01Who we are

LeegAl ("LeegAl", "we", "us", "our") is a legal, tax, compliance and government-procurement advisory practice led by Adv. Gaurav Kumar, a practising advocate at the High Court of Jharkhand, operating from Ranchi, Jharkhand, India, with additional presence in Patratu (Ramgarh) and Delhi NCR. Our learning and training vertical, LeegAl Academy, operates at leegal.org.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules thereunder, LeegAl is the Data Fiduciary responsible for your personal data processed under this Policy.

02Scope of this Policy

This Policy applies to personal data collected through:

• Our websites — leegal.in, leegal.org and their subpages;
• The LeegAl mobile application distributed via the Google Play Store;
• Enquiry forms, WhatsApp conversations, phone calls, emails and consultations;
• Course enrolment and learning activity on LeegAl Academy;
• Documents you share with us for service delivery (e.g., registrations, filings, licences).

By using our websites, app or services, you consent to the practices described in this Policy. If you do not agree, please do not use our platforms or share personal data with us.

03Data we collect

a) Information you provide directly

b) Information collected automatically

• Device & usage data: device type, operating system, app version, IP address, browser type, pages visited, time spent, referral source and crash logs.
• Approximate location: derived from your IP address, used only to serve region-relevant content (e.g., state-specific compliance pages). We do not track precise GPS location.

04How we use your data

• To respond to your enquiries and provide requested consultations;
• To deliver the specific service you engage us for — registrations, filings, licensing, tender/bid support and related advisory;
• To prepare and submit applications on your behalf on government portals with your authorisation;
• To enrol you in, and administer, LeegAl Academy courses;
• To send service updates, deadline reminders (e.g., GST return due dates, renewal dates) and status notifications;
• To improve our websites, app and services through aggregated analytics;
• To comply with legal, tax, regulatory and professional obligations applicable to us;
• To establish, exercise or defend legal claims where necessary.

We do not sell or rent your personal data to anyone, and we do not use your data for third-party advertising.

05Legal basis & consent

We process personal data on the basis of: (a) your consent, given when you submit a form, message us, upload documents or enrol in a course; (b) processing necessary for the performance of services you have requested; and (c) legitimate uses permitted under the DPDP Act, including compliance with law. You may withdraw consent at any time as described in Sections 12 and 13; withdrawal will not affect processing already carried out, and may limit our ability to continue providing a service.

06When we share data

We share personal data only where necessary, with:

• Government authorities and portals — such as GST, MCA, Udyam, GeM, IREPS, MSTC, FSSAI, Pollution Control Boards, BIS and similar bodies — strictly to complete the service you have engaged us for;
• Service providers — hosting, cloud storage, analytics, communication tools (including WhatsApp Business) and payment processors, bound by confidentiality and used only to operate our services;
• Professional associates — empanelled tax practitioners, chartered accountants or advocates working under our engagement, only to the extent required for your matter;
• Legal requirement — where disclosure is required by law, court order or a lawful request of a governmental authority.

Any client name, logo, testimonial or case detail is published only with prior permission.

07WhatsApp & communications

Our primary enquiry channel is WhatsApp (+91 95721 91163). When you tap a "Talk to Expert", "Get Free Consultation" or similar button, you are redirected to WhatsApp with a pre-filled message; the conversation is then governed by WhatsApp's own privacy policy in addition to this one. Please avoid sending highly sensitive documents over chat unless our team requests them for your engaged service. By contacting us, you consent to receive service-related replies and updates; you may opt out of non-essential messages at any time by replying "STOP" or writing to us.

08App permissions & Google Play data safety

The LeegAl App requests only the permissions needed for its features:

Consistent with Google Play's Data Safety requirements: data collected by the App is encrypted in transit (HTTPS/TLS); you can request deletion of your data (Section 13); we do not sell data; and data is not shared with third parties for advertising. The App does not access contacts, call logs, SMS or precise location.

09Cookies & analytics

Our websites use essential cookies (for basic functionality) and analytics cookies (to understand aggregate usage, such as which service pages are most visited). Analytics data is aggregated and does not identify you personally. You can control or delete cookies through your browser settings; disabling cookies may affect some site features but will not prevent you from contacting us.

10Data security

We apply reasonable security safeguards appropriate to the nature of the data, including encrypted transmission (HTTPS/TLS), access restricted to team members working on your matter, secured cloud storage, and confidentiality obligations on all associates. Client documents are handled with the professional confidentiality expected of an advocate-led practice. No method of transmission or storage is 100% secure; in the unlikely event of a data breach affecting you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

11Data retention

• Enquiry data (no engagement): retained up to 24 months, then deleted or anonymised.
• Client engagement records & filings: retained for the duration of the engagement and thereafter as required by applicable law (e.g., tax and company-law record-keeping periods, typically up to 8 years).
• Academy records: enrolment and certification records retained to allow certificate verification.
• Analytics data: retained in aggregate form only.

When data is no longer needed for the purpose it was collected, and no legal retention obligation applies, we delete or anonymise it.

12Your rights

Under the DPDP Act, 2023, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed;
• Correction & updating — have inaccurate or incomplete data corrected;
• Erasure — request deletion of your data, subject to legal retention requirements;
• Withdraw consent — at any time, with effect for future processing;
• Grievance redressal — raise a complaint with our Grievance Officer (Section 17), and thereafter with the Data Protection Board of India;
• Nominate — designate another person to exercise your rights in case of death or incapacity.

To exercise any right, email info@leegal.in from your registered email or write to us on WhatsApp from your registered number. We respond within a reasonable period, and in any case within timelines prescribed by law.

13Account & data deletion

You can request deletion of your account (if any) and associated personal data at any time:

1. Email info@leegal.in with the subject line "Data Deletion Request", or message us on WhatsApp at +91 95721 91163;
2. Include your name and the registered phone number/email so we can verify the request;
3. We will confirm and complete deletion within 30 days, except for data we are legally required to retain (e.g., statutory filing records), which will be retained only for the mandated period and then deleted.

Uninstalling the LeegAl App removes it from your device but does not by itself delete data already shared with us — please use the process above.

14Children's privacy

Our services and app are intended for business owners, professionals and learners aged 18 years and above. We do not knowingly collect personal data from children. Where a minor's data may be processed (e.g., a younger Academy learner), we require verifiable consent of a parent or lawful guardian as mandated by the DPDP Act. If you believe a child has provided us data without such consent, contact us and we will delete it promptly.

15Third-party links & government portals

Our websites and app link to third-party platforms — including government portals (GeM, GST, IREPS, MSTC, Udyam, FSSAI and others), WhatsApp, YouTube and social media. These platforms operate under their own privacy policies, which we do not control. We recommend reviewing their policies before submitting data there.

16Changes to this Policy

We may update this Policy from time to time to reflect changes in law, technology or our services. The "Last updated" date at the top will always show the current version. Material changes will be highlighted on this page and, where appropriate, notified through the app or our communication channels. Continued use of our platforms after an update constitutes acceptance of the revised Policy.

17Grievance Officer & contact

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the contact details of our Grievance Officer are:

If you are not satisfied with our resolution, you may approach the Data Protection Board of India under the DPDP Act, 2023.