Data rights

This page explains how to ask M S Sulthan Legal Associates about the personal data it holds through this website, and how the firm answers. It sits alongside the privacy policy. Last updated 14 November 2026.

What you can ask for

• A summary of the personal data we hold about you and how it is used.
• Correction or completion of data that is wrong or incomplete.
• Erasure of data we no longer need.
• Withdrawal of a consent you gave, for example for the newsletter.
• Restriction of, or an objection to, processing, where the GDPR or UK GDPR applies.
• A copy of your data in a portable form, where the GDPR or UK GDPR applies.
• Under the California Consumer Privacy Act as amended: to know, delete and correct personal information, and to limit use of sensitive information. We do not sell or share personal information, so there is nothing to opt out of. If your browser sends an opt-out preference signal such as Global Privacy Control, we treat it as a valid opt-out request.
• Not to be subject to a decision based only on automated processing, where the GDPR, UK GDPR or a US State law applies. The firm does not make such decisions.
• Under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025: to have your grievance heard through the contact below before you approach the Data Protection Board of India.
• Under the Digital Personal Data Protection Act, 2023: to nominate another person to exercise your rights if you die or cannot act.

How to make a request

1. Email [email protected] from the address you used with us, with the subject "Data rights request".
2. Say which right you want to use and which country or State you live in.
3. Tell us how you dealt with the firm, for example the contact form, an email or an internship application, so that we can find the data.

You can also write through the contact page, but email is faster for these requests. Please do not send identity documents or case details with the request.

What happens next

• We acknowledge your request within 7 days.
• We confirm your identity by replying to the email address you used. We may ask a short question about your earlier contact with us.
• We answer within 30 days. If we cannot meet a request, for example because a law or a duty of confidentiality requires us to keep the data, we say so and give the reason.
• Where the GDPR or UK GDPR lets us extend the time for a complex request, we tell you within the 30 days and give the reason.
• If we decline a request and a US State law gives you the right to appeal, write to the same address with the subject "Appeal". We answer an appeal within 45 days.
• There is no charge for a request.

Records of client matters

Where you are or were a client, some records must be kept for the periods set by law and by professional rules, and they remain confidential. A request about those records is considered under those rules.

Grievances and complaints

Grievance contact: Muhammed Seena Sulthan P.P., Managing Partner. Email [email protected]. Telephone +91 98479 80019. Office hours 9:30 AM to 9 PM.

If your grievance is not resolved, you may complain to the Data Protection Board of India, which accepts complaints after you have first raised the matter with us. You may also complain to the data protection authority in the European Union State where you live, to the UK Information Commission, or to the California Privacy Protection Agency or the Attorney General of your State.