Privacy policy

LawyerDesk Advocacy Pvt. Ltd. (CIN U70200AP2023PTC112930), #32-20-20, Captain Ramarao Jn, Allipuram, Visakhapatnam - 530004, Andhra Pradesh, India, is the Data Fiduciary for personal data collected through this website and for our own business contacts. When a bank, NBFC, law firm or other customer uploads documents to LegiScore, the customer decides why and how that data is processed and we act as its Data Processor under our agreement with it.

This policy is written to meet India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, and also describes rights available to visitors from the EU, UK and elsewhere.

We do not knowingly collect sensitive data through the website, and we ask you not to send identity numbers or financial credentials in contact forms.

We process personal data on the basis of your consent, or for the limited legitimate uses the DPDP Act recognises, for these purposes:

• responding to enquiries and arranging demos;
• providing, securing and supporting the Services you or your organisation have requested;
• billing, tax and statutory compliance;
• measuring and improving the website with analytics (only with your consent where required);
• preventing fraud and abuse and defending legal claims.

We do not sell personal data and do not use it for advertising profiles.

We share personal data only with:

• service providers acting on our instructions, such as cloud hosting, email delivery, analytics and payment processors;
• professional advisers and, where legally required, courts, regulators or law enforcement;
• a successor entity in a merger or acquisition, bound by this policy.

Customer documents are accessible only to the customer's authorised users and to our staff and advocates who need access to deliver the Service.

Our infrastructure may use cloud regions and sub-processors outside India. The DPDP Act permits transfers to countries other than those the Government of India restricts. Where required, for visitors in the EU or UK we rely on appropriate safeguards such as standard contractual clauses. Contact us for a list of current sub-processors.

• Enquiries: up to 24 months after the last interaction.
• Account and billing records: for the statutory period under Indian tax and company law, generally eight years.
• Customer documents and reports: for the period in the customer's agreement, then deleted or returned on request, subject to legal holds.
• Analytics data: as set in the analytics tool, typically 14 months.

When data is no longer needed for its purpose or the law, we erase or anonymise it.

We apply access controls, encryption in transit and at rest, logging and least-privilege access. No system is perfectly secure. If a personal data breach occurs we will notify the Data Protection Board of India and affected individuals as the DPDP Act and its rules require.

Under the DPDP Act you may:

• access a summary of the personal data we process and the parties we share it with;
• ask us to correct, complete or update your data;
• ask us to erase data that is no longer necessary;
• withdraw consent at any time, which does not affect earlier lawful processing;
• seek grievance redressal and nominate another person to exercise your rights if you die or become incapacitated.

Visitors in the EU or UK also have rights to restriction, objection and portability under GDPR or UK GDPR, and the right to complain to their supervisory authority. To exercise a right, email info@legiscore.in; we aim to respond within 30 days.

Our website and Services are not directed at anyone under 18. We do not knowingly process the personal data of children, and we do not track or target them. If you believe a child has given us data, contact us and we will delete it.

See our Cookie Policy for how essential cookies and analytics work and how to control them.

If you have a complaint about how we handle personal data, contact our Grievance Officer first:

• Grievance Officer, LawyerDesk Advocacy Pvt. Ltd.
• Email: info@legiscore.in
• Phone: +91 6262 868600 (9:00 AM to 6:00 PM IST)
• Address: #32-20-20, Captain Ramarao Jn, Allipuram, Visakhapatnam - 530004, Andhra Pradesh, India

We acknowledge complaints promptly and aim to resolve them within 72 hours of receipt for acknowledgement and within 30 days for resolution. If unresolved, you may approach the Data Protection Board of India.

We will update this policy as our practices or the law change and will revise the date above. Material changes will be highlighted on the website or sent to account holders.