Privacy Policy

    Last Updated: February 15, 2026

    Introduction

    Aculegal (“we”, “us”, or “our”) is a legal service provider based in India, offering technology-enabled solutions in contract management, corporate advisory, compliance, legal notices, due diligence, trademark registration, litigation support, and related services to startups, SMEs, and growing enterprises.

    We are committed to protecting your privacy and handling any personal data you share with us responsibly and in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), along with other relevant regulations.

    This Privacy Policy explains how we collect, use, disclose, store, protect, and allow you to manage your personal data when you:

    • Visit our website (aculegal.com or any subdomain)
    • Submit inquiries, forms, or contact requests
    • Engage with our services (including consultations, document submissions, or client communications)
    • Subscribe to newsletters, blog updates, or other communications

    By accessing or using our website or services, you consent to the practices described in this Policy. If you do not agree, please do not provide us with any personal data or use our website.

    1. Personal Data We Collect

    We collect only such personal data as is necessary for the purposes described below. We may collect:

    1. Data you voluntarily provide
    • Name, email address, phone number, company name, designation/role
    • Business details (industry, stage of growth, location)
    • Any information you submit via contact forms, consultation requests, email, WhatsApp, or client intake forms
    • Uploaded documents or information shared during service engagement (e.g., contracts, business records for due diligence or advisory)
    1. Automatically collected data
    • IP address, browser type, device information, operating system
    • Pages visited, time/date of access, referral sources
    • Cookies, web beacons, and similar technologies (see Cookies section below)
    1. Data from third parties
    • Limited data from analytics providers (Google Analytics, etc.) or advertising platforms (if applicable)
    • Publicly available business information (e.g., company details from MCA portal when relevant to services)

    We do not knowingly collect sensitive personal data (as defined under DPDP Act) unless strictly necessary for providing legal services and with your explicit consent or where permitted by law.

    1. How We Use Your Personal Data

    We process personal data only for legitimate purposes, including:

    • Responding to inquiries, scheduling consultations, and providing initial legal guidance
    • Delivering contracted legal services (contract drafting/review, notices, due diligence, trademark filing, advisory, etc.)
    • Communicating with you about services, updates, newsletters, blog posts, or legal alerts (with opt-out option)
    • Improving our website, services, and user experience
    • Complying with legal, regulatory, professional (Bar Council), and ethical obligations
    • Preventing fraud, misuse, or security incidents
    • Enforcing our terms of use or client agreements
    1. Legal Basis for Processing

    Under the DPDP Act, we rely on:

    • Your consent (where required, e.g., marketing communications)
    • Performance of a contract or steps prior to entering a contract (e.g., consultation requests, service delivery)
    • Legitimate interests (e.g., website security, service improvement, fraud prevention) — balanced against your rights
    • Compliance with legal obligations (e.g., professional rules, tax/anti-money laundering requirements)
    1. Sharing & Disclosure of Personal Data

    We do not sell your personal data. We may share it only:

    • With service providers (cloud hosting, email service, analytics tools, payment gateways) under strict confidentiality agreements
    • With co-counsel, experts, or third-party professionals when necessary for service delivery (with your knowledge/consent where appropriate)
    • To comply with court orders, Bar Council requirements, law enforcement, or regulatory authorities
    • In connection with business transfers (merger, acquisition) — with notice where feasible
    1. Data Retention

    We retain personal data only as long as necessary for the purpose collected, or as required by law/professional rules (e.g., client files typically retained for 7–10 years post-engagement per Bar Council norms). Inquiry/contact data is generally kept for 2–3 years unless you request deletion.

    1. Your Rights under DPDP Act

    You have the right to:

    • Access your personal data
    • Correct inaccurate or incomplete data
    • Erase data (subject to legal/retention obligations)
    • Restrict or object to certain processing
    • Withdraw consent (where processing is consent-based)
    • Nominate a representative for data rights
    • Grieve to the Data Protection Board of India

    To exercise these rights, contact us at privacy@aculegal.com. We will respond within the timelines prescribed under DPDP Rules (generally one month, extendable in complex cases).

    1. Cookies & Tracking Technologies

    We use essential cookies for site functionality and analytics cookies (Google Analytics) to understand usage patterns. You can manage preferences via our cookie banner or browser settings. We do not use cookies for targeted advertising at this time.

    1. International Transfers

    If any data is processed outside India (e.g., cloud servers), we ensure appropriate safeguards compliant with DPDP Rules (e.g., contracts with processors incorporating required protections).

    1. Security

    We implement reasonable security safeguards (encryption in transit/rest where applicable, access controls, regular reviews) to protect personal data from unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

    1. Children’s Privacy

    Our website and services are not directed at children under 18. We do not knowingly collect data from children.

    1. Changes to This Policy

    We may update this Policy from time to time. Changes will be posted here with an updated “Last Updated” date. Material changes will be notified via email or website notice where appropriate.

    1. Contact Us

    For questions, rights requests, or grievances regarding this Privacy Policy:

    Email: contact@aculegal.com

    Postal: Aculegal, F239, Lakegarden, Kolkata – 700153, India