Home › Privacy Policy
Privacy Policy
This Privacy Policy explains how V Legal Services (Proprietor: Mr. Suresh Kumar R) ("we") handles personal data collected through www.vlegalservices.in, the client portal, WhatsApp, phone and email. We follow the Digital Personal Data Protection Act, 2023 and its Rules, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable.
D No 2A4, SF No 419/2, Annai Indra Nagar, Maruthamalai, Coimbatore – 641046, Tamil Nadu
Phone: 73737 35222 · WhatsApp: 95850 49641 · Email: [email protected]
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, User ID, mobile number, email, address, PAN, GSTIN, contact person | You, or the business that opened your account |
| Property and transaction documents | Title deeds, parent documents, patta / chitta, EC, FMB, approvals, tax receipts, draft deeds, loan sanction or closure letters | You or your staff upload them; we add documents we prepare or obtain for you |
| Identity documents of parties | Aadhaar (preferably masked), PAN, photographs of executants and witnesses | You, for the services that need them |
| Financial data | Credit purchases, receipts, GST details; bank sanction details for loan services | You and your bank; payments are processed by our payment partner, and we do not store card or UPI PINs |
| Account and usage data | Sign-in times, device / browser, IP address, actions taken in the portal (views, uploads, deletions, requests) | Generated when you use the portal |
Biometric authentication for presence-less registration (fingerprint / iris) is done on UIDAI-compliant devices under the Registration Department's process. We do not store biometric data.
2. Why we use it
- To create and secure your account and staff logins, and to verify changes to your mobile number and email.
- To provide the services you request — drafting, EC / CC applications, registration support, record collection, loan facilitation — and to coordinate with the advocate where you request a legal opinion.
- To bill you, issue receipts and tax invoices, and keep the records that tax and other laws require.
- To keep the portal secure, investigate misuse and comply with lawful requests of courts and government agencies.
- To send you service messages about your requests. We do not sell your data and do not use it for third-party advertising.
Legal basis. We process personal data on the basis of your consent, given when you accept the Client Portal Agreement and as you request each service, and, where applicable, for legitimate uses permitted by Section 7 of the DPDP Act (such as compliance with law). You may withdraw consent at any time by writing to us; this will not affect processing already done, and we may then be unable to continue services that depend on that data.
3. Who we share it with
- Government authorities such as the Registration Department (TNREGINET), Revenue Department and local bodies, as needed to perform the services you request.
- Banks and financial institutions you deal with, for MOD / discharge registration and loan services you request.
- Our associated advocate, where you request a legal opinion.
- Service providers who host and run our systems under contract, bound to confidentiality and security:
Provider Purpose Data location Supabase Inc. (on Amazon Web Services) Portal database, sign-in and document storage Mumbai, India (AWS ap-south-1) Cloudflare, Inc. Website hosting, delivery and protection Global network; portal documents are not stored there Google LLC (Google Workspace) Email correspondence ([email protected]) Google's data centres Meta (WhatsApp) Messages you choose to send us on WhatsApp Meta's data centres Payment gateway (when enabled) Processing payments for credits India, as required by RBI - Authorities where required by law, court order or a lawful request under the Information Technology Act, 2000 or other law.
Some providers are companies based outside India. Transfers outside India, if any, are made only as permitted by Section 16 of the DPDP Act. Portal documents are stored in India.
4. How we protect it
- Encrypted connections (HTTPS) for the website and portal; encrypted storage at our hosting provider.
- Private document storage: files open only through short-lived secure links, and only for the account's owner, the staff it authorises, and our authorised personnel.
- Role-based access for staff logins, limited to the projects the owner chooses; account freezing; verification codes for contact changes.
- An activity log of sign-ins, document views, uploads, deletions and requests, kept for at least one year, and regular backups.
- Confidentiality undertakings from our personnel and from client staff at first sign-in.
If a personal data breach occurs, we will inform affected persons and the Data Protection Board of India without delay and within the time required by the DPDP Rules (presently 72 hours for the detailed report), and report cyber security incidents to CERT-In as required.
5. How long we keep it
- Documents and account data: while your account is active. After closure, an export is available for 30 days; we then delete it, giving at least 48 hours' notice before deletion where the law requires.
- Invoices, receipts and credit records: for the period required by tax law (generally at least 6 years under the GST law), even after closure.
- Logs: at least one year (system logs at least 180 days).
- Documents relating to a dispute or legal requirement may be kept until it is resolved.
6. Your rights
You may ask us for a summary of your personal data and how it is used; correction, completion or updating of it; its erasure when no longer needed (subject to legal retention); withdrawal of consent; and nomination of a person to exercise your rights in case of death or incapacity. You may also raise a grievance. Write to our Grievance Officer. If you are not satisfied with our response, you may approach the Data Protection Board of India.
7. Children
Our services are meant for adults. Where a minor's property or data is involved, we process it only with the verifiable consent of the parent or lawful guardian.
8. Cookies and browser storage
The website does not use advertising or tracking cookies. The portal uses your browser's session storage to keep you signed in during a visit and local storage to remember your display theme. Our hosting provider may set technical cookies needed for security.
9. Changes
We may update this policy. The date at the top shows the latest version; material changes will be notified in the portal.