Privacy & Data Policy

1. Overview and Scope

Indian Attorneys Ltd ("the Company", "IA UK", "we", "us", "our") operates a technology-enabled platform facilitating connections between Clients and independent legal professionals based in India ("Network Attorneys"). This Privacy Policy explains how we collect, use, process, and protect personal data when you use our platform.

2. Data Controller and Fiduciary Identification

3. Taxonomy of Data Collected

We may collect and process the following categories of personal data:

3.1 Identity Data

Name, date of birth, nationality, and identification documents (where required for verification purposes).

3.2 Legal and Case Information

Information relating to your legal matter, including documents, communications, and case summaries submitted through the platform.

3.3 Platform Usage Data

Information provided during use of platform features, including inputs to matching tools and service requests.

3.4 Payment and Transaction Data

Transaction references, billing information, and payment status data processed via third-party payment providers. We do not store full card details.

3.5 Technical Data

IP address, device information, browser type, and interaction logs.

4. The AI Data Protocol

We process personal data for the following purposes:

• facilitating connections between Clients and Network Attorneys;
• enabling communication and case management;
• processing payments via third-party providers;
• improving platform functionality and user experience;
• ensuring platform security and preventing fraud;
• complying with legal and regulatory obligations.

5. Legal Basis for Processing

We process personal data in accordance with applicable law, including:

• Contractual necessity (to provide platform services);
• Legal obligations (including compliance and regulatory requirements);
• Legitimate interests (platform operation, security, and improvement);
• Consent, where required (including optional features or specific processing activities).

6. Trans-Border Data Sovereignty (UK -- India)

To facilitate legal services in India, personal data may be transferred outside the United Kingdom. Where such transfers occur, we implement appropriate safeguards, which may include:

• contractual protections;
• data transfer agreements;
• ensuring recipients are subject to appropriate confidentiality and data protection obligations.

7. The Secure Vault & Technical Security

We may share personal data only where necessary:

• Network Attorneys: where you choose to engage a legal professional;
• Payment Processing Providers: for secure transaction handling;
• Service Providers: supporting platform operations (e.g., hosting, infrastructure);
• Regulatory or Legal Authorities: where required by law.

We do not sell or rent personal data.

8. Data Retention and Disposal

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no digital system is completely secure, and users acknowledge the inherent risks associated with online data transmission.

9. Your Statutory Rights

We retain personal data only for as long as necessary:

• Case and account data: up to 6 years following account closure or completion of services;
• Financial records: up to 7 years for compliance with legal and tax obligations;
• Usage data: retained for a limited period and may be anonymised for analytics.

10. Third-Party Disclosures

Subject to applicable legal limitations, you may have the following rights:

• access to your personal data;
• correction of inaccurate data;
• deletion of data where applicable;
• restriction or objection to processing;
• data portability (where applicable);
• withdrawal of consent (where processing is based on consent).

Requests may be made using the contact details below.

11. Contact and Complaints

Payments and certain platform functions rely on third-party providers. These providers process data in accordance with their own privacy policies. We recommend reviewing their terms where relevant.

12. Contact and Complaints

For any data-related queries or requests:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on the platform with a revised effective date.