Important publication note: This detailed policy template is prepared for Lawabet but must be checked against the actual contracting entity, website configuration, service model and applicable jurisdictions before publication. It is not a certification of legal compliance.

1. We identify the organization responsible for processing before this policy is published.
2. We collect only information reasonably relevant to an enquiry, requested service, security or a legal obligation.
3. Information may include name, business contact details, organization, role and enquiry content supplied by you.
4. We may receive information you choose to include in files, instructions or service communications.
5. Technical information may include browser type, device information, approximate usage data and server logs.
6. We do not ask visitors to submit unnecessary sensitive, confidential or privileged information through a general web form.
7. Please do not upload medical records, identity documents or case files until an approved secure channel is agreed.
8. We use enquiry information to respond, assess requirements and communicate about requested services.
9. We may use information to prepare proposals, manage engagements and provide customer support.
10. We may process information to maintain website functionality, diagnose errors and protect systems.
11. We may use information to meet applicable legal, regulatory, accounting or recordkeeping duties.
12. We do not sell personal information as a business model.
13. We do not use enquiry information for unrelated marketing without an appropriate lawful basis and any required consent.
14. Where consent is the basis, you may withdraw it subject to legal and operational limitations.
15. Processing purposes and lawful bases must be confirmed for each jurisdiction in which the organization operates.
16. We restrict access to personnel and contractors who need information for an authorized purpose.
17. Personnel and providers should be subject to appropriate confidentiality obligations.
18. We assess service providers according to the type and sensitivity of information they handle.
19. We share information only where necessary for a stated purpose, with authorization, or as permitted or required by law.
20. We may disclose information to professional advisers, auditors or authorities where legally appropriate.
21. If a business reorganization occurs, any transfer of information must be handled under applicable law.
22. We do not represent that email or ordinary website forms are suitable for privileged or highly sensitive information.
23. Users should verify the recipient and channel before sending confidential material.
24. Information may be processed in countries other than the visitor’s country, depending on hosting and service providers.
25. Any cross-border transfer must be assessed and supported by required safeguards where applicable.
26. We retain information only for as long as reasonably necessary for its purpose and applicable obligations.
27. Retention periods depend on the type of information, engagement status, legal requirements and dispute risks.
28. When information is no longer required, it should be securely deleted, anonymized or otherwise disposed of.
29. Backups may retain residual copies for a limited period under the applicable backup cycle.
30. We use reasonable technical and organizational measures appropriate to the information and risk.
31. No internet transmission or storage method can be guaranteed completely secure.
32. Visitors should notify us promptly if they suspect a message or submission was sent to the wrong recipient.
33. Where required by law, we will assess and respond to a personal-data incident and notify affected parties or authorities.
34. Depending on applicable law, individuals may request access to personal information about them.
35. Depending on applicable law, individuals may request correction of inaccurate information.
36. Depending on applicable law, individuals may request deletion or restriction of processing.
37. Depending on applicable law, individuals may object to certain processing or request portability.
38. We may need to verify identity before responding to a rights request.
39. Rights may be limited where an exception, legal duty, privilege or third-party right applies.
40. We will respond to eligible requests within the period required by applicable law.
41. Parents or guardians should contact us if they believe a child has submitted personal information improperly.
42. The website is not intentionally designed to solicit personal information from children.
43. Our website may link to third-party websites that operate under their own privacy practices.
44. We are not responsible for the privacy practices of external websites we do not control.
45. Cookie and similar technology use is described in our Cookie Policy.
46. Where required, non-essential cookies or tracking technologies will not be activated before valid consent.
47. We may update this policy to reflect changes in operations, law or technology.
48. The latest revision date should be displayed whenever this policy is changed.
49. If a material change requires notice or consent, the organization should provide it as required by law.
50. Questions and privacy requests should be sent to office@nomosots.in until a dedicated verified privacy contact is configured.
51. This template must be reviewed against the actual contracting entity, processing systems and applicable law before publication.

Questions and requests

For now, contact the website contact page. The project contact email currently configured for enquiry handling is office@nomosots.in; confirm the responsible entity and monitored privacy/legal contact before public launch.