Important: Do not upload client secrets, privileged material, court-restricted records, identity documents or confidential information unless a feature expressly requires it and you are authorised to do so.
1. Scope and responsibility
This policy applies when you visit lawunited.in, create or use an account, publish content, communicate with members, apply for a role, register for an event, manage a firm profile, upload media, or use connected tools such as the professional website builder.
For applicable Indian data-protection law, Law United acts as data fiduciary for personal data it decides how and why to process. Firms, recruiters, organisers, external websites, Google and other linked services may separately act under their own policies.
2. Information we collect
| Category | Examples |
|---|---|
| Account and sign-in | Email, password hash, account status, Google identifier, verified email and display name. We never receive your Google password. |
| Professional identity | Name, title, practice area, bar or professional details, firm, location, experience, education, biography, credentials and verification status. |
| Content and activity | Posts, articles, comments, endorsements, polls, connections, messages, stories, saved items and reports. |
| Jobs, events and organisations | Applications, résumé or documents, registrations, listings, firm or college profiles, memberships and administration records. |
| Media and generated sites | Profile and cover images, uploads, and website-builder content produced from profile information at your request. |
| Device and security | IP address, request time, browser metadata, authentication events, errors, security logs and essential session identifiers. |
Passwords are one-way hashed. Authentication tokens and essential browser storage maintain sessions and preferences. We currently do not use third-party advertising cookies.
3. Why we use personal data
We process data to provide requested services and for purposes described in an appropriate notice, with consent where required by the Digital Personal Data Protection Act, 2023 and applicable rules. We use it to:
- create accounts, authenticate users and connect Google sign-in;
- build profiles, review professional status and prevent impersonation;
- provide search, publishing, networking, messaging, jobs, events, firms and website-builder features;
- send service, security, moderation and account communications;
- protect users, detect abuse, preserve evidence and comply with lawful requests; and
- debug and improve reliability, accessibility and performance.
We do not sell personal data or use it for behavioural advertising. We will not materially change a consented purpose without an appropriate fresh notice or other lawful basis.
4. What others can see
Public pages may display selected verified professional, firm, job, event and published-content information. Members may see additional community information. Private messages and application material are not public, but intended recipients can access them.
Public material may be indexed, quoted or retained by others. Review privilege, client confidentiality, court restrictions, professional conduct and third-party rights before posting.
6. Retention and deletion
Account information is kept while active and thereafter only as reasonably required for deletion processing, fraud prevention, disputes, legal compliance, backups and security. Transient sessions are short-lived; published, transaction and security records may require longer retention. Deletion may not remove material lawfully retained by recipients, de-identified information, legally required records or material another person independently posted. Backup deletion can be delayed.
7. Your rights and choices
Subject to applicable law, you may request a summary of data processed and relevant sharing, correction, completion, erasure, withdrawal of consent, grievance redressal and nomination of another person where legally available. You can update much profile information in the service. Withdrawal does not invalidate prior lawful processing and may disable a dependent feature. We may proportionately verify identity.
Where applicable, you may approach the Data Protection Board of India after using the grievance process.
8. Children
Law United is for legal professionals and is not intended for anyone under 18. We do not knowingly create accounts for children.
9. Security and incidents
Safeguards include HTTPS, hashed passwords, access controls, isolated services, restricted outbound connectivity, rate limiting and security monitoring. No online service can promise absolute security. Use a unique password and protect your email and Google accounts.
We will investigate, contain and issue notifications required by applicable Indian law after a personal-data breach.
10. Changes
We may update this policy as features or law change. Material changes will be communicated appropriately. The effective date and version identify the current text.
11. Privacy and grievance contact
Include the account email and enough detail to understand the request, but never send a password or unnecessary sensitive material. The operator must add its formal legal name, officer name and postal address when those details are available.