Data Protection Notice
Issued under the Digital Personal Data Protection Act, 2023 (“DPDPA”)
Lexpand (“Lexpand”, “we”, “us”) provides marketing and business development services to law firms and lawyers in India. This notice explains what personal data we collect through this website, why we collect it, and how you can exercise your rights over it, in accordance with the Digital Personal Data Protection Act, 2023 and its rules.
1. What personal data we collect
When you use the contact form on this website, we collect:
- Your name
- Your email address
- Your phone number (if provided)
- Your city (if provided)
- Any information you choose to share in your message
We also collect limited technical data automatically (such as browser type and general usage analytics) to keep the website secure and functioning correctly.
2. Why we collect it
We process this personal data for the following purposes only:
- To respond to your enquiry and communicate with you about our services
- To assess whether and how we can assist your practice
- To maintain records of our business communications
- To comply with applicable legal and regulatory obligations
We do not use your personal data for any purpose beyond what you would reasonably expect when submitting a contact form to a marketing services provider.
3. Consent
By submitting the contact form, you consent to Lexpand collecting and processing your personal data for the purposes described in this notice. You may withdraw your consent at any time by writing to us at the contact details below; withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to respond to your enquiry.
4. How we store and protect your data
Submissions through the contact form are stored in a secure, access-restricted system used internally by Lexpand. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. We retain your data only for as long as necessary for the purposes described above, or as required by law.
5. Sharing of your data
We do not sell your personal data. We may share it with service providers who process it on our behalf (for example, cloud storage or spreadsheet providers used to record enquiries), under obligations of confidentiality, and only to the extent necessary to operate this website and respond to your enquiry. We may also disclose personal data where required by law or a valid legal process.
6. Your rights
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Obtain a summary of the personal data we hold about you and the processing activities undertaken
- Request correction or erasure of your personal data
- Withdraw your consent at any time
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
- Register a grievance with us regarding the processing of your personal data
To exercise any of these rights, please contact us using the details below. We will respond within a reasonable time and in accordance with applicable law.
7. Grievance redressal
If you have concerns about how your personal data has been processed, please contact us first so we can address them directly. If you remain dissatisfied, you may approach the Data Protection Board of India as provided under the DPDPA.
8. Contact us
For any questions about this notice, or to exercise your rights, please reach us through the contact form on our homepage.
9. Changes to this notice
We may update this notice from time to time to reflect changes in our practices or in applicable law. The updated version will be posted on this page.