Privacy Policy

1. Scope and applicable framework

This Policy applies to visitors, registered users, lawyers, law firms, people submitting legal enquiries and other persons interacting with the Platform. We process personal data in accordance with applicable Indian law, including applicable provisions of the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and other data-protection or information-technology requirements as they come into force.

By using the Platform or voluntarily providing information, you acknowledge the practices described here. Where applicable law requires consent for a particular activity, we will seek it through an appropriate notice or affirmative action. You may decline optional information, although some features may then be unavailable.

2. Personal data we may collect

Account and identity information

• Name, email address, mobile number, postal address, city, state, language and account credentials.
• Profile photograph and other information you choose to add to an account.
• For lawyers and law firms: professional biography, practice areas, experience, office details, enrolment or registration information, qualifications and verification documents.

Enquiries and service information

• The category and description of a legal issue, preferred location, documents, messages, feedback and other details you submit.
• Communications with LegalFoster support and, where a feature permits it, communications or appointment details exchanged through the Platform.
• Billing or transaction references where paid functionality is offered. Card, bank or payment credentials may be processed directly by payment providers rather than stored by LegalFoster.

Technical and usage information

• IP address, browser and device type, operating system, referring page, pages visited, timestamps, approximate location derived from technical data and diagnostic or security logs.
• Cookie identifiers, session information and interactions with Platform features.

3. How we collect information

We collect data directly when you register, create or update a professional profile, submit an enquiry, subscribe to updates, upload material, contact support or otherwise use an interactive feature. We also collect limited technical data automatically through server logs, cookies and similar technologies.

We may receive information from a lawyer, law firm, authorised representative, authentication provider, payment provider, public professional register or another source where permitted by law. If you provide another person’s data, you represent that you are authorised to do so and that the person has received any legally required notice.

4. How we use personal data

We may process personal data to:

• create, administer and secure accounts and professional profiles;
• operate legal directories and help users discover lawyers, law firms, services and legal information;
• route enquiries or requested contact details to relevant professionals and facilitate user-requested interactions;
• verify professional or business information and protect the integrity of listings;
• respond to questions, deliver service messages and provide customer support;
• personalise and improve content, navigation, reliability and accessibility;
• send newsletters or promotional communications where permitted, with an opt-out mechanism;
• detect fraud, misuse, security incidents and violations of our Terms of Use;
• maintain records, resolve disputes, establish or defend legal claims, and comply with lawful requests or legal obligations; and
• create aggregated or de-identified statistics that do not reasonably identify an individual.

5. Lawyer and law-firm profiles

Information deliberately supplied for a professional listing—such as name, photograph, practice areas, experience, office location, qualifications and professional contact details—may be publicly displayed and indexed by search engines. Public profile information may therefore remain visible in search caches for a period after it is changed or removed.

Verification documents that are not intended for public display are used for administration, trust and safety, and legal or compliance purposes. Professionals should not upload identity or credential information beyond what is requested.

6. When we share personal data

We do not sell or rent personal data as a standalone commercial product. We may disclose relevant data:

• At your request: to a lawyer, law firm or service provider you choose to contact or engage.
• To operational providers: hosting, cloud storage, email, messaging, authentication, analytics, security, support and payment vendors acting for us under appropriate obligations.
• For legal and safety reasons: where reasonably necessary to comply with law, court orders or lawful government requests; investigate fraud or abuse; enforce agreements; or protect rights, safety and Platform security.
• For a business change: to a successor or participant in a merger, reorganisation, financing or transfer of all or part of the Platform, subject to appropriate confidentiality and legal requirements.
• With consent: for another clearly described purpose you authorise.

A lawyer or law firm receiving an enquiry may independently determine how it handles information after accepting an engagement. Its professional duties and privacy practices may apply separately from this Policy.

7. Cookies and analytics

LegalFoster may use essential cookies for sessions, login, security and preferences, and analytics technologies to understand Platform use and performance. These tools may process device identifiers, IP address and interaction data. Third-party content or services may set their own technologies subject to their policies.

You can control non-essential cookies through available consent tools or browser settings. Blocking essential cookies may prevent login or other features from functioning correctly.

8. Data retention and transfers

We retain personal data only for as long as reasonably necessary for the purpose collected, account or service delivery, security, dispute resolution, legal claims and applicable record-keeping obligations. Retention periods vary by data type and context. When data is no longer required, we take reasonable steps to delete, anonymise or securely isolate it.

Data may be stored or processed by service providers in India or other permitted locations. Where cross-border processing occurs, we use reasonable contractual, organisational and technical safeguards and follow applicable transfer restrictions.

9. Security and account protection

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, alteration or disclosure. Access is limited according to operational need. However, no internet transmission or storage method can be guaranteed completely secure.

You are responsible for keeping login credentials confidential, using a strong unique password and promptly notifying us if you suspect unauthorised access. We may notify affected persons and authorities of a personal-data breach where required by applicable law.

10. Your rights and choices

Subject to applicable law and appropriate identity verification, you may request access to information about your personal data, correction of inaccurate or incomplete data, deletion or erasure, withdrawal of consent, grievance redressal, or closure of your account. You may unsubscribe from promotional email using the link provided or by contacting us.

Withdrawal does not affect processing already undertaken lawfully. We may retain limited information where required for law, security, fraud prevention, dispute resolution or the establishment, exercise or defence of legal claims. Some professional profile information may also be retained where necessary to document verification or moderation decisions.

To submit a request, use the details in the Contact section. Please identify the account or information involved and the right you wish to exercise. We may request reasonable proof of identity and authority before acting.

11. Children’s privacy

The Platform is not directed to children for independent use. A person below 18 years should use enquiry or account features only through, or with the involvement and verifiable consent of, a parent or lawful guardian as required by applicable law. If you believe a child has provided personal data without appropriate authorisation, contact us so we can review it.

12. External websites and third-party services

The Platform may link to external websites, professional pages, social networks, payment services or other third-party resources. Their privacy practices are controlled by their operators, not LegalFoster. Review their policies before providing personal data. A link or listing does not make LegalFoster responsible for the third party’s collection, security or use of information.

13. Changes to this Policy

We may update this Policy to reflect changes in law, technology or Platform features. The revised version will be published on this page with a new effective date. Where a material change affects registered users, we may provide an additional notice through the Platform or registered contact details as appropriate.

14. Contact and privacy grievances

For privacy questions, requests or grievances, contact LegalFoster through our Contact Us page or email hello@legalfoster.com.

Please include your name, registered email or mobile number, a clear description of the request and any information reasonably required to verify your identity. Do not email passwords, payment credentials or unnecessary confidential legal documents.

This Policy is intended to explain LegalFoster’s data practices and is not legal advice.