LegalStanley: Company Formation & Compliance Consultants in Kerala, UAE, and USA
Privacy Policy
“Your information is handled with the same confidentiality and integrity we bring to every legal matter”
Last Updated: 1st April 2026
M/s. LegalStanley Corporate Law Firm, a firm registered under the laws of India and having its registered office at 1A, First Floor, Isaac’s Image Utility Point, Green Garden Road, Sea Port Airport Road, Kakkanad, Kochi, Kerala, India – 682030 (“LegalStanley”, “Firm”, “We”, “Us” or “Our”), which expression shall, unless repugnant to the context or meaning thereof, include its partners, associates, employees, consultants, authorised personnel and permitted assigns), is committed to protecting the privacy, confidentiality, and security of personal data entrusted to it in the course of rendering professional legal and consultancy services.
This Privacy Policy (“Policy”) sets out the manner in which the Firm collects, processes, stores, uses, discloses, retains, and protects personal data of clients, prospective clients, website users, applicants, vendors, service providers, and other individuals in accordance with the provisions of the Digital Personal Data Protection Act, 2023, and the rules, notifications, and guidelines and other applicable laws, as amended from time to time.
This Policy shall be read in conjunction with the Firm’s Terms of Use, Refund Policy, Engagement Letters, Retainer Agreements, and any other contractual arrangements entered into between the Firm and its clients. By accessing the Firm’s website, communicating with the Firm, or availing its services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy, subject always to applicable law.
1. Purpose, Scope and Applicability of this Privacy Policy
1.1 The purpose of this Privacy Policy is to set out the principles, procedures, and safeguards adopted by LegalStanley Corporate Law Firm for the collection, processing, storage, use, disclosure, retention, and protection of personal data, in accordance with the provisions of the Digital Personal Data Protection Act, 2023, and other applicable laws for the time being in force, as amended from time to time (“Applicable Laws”).
1.2 This Policy applies to all personal data processed by the Firm in the course of its professional legal and consultancy services, business operations, recruitment activities, marketing and communication initiatives, website usage, compliance procedures, and any other lawful activity undertaken by the Firm, whether such processing is carried out electronically, digitally, or through physical records.
1.3 This Policy is applicable to all individuals whose personal data is processed by the Firm, including but not limited to clients, prospective clients, website visitors, job applicants, interns, employees, vendors, service providers, counterparties, and any other persons interacting with or engaging the Firm (“Data Principals”).
2. Categories of Personal Data Collected
2.1 For the purposes of providing its legal and consultancy services and carrying out its lawful business activities, LegalStanley may collect and process certain personal data relating to individuals who interact with or engage the Firm.
2.2 The categories of personal data that may be collected by the Firm include, without limitation:
2.2.1. Personal identification details, such as name, age, gender, designation, employer or organisation name, and professional role.
2.2.2. Contact information, including postal address, email address, telephone or mobile number.
2.2.3. Professional and business information, such as details provided in engagement letters, correspondence, instructions, or documents shared with the Firm in the course of an engagement.
2.2.4. Financial and billing-related information, including bank account details, payment references, invoices, and transaction details, solely for the purpose of processing fees and complying with legal and accounting requirements.
2.2.5. Identification and verification information, including documents or details provided for client onboarding, due diligence, conflict checks, and compliance with applicable legal or regulatory requirements.
2.2.6. Website and digital usage data, such as internet protocol (IP) address, browser type, device information, pages visited, and other information collected through cookies or similar technologies when you visit the Firm’s website.
2.2.7. Recruitment-related information, including personal data submitted by applicants for employment, internships, or training positions with the Firm.
2.2.8. Any other personal data that is voluntarily provided to the Firm by you or lawfully obtained by the Firm from third parties or publicly available sources, in connection with its professional activities.
2.3 The Firm does not intentionally collect personal data not required for the purposes stated in this Policy and takes reasonable steps to ensure that the personal data collected is relevant and limited to what is required for lawful processing.
2.4 Where required under applicable law, the Firm shall collect and process personal data only after obtaining valid consent or where such processing is otherwise permitted under law.
3. Manner and Sources of Collection of Personal Data
3.1 LegalStanley collects personal data primarily and directly from you when you voluntarily provide such information to the Firm in the course of seeking or availing its legal or consultancy services, communicating with the Firm, accessing its website, or applying for any position with the Firm.
3.2 Personal data may be collected by the Firm through the following means:
3.2.1 When you contact the Firm through email, telephone, online forms, or in person.
3.2.2 When you enter into an engagement, retainer, or any other professional arrangement with the Firm.
3.2.3 When you submit documents, instructions, or information required for the provision of legal services, compliance checks, or billing purposes.
3.2.4 When you visit or interact with the Firm’s website, including through cookies and similar technologies.
3.2.5 When you apply for employment, internships, or training opportunities with the Firm.
3.2.6 When you participate in events, meetings, seminars, or communications organised or hosted by the Firm.
3.3 The Firm does not knowingly collect personal data of children unless such data is required for a lawful purpose and is processed strictly in accordance with applicable law.
4. Purpose Limitation and Lawful Grounds for Processing Personal Data
4.1 LegalStanley processes personal data only for clear, specific, and lawful purposes that are directly connected with its professional legal and consultancy services and related activities. Personal data shall not be processed in a manner that is inconsistent with the purposes stated in this Policy.
