Data Protection Policy

Legum Lex is committed to protecting the personal data of its users in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) of India.

1. Principles of Data Processing

We process personal data based on the following principles:

• Lawnfulness and Transparency: Data is processed only for legitimate purposes with your consent or as allowed by law.
• Purpose Limitation: Data is collected for specific, documented purposes and used only for those purposes.
• Data Minimization: We collect only the data necessary for the services provided.
• Accuracy: We take steps to ensure your data remains accurate and complete.
• Storage Limitation: Data is retained only as long as necessary for the purpose of processing or as required by law.

2. Data Principal Rights

Under DPDPA 2023, you as the "Data Principal" have the following rights:

• Right to Information: To know what data is being processed and for what purpose.
• Right to Correction and Erasure: To correct inaccurate data or request deletion of data that is no longer necessary.
• Right of Grievance Redressal: To have your complaints addressed by the Data Fiduciary (Legum Lex).
• Right to Nominate: To nominate an individual to exercise your rights in the event of death or incapacity.

3. Data Security Obligations

As the "Data Fiduciary," Legum Lex implements reasonable security safeguards to prevent personal data breaches. This includes technical and organizational measures such as encryption, access controls, and secure infrastructure.

4. Data Breach Notification

In the event of a personal data breach, Legum Lex will notify the Data Protection Board and the affected Data Principals in the manner prescribed by law.

5. Consent Management

Consent for data processing is obtained in a clear and accessible manner. You have the right to withdraw your consent at any time, subject to legal or contractual obligations.