The IP Treat

Privacy Policy

Last updated: 16th October, 2026

1. Scope & data controller

IPTreat (“the Firm”, “we”, “us”, or “our”) operates as a legal services practice specializing in intellectual property, trademarks, patents, and copyright matters. This Privacy Policy details our procedures regarding the collection, retention, processing, and disclosure of personal and corporate data collected via our website or direct consultations.

Given our cross-border operational desks in Germany/EU (+49) and India (+91), this policy is structured in compliance with the EU General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act (DPDPA).

2. Information we collect

  • Information You Provide Directly: Full names, corporate designations, company affiliations, direct emails, phone numbers, and factual descriptions of intellectual property submitted via consultation forms.

  • Attorney-Client Preliminary Disclosures: Case details, prior art notes, and registration documentation submitted for conflict checks.

  • Automated Data Collection: IP addresses, browser specifications, operating systems, and session telemetry collected via essential and analytical cookies.

3. Purpose & Legal Basis of Processing

  • Conflict Checks & Due Diligence: Verification of non-adverse representation prior to client engagement.

  • Client Engagement & Service Execution: Drafting, filing, prosecuting, and defending IP assets before registries.

  • Legal & Regulatory Obligations: Compliance with statutory record-keeping, anti-money laundering (AML), and professional bar conduct rules.

  • Legitimate Interests: Monitoring website security, preventing automated abuse, and analyzing user interaction patterns.

4. Confidentiality & Attorney Privilege

We maintain strict statutory and professional confidentiality. Data submitted for conflict-checking and prospective representation is protected under applicable professional conduct codes. We do not sell, rent, or monetize client data under any circumstances.

5. Cross-Border Data Transfers & Security

  • Transmission of documents to statutory registries (e.g., USPTO, EPO, DPMA, CGPDTM, WIPO).

  • Cloud hosting and encrypted communication channels using standard industry encryption (TLS/SSL, AES-256).

  • Standard Contractual Clauses (SCCs) applied for cross-jurisdictional transfers between European and Asian facilities.

6. Your Rights

Under GDPR and DPDPA, users possess rights to:

  • Access, rectify, or request deletion of personal information (subject to mandatory bar retention requirements).

  • Withdraw consent for non-essential communications.

  • Direct inquiries and data requests to: vidushi@theiptreat.com