Privacy policy

Last modified: January 15, 2025

Privacy Policy

Effective Date: 28 March, 2025

1. INTRODUCTION

This Privacy Policy (“Policy”) delineates the modalities pursuant to which Lawflow (“Company,” “we,” “us,” or “our”) collects, processes, stores, transfers, and discloses personal data (as defined herein) from users (“User,” “you,” or “your”) of its website, applications, and services (collectively, “Platform”). By engaging with our Platform, you hereby consent to the terms articulated within this Policy.

2. LEGAL BASES FOR DATA PROCESSING

We process your personal data in accordance with the Information Technology Act, 2000, the General Data Protection Regulation (GDPR) (where applicable), and other relevant data protection laws. The legal bases for processing your personal data include:

  • Contractual Necessity: Where processing is necessary for the performance of a contract between you and us.

  • Legitimate Interest: Where processing is necessary for our legitimate business interests, provided your fundamental rights do not override these interests.

  • Legal Obligation: Where processing is required to comply with statutory obligations.

  • Consent: Where you have explicitly provided consent for data processing.

3. CATEGORIES OF DATA COLLECTED

3.1 Personal Data We may collect personally identifiable information (“PII”) including but not limited to:

  • Full name, contact details (phone number, email address, residential address)

  • Professional details (job title, employer name, business address)

  • Billing and financial information (credit card details, payment history)

  • Login credentials and security authentication data

3.2 Technical Data We may collect non-personally identifiable information including:

  • Internet Protocol (IP) address

  • Device identifiers, browser type, and operating system

  • Log data, cookies, and tracking technologies

  • Location data (where applicable and consented to)

3.3 Sensitive Data In accordance with applicable law, we may collect and process sensitive personal data such as:

  • Government-issued identification numbers (PAN, Aadhar, Social Security Number)

  • Biometric data (where required for authentication purposes)

  • Case-related confidential information stored by legal professionals using our Platform

4. DATA RETENTION POLICY

We shall retain your personal data for as long as necessary to fulfill the purposes outlined herein, including compliance with legal, regulatory, tax, accounting, or reporting requirements. Upon the expiration of the retention period, data shall be securely erased, anonymized, or archived in accordance with applicable legal obligations.

5. DATA SHARING AND DISCLOSURE

We do not sell or rent personal data. However, we may share your information with:

  • Third-Party Service Providers: Entities engaged in processing data on our behalf (e.g., hosting providers, analytics platforms, payment processors).

  • Affiliates & Business Partners: Where necessary for business operations and service provision.

  • Legal Authorities: In compliance with law enforcement requests, judicial orders, or other legal obligations.

  • Corporate Transactions: In cases of mergers, acquisitions, or asset transfers, your data may be transferred subject to confidentiality agreements.

6. INTERNATIONAL DATA TRANSFERS

Where applicable, your data may be transferred, stored, and processed outside your country of residence. Such transfers shall be subject to adequacy decisions, standard contractual clauses, or other legally recognized mechanisms ensuring data protection standards equivalent to those in your jurisdiction.

7. DATA SECURITY MEASURES

We implement industry-standard security protocols, including:

  • Encryption: End-to-end encryption of sensitive data using AES-256.

  • Access Controls: Role-based access restrictions with multi-factor authentication (MFA).

  • Regular Audits: Periodic penetration testing and vulnerability assessments.

  • Incident Response: Comprehensive breach detection, containment, and notification mechanisms.

8. USER RIGHTS & DATA SUBJECT REQUESTS

Subject to applicable law, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure (Right to be Forgotten): Request deletion of your data under specific conditions.

  • Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.

  • Right to Restriction of Processing: Request limitation on how we process your data.

  • Right to Object: Object to processing based on legitimate interests.

  • Right to Withdraw Consent: Withdraw any consent given for data processing.

Requests to exercise these rights can be submitted to lawflowofficial@gmail.com. We may require identity verification before processing such requests.

9. COOKIES & TRACKING TECHNOLOGIES

We utilize cookies, web beacons, and similar tracking technologies for various purposes, including:

  • Authentication and security

  • Service optimization

  • User behavior analytics

  • Advertising and marketing

You can manage cookie preferences via your browser settings. Disabling cookies may affect certain functionalities of the Platform.

10. THIRD-PARTY INTEGRATIONS

Our Platform may integrate with third-party services, including legal research databases, accounting software, and CRM tools. Such third parties operate under their respective privacy policies, and we do not assume liability for their data handling practices.

11. COMPLIANCE & GOVERNING LAW

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising hereunder shall be resolved through arbitration in [Insert City], India, in accordance with the Arbitration and Conciliation Act, 1996. In case of a conflict between this Policy and applicable data protection laws, the latter shall prevail.

12. MODIFICATIONS TO THIS POLICY

We reserve the right to update this Privacy Policy periodically. Users shall be notified of material changes via email or a prominent notice on our Platform. Continued use of our services after modifications constitutes acceptance of the revised Policy.

13. CONTACT INFORMATION

For queries, concerns, or to exercise your data rights, please contact us at: Email: lawflowofficial@gmail.com