    Our website may contain links to third-party services including: 
  • Court websites and legal databases 
  • Regulatory authority portals 
  • Professional associations 
  • Legal research platforms
    We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies. 
  1. Third-Party Services and Links
    Our website may contain links to third-party services including: 
  • Court websites and legal databases 
  • Regulatory authority portals 
  • Professional associations 
  • Legal research platforms
    We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies. 
  1. Data Breach Notification
    In case of a data breach, we will: 
  • Notify the Data Protection Board within 72 hours (where required) 
  • Inform affected individuals without undue delay 
  • Provide details about the breach and remedial measures 
  • Maintain records of all data breaches 
  • Cooperate with regulatory investigations 
  1. Professional Insurance and Liability
    Our professional indemnity insurance covers data protection liabilities. However, this does not limit your rights under applicable data protection laws. 
  1. Updates to This Policy
    We may update this Privacy Policy to reflect: 
  • Changes in Indian privacy laws 
  • New international compliance requirements 
  • Updates to our service offerings 
  • Technological improvements
    Material changes will be communicated through: 
  • Website notifications 
  • Email to registered clients 
  • Direct communication for significant changes 
  1. Compliance Certifications
    We maintain compliance with: 
  • ISO 27001 Information Security Management 
  • Bar Council of India professional standards 
  • Industry best practices for legal services 
  • International data protection frameworks 
  1. Contact Information
    Rebizco Legal Services
    Email: info@rebizcoadvisory.com
    Phone: +91 9873856939
    Website: www.rebizcoadvisory.com  
Business hours

Monday to Friday, 9:00 AM - 6:00 PM