4.2 The purposes for which the Firm may process personal data include, without limitation:
4.2.1 Providing legal, advisory, and consultancy services and managing client engagements.
4.2.2 Communicating with clients, prospective clients, and other stakeholders.
4.2.3 Complying with applicable laws, court directions, regulatory requirements, and professional obligations.
4.2.4 Conducting client onboarding, verification, conflict checks, and due diligence.
4.2.5 Processing payments, raising invoices, maintaining accounts, and complying with tax and audit requirements.
4.2.6 Managing recruitment, employment, and internship processes.
4.2.7 Organising and managing events, seminars, briefings, and professional communications.
4.2.8 Operating, maintaining, and improving the Firm’s website and digital platforms.
4.2.9 Protecting the Firm’s legal rights and interests, including establishing, exercising, or defending legal claims.
4.3 The Firm processes personal data only on lawful grounds permitted under applicable data protection laws, which may include:
4.3.1 With the consent of the Data Principal.
4.3.2 Where processing is necessary for the performance of a contract or engagement with the Data Principal.
4.3.3 Where processing is required to comply with a legal obligation or regulatory requirement.
4.3.4 Where processing is necessary for a lawful purpose and is permitted under applicable law.
4.3.5 Where processing is otherwise allowed under relevant data protection laws.
4.4 The Firm takes reasonable steps to ensure that personal data processed by it is accurate, complete, and up to date, to the extent reasonably practicable and necessary for the purposes of processing.
5. Consent and Withdrawal of Consent
5.1 LegalStanley collects and processes personal data based on the consent of the Data Principal, except where such processing is permitted under applicable law without consent.
5.2 By using this website, you explicitly provide free, specific, informed, and unambiguous consent for processing of your data.
5.3 In certain situations, the Firm may process personal data based on deemed consent or other lawful grounds recognised under applicable law, including where processing is necessary for the performance of a lawful purpose, compliance with legal or regulatory obligations, prevention of fraud, or protection of the Firm’s legal rights.
5.4 Withdrawal of Consent
5.4.1 A Data Principal may withdraw consent for the processing of personal data at any time, by providing a clear written request to the Firm through the contact details provided in this Policy.
5.4.2 Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal. Further, withdrawal of consent may result in the Firm being unable to continue providing certain services or performing its obligations under an existing engagement, to the extent permitted by law.
5.5 Data Retention, Storage Limitation and Erasure
5.5.1 LegalStanley retains personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the provision of services, compliance with legal, regulatory, accounting, and professional obligations, and resolution of disputes.
5.5.2 Upon completion of the relevant purpose, or upon withdrawal of consent where applicable, personal data shall be securely deleted, erased, anonymised, or archived, unless retention is required or permitted under applicable law or professional obligations.
5.5.3 The Firm takes reasonable steps to ensure that personal data is stored securely and is protected against unauthorised access, loss, misuse, or disclosure during the period of retention.
6. Your Rights
6.1 Subject to the provisions of applicable law, a Data Principal has certain rights in relation to the personal data processed by LegalStanley.
6.2 These rights include the right to:
6.2.1. Access information about the personal data being processed by the Firm, including the purpose of processing and the categories of personal data involved.
6.2.2. Request correction or updatingof personal data that is inaccurate, incomplete, or out of date.
6.2.3. Request erasureof personal data that is no longer necessary for the purpose for which it was collected, subject to legal or regulatory retention requirements.
6.2.4. Withdraw consentfor the processing of personal data, where such processing is based on consent, in accordance with Clause 5 of this Policy.
6.2.5. Nominate another individualto exercise rights on the Data Principal’s behalf in the event of death or incapacity, in accordance with applicable law.
6.3 The exercise of the above rights shall be subject to verification of the identity of the Data Principal and may be limited where required to comply with legal obligations, court directions, professional duties, or to protect legal privilege, confidentiality, or the rights of the Firm or third parties.
6.4 LegalStanley shall respond to valid requests made by Data Principals within a reasonable period and in the manner prescribed under applicable law
7. Non-Use of Automated Decision-Making and Profiling
7.1 LegalStanley does not use automated decision-making systems or profiling techniques to process personal data, and no decisions that produce legal or similarly significant effects on any individual are made solely by automated means; all personal data processed by the Firm is handled with appropriate human oversight and professional judgment, in accordance with applicable data protection laws.
8. Processing Children’s Data
8.1 As a full-service law firm, LegalStanley does not ordinarily collect or process personal data relating to children. In the limited circumstances where processing of children’s personal data becomes necessary for a lawful purpose, such processing shall be carried out only after obtaining consent from the child’s parent or lawful guardian, and strictly in accordance with applicable data protection laws.
9. Breach Response and Incident Management
9.1 In the event of any actual or suspected personal data breach, LegalStanley shall take prompt and reasonable steps to assess the nature and impact of the incident, contain and mitigate any potential harm, and implement appropriate remedial measures in accordance with applicable data protection laws and internal security protocols, and where required, shall notify affected Data Principals and relevant authorities within the timelines prescribed under law.
10. Grievance Redressal Mechanism and Data Protection Contact Details
10.1 In the event you have questions, concerns, or grievances regarding the processing of personal data by LegalStanley, or if you wish to exercise any rights available under applicable data protection laws, may contact the Firm through the designated contact details provided below. The Firm shall make reasonable efforts to acknowledge and address such communications in a timely and lawful manner, in accordance with its internal policies and statutory obligations.
10.2 For the purposes of grievance redressal and data protection-related communications, the Data Principal may write to accounts@legalstanley.comwith a copy marked to riyas@legalstanley.com, or contact the Firm at its registered office address. LegalStanley shall endeavour to resolve all genuine grievances within a reasonable period, subject to verification of identity and compliance with applicable legal, regulatory, and professional requirements.