This Policy outlines how Legal Buddy India Private Limited (“LB”, “We”, “Our”) may process your Personal Data and may be updated periodically, so please review it regularly for any changes. First published on October 01, 2024.
Issued by LB, a global legal operation technology entity with offices in Noida, Delhi, Lucknow, and Mumbai, India, this Policy applies to individuals or non-individuals who interact with LB, including but not limited to customers, authorised representatives of customer organisations, visitors to our site, and users of our services (referred to as “you”, “your”).
This Policy may be revised to reflect changes in our Personal Data processing practices or applicable laws. We encourage you to read it carefully and check back regularly for updates.
(B) Collection of Personal Data
LB may collect your Personal Data in various ways: (i) directly from you (e.g., when you contact us); (ii) during our interactions with you (e.g., if LB provides compliance or business advice); (iii) when you make your Personal Data public (e.g., through social media posts); (iv) when you download, install, or use our applications; (v) when you visit our websites; (vi) when you register for LB services; or (vii) when you engage with third-party content or advertising on a Site or App.
LB may also receive your Personal Data from third parties (e.g., law enforcement agencies).
Sources of Personal Data we may collect include:
- Data you provide: We may collect your Personal Data when you voluntarily provide it to us (e.g., through emails, phone calls, or business cards).
- Relationship data: We may gather your Personal Data during our ongoing relationship with you (e.g., in correspondence).
- Public data: We may collect Personal Data that you have made publicly available, including on social media.
- App data: Your Personal Data may be collected when you download or use our applications.
- Site data: We may obtain your Personal Data when you visit our websites or use any features available there.
- Registration data: We may collect your Personal Data when you register or use our Sites, Apps, or services.
- Content and advertising interactions: If you engage with third-party content or ads on our Sites or Apps, we may receive your Personal Data from those third parties.
(C) Creation of Personal Data
LB may create Personal Data about you (e.g., records of your interactions with us), such as records of your communications and interactions with LB, including attendance at events we hold or interviews in the course of applying for a job with us. LB may record telephone calls, meetings, depositions, and other interactions in which you are involved, in accordance with applicable law.
(D) Categories of Personal Data LB May Process
LB may process the following categories of Personal Data:
- Personal details: Given name(s), preferred name, and photograph.
- Demographic information: Gender, date of birth/age, nationality, salutation, title, and language preferences.
- Identifier information: Passport or national ID number, utility provider details, bank statements, tenancy agreements.
- Contact details: Mailing address, phone number, email address, and public social media profiles.
- Matter details: Data related to individuals instructing LB, personal data in correspondence, transaction documents, evidence, or other materials processed while providing services or legal advice.
- Attendance records: Information on meetings or events organised by or on behalf of LB that you attended.
- Consent records: Records of any consents LB has provided, including the date, time, method of consent, and relevant information.
- Payment details: Billing address, payment method, bank account or credit card number, cardholder name, invoice records, payment amounts, and dates. LB does not save online payment data; financial transactions are processed only through recognised and professionally registered fintech.
- Data related to our Sites and Apps: Device type, operating system, browser, IP address, language preferences, usage statistics, usernames, passwords, and other technical communications.
- Employer details: If you engage with LB as an employee, your employer's name, address, phone number, and email address.
- Content and advertising data: Records of your interactions with LB online content and advertisements.
- Views and opinions: Any feedback or opinions you provide or publicly post about us on social media platforms.
(E) Sensitive Personal Data
When LB needs to process your Sensitive Personal Data for legitimate purposes, it does so in compliance with applicable laws. When such processing is necessary, LB relies on one of the following legal bases:
- Compliance with applicable law: LB processes your Sensitive Personal Data when required or permitted by law (e.g., to meet diversity reporting obligations).
- Crime detection and prevention: LB may process your Sensitive Personal Data if necessary for detecting or preventing crime, including fraud.
- Legal rights: LB processes your Sensitive Personal Data when needed to establish, exercise, or defend legal rights.
- Consent: LB may process your Sensitive Personal Data with your explicit consent, in line with applicable laws.
(F) Purposes of Processing and Legal Bases
LB processes Personal Data for the following purposes: providing our Sites, Apps, and services; compliance checks; operating our business; communicating with you; managing our IT systems; health and safety; financial management; conducting surveys; ensuring security; conducting investigations; compliance with applicable law; improving our platforms; fraud prevention; and recruitment.
- Provision of Sites, Apps, and Services: To provide legal and compliance advice, promotional materials, and communication. Processing is necessary for fulfilling a contract with LB or based on legitimate interest or prior consent.
- Compliance Checks: To meet regulatory obligations, verify identities, perform Know Your Client checks, and screen against legal restrictions. Processing is necessary to comply with legal obligations or based on legitimate interest.
