1. Introduction

Welcome to The legalLobby, operated by LEXHUBPRO PRIVATE LIMITED (hereinafter referred to as "we," "us," "our," or "the Company"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform and marketplace services.

2. Information We Collect

2.1 Personal Information

We collect the following categories of personal information:

• Identity Information: Name, date of birth, gender, photographs
• Contact Information: Email address, phone number, postal address
• Professional Information: Bar Council registration number, practice areas, educational qualifications, professional experience, court jurisdictions
• Financial Information: Bank account details, GST number, PAN card, payment information (processed through secure third-party payment gateways)
• Account Information: Username, password (encrypted), profile preferences
• Communication Data: Records of your communications with us and other users through the platform

2.2 Sensitive Personal Data or Information (SPDI)

Under Indian law, the following information is classified as Sensitive Personal Data or Information:

• Passwords (stored in encrypted form)
• Financial information (bank account, credit card, debit card, or other payment instrument details)
• Physical, physiological, and mental health condition (if provided for insurance or health-related legal matters)
• Biometric information (if collected for authentication purposes)

We collect SPDI only with your explicit consent and implement enhanced security measures for its protection.

2.3 Usage Information

• Device information (IP address, browser type, operating system)
• Usage data (pages viewed, features used, time spent, search queries)
• Location data (with your permission)
• Cookies and similar tracking technologies

3. How We Collect Information

We collect information through:

• Direct Collection: Information you provide during registration, profile creation, or service usage
• Automated Collection: Cookies, log files, and analytics tools
• Third-Party Sources: Bar Council databases (for verification), payment processors, social media (if you choose to link accounts)
• User-Generated Content: Reviews, ratings, case documents, and communications

4. Purpose of Data Collection

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve our platform services
• Marketplace Functionality: To connect clients with legal professionals
• Verification: To verify professional credentials and prevent fraud
• Communication: To send service updates, notifications, and marketing communications (with your consent)
• Payment Processing: To facilitate transactions and billing
• Legal Compliance: To comply with applicable laws and regulations
• Analytics: To analyze platform usage and improve user experience
• Security: To protect against unauthorized access, fraud, and other security threats
• Customer Support: To respond to inquiries and provide assistance

5. Data Sharing and Disclosure

5.1 With Your Consent

We share your profile information on our marketplace with your explicit consent. Legal professionals' profiles are publicly visible to potential clients.

5.2 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing (e.g., Razorpay, PayU)
• Cloud storage and hosting
• Customer support services
• Analytics and marketing tools
• Communication services (email, SMS)

These providers are contractually bound to maintain confidentiality and use data only for specified purposes.

5.3 Legal Requirements

We may disclose your information when required by law, including:

• Compliance with legal obligations or court orders
• Response to lawful requests from government authorities
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5.5 Other Users

Certain information (such as lawyer profiles, reviews, and ratings) is shared with other platform users to facilitate the marketplace functionality.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (minimum 5 years for financial records as per Indian law)
• Resolve disputes and enforce our agreements
• Maintain business records

Upon account closure, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures in compliance with the IT Act, 2000 and ISO 27001 standards:

• Encryption: SSL/TLS encryption for data in transit; AES-256 encryption for data at rest
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Annual security audits and vulnerability assessments
• Secure Infrastructure: Cloud hosting with ISO-certified data centers in India
• Employee Training: Regular privacy and security training for all personnel
• Incident Response: Documented procedures for data breach notification

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Under Indian law, you have the following rights regarding your personal information:

• Access: Request copies of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Withdrawal of Consent: Withdraw consent for data processing (may limit service availability)
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, contact our Grievance Officer (details below).

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze platform usage and performance
• Provide personalized content and recommendations
• Enable social media features

You can control cookies through your browser settings. Note that disabling cookies may limit platform functionality.

10. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware of such collection, we will promptly delete the information.

12. International Data Transfers

Your data is primarily stored on servers located in India. If we transfer data outside India, we will ensure adequate safeguards are in place as required by Indian law.

13. Updates to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or platform notification. The "Last Updated" date at the top indicates the latest revision.

14. Compliance with Indian Laws

This Privacy Policy complies with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection (E-Commerce) Rules, 2020
• Digital Personal Data Protection Act, 2023 (when applicable)

16. Consent

By using The legalLobby platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.