1. Identity of the Data Fiduciary
The Data Fiduciary responsible for processing personal data under this policy is:
LLM Advocates & Legal Consultants
Offices: Chandigarh & Gurugram, India
Official Email: privacy@llmadvocates.com
Grievance Officer: Grievance Redressal Portal
2. Categories of Personal Data Processed
2.1 Data Provided Directly by Users
- Account & Registration Details: Full name, authorized email address, organization name, and billing records for enterprise accounts.
- Uploaded Documents & Target Links: PDF files, contract drafts, resumes, and destination web URLs configured for secure routing or annotation.
2.2 Telemetry & Technical Processing Data
When emails with tracking pixels are opened, links are clicked, or documents are viewed in the reader:
- IP Address & Approximate Geolocation: Derived city, country, and network ISP (processed strictly for authorized delivery verification and security analytics).
- Client Environment: User-Agent string, browser family, operating system, and device type.
- Timestamps & Duration: Timestamp of open/click events and active document viewing heartbeat duration (seconds/minutes).
3. Lawful Grounds for Processing
In accordance with Section 4 and Section 7 of the DPDP Act, 2023, data is processed under the following lawful bases:
- Consent: Freely given, specific, informed, and unambiguous consent obtained at the time of account creation or document submission.
- Legitimate Uses: Security monitoring, prevention of unauthorized access, fraud detection, and delivery verification of enterprise correspondence.
4. Rights of the Data Principal
Under Chapter III (Sections 11–14) of the Digital Personal Data Protection Act, 2023, you possess the following enforceable rights:
- Right to Access Information (Section 11): Right to obtain a summary of personal data being processed and identity of entities with whom data has been shared.
- Right to Correction & Erasure (Section 12): Right to rectify inaccurate data or request complete erasure of records.
- Right of Grievance Redressal (Section 13): Right to file complaints with our designated Grievance Officer and escalate to the Data Protection Board of India (DPBI).
- Right to Nominate (Section 14): Right to nominate an individual to exercise data rights in the event of death or incapacity.
5. Data Localization, Storage & Security
All data servers and backups are maintained in high-security, ISO/IEC 27001 certified data centers with localized storage within the sovereign territory of India, compliant with CERT-In cyber security guidelines.