- Business Operations: To manage our Sites, Apps, and services, including providing content, displaying ads, and communicating changes.
- Communications and Marketing: To communicate relevant news, update contact information, and record interactions (with prior opt-in consent where applicable).
- IT Systems Management: To manage our IT and communication systems, conduct audits, and ensure security.
- Health and Safety: For health and safety assessments, record-keeping, and maintaining secure premises.
- Financial Management: For sales, finance, audits, and vendor management.
- Surveys: To contact you for feedback on our Sites, Apps, and services.
- Security: For physical and electronic security, including CCTV recordings and access logs.
- Investigations: To investigate and prevent policy violations and criminal activity.
- Legal Proceedings: To establish, exercise, or defend legal rights.
- Legal Compliance: To meet our legal and regulatory obligations under applicable laws.
- Improving Sites, Apps, and Services: To identify issues, plan improvements, and create new features for our platforms.
- Fraud Prevention: To detect, prevent, and investigate fraud.
- Recruitment and Job Applications: For recruitment activities, job applications, and hiring decisions.
(G) Disclosure of Personal Data to Third Parties
LB may share your Personal Data with:
- Legal and regulatory authorities, as required or for reporting violations of law
- Accountants, auditors, legal advisors, and other external professionals working with LB, under strict confidentiality agreements
- Third-party Processors (e.g., data hosting and document review service providers), including Google, Amazon, Microsoft, MongoDB, Razorpay, Paytm, and Adobe
- Any relevant party, law enforcement agency, or court when necessary for establishing, exercising, or defending legal rights
- Any relevant party involved in preventing, investigating, detecting, or prosecuting criminal offences
- Potential third-party acquirers, if LB sells or transfers any part of its business or assets
- Any third-party provider whose advertising, plugins, or content appears on our Sites or Apps
If we work with a third-party Processor, they will be required by contract to: (i) only process your Personal Data according to our written instructions; and (ii) implement measures to protect the confidentiality and security of the data.
(H) International Transfer of Personal Data
LB may transfer your Personal Data to recipients in other countries. Where LB transfers Personal Data from the EEA or the UK to a recipient outside the EEA or the UK that is not in an adequate jurisdiction, LB does so on the basis of Standard Contractual Clauses.
You may request a copy of our Standard Contractual Clauses by contacting our Data Privacy Officer at dpo@legalbuddy.in.
Please note that when you transfer any Personal Data directly to a LB entity established outside the EEA, LB is not responsible for that transfer. LB will nevertheless process your Personal Data, from the point at which LB receives those data, in accordance with the provisions of this Privacy Policy.
(I) Data Security
LB implements appropriate technical and organisational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful or unauthorised forms of processing, in accordance with applicable law.
Because the internet is an open system, the transmission of information via the internet is not completely secure. Although we will implement all reasonable measures to protect your personal data, we cannot guarantee the security of your data transmitted to us using the internet — any such transmission is at your own risk.
(J) Data Accuracy
LB takes every reasonable step to ensure that your Personal Data that we process are accurate and, where necessary, kept up to date; and that any inaccurate Personal Data are erased or rectified without delay. From time to time, LB may ask you to confirm the accuracy of your Personal Data.
(K) Data Minimisation
LB takes every reasonable step to ensure that your Personal Data that we process are limited to the Personal Data reasonably necessary in connection with the purposes set out in this Policy.
(L) Data Retention
LB takes every reasonable step to ensure that your Personal Data are only retained for as long as they are needed in connection with the purposes set out in this Policy, or as required by applicable law.
(M) Your Legal Rights
Subject to applicable law, you may have a number of rights regarding our processing of your Personal Data, including:
- The right not to provide your Personal Data to us (however, please note that LB may be unable to provide you with the full benefit of our Sites, Apps, or services if you do not provide us with your Personal Data)
- The right to request access to, or copies of, your Personal Data, together with information regarding the nature, processing and disclosure of those Personal Data
- The right to request rectification of any inaccuracies in your Personal Data
- The right to request, on legitimate grounds: erasure of your Personal Data; or restriction of processing of your Personal Data
- The right to object to the processing of your Personal Data
- The right to have certain Personal Data transferred to another Controller in a structured, commonly used and machine-readable format
- Where LB processes your Personal Data on the basis of your consent, the right to withdraw that consent
- The right to lodge complaints with a Data Protection Authority regarding the processing of your Personal Data by us or on our behalf
To exercise one or more of these rights, please contact our Data Privacy Officer at dpo@legalbuddy.in or write to us at our registered office. Please note that LB may require proof of your identity before giving effect to these rights.
Any delay or loss, cost shall not be payable, unless LB has solely caused the delay, beyond a reasonable period, without any purposes or cause.
For data privacy queries, contact our Data Privacy Officer at dpo@legalbuddy.in. For general enquiries, email care@legalbuddy.in.