Privacy Notice

We collect personal data only when you ask us to do something with it, and only for the purpose you agreed to. This notice lists each purpose, what we collect, how long we keep it, and your rights under India’s Digital Personal Data Protection Act, 2023.

Who we are

Tech Policy Law (techpolicylaw.org) decides why and how the personal data described here is processed. Contact: submissions@techpolicylaw.org.

What we collect, and why

Newsletter and daily briefing

Data: Email address
Purpose: To email you new posts and each day’s brief.
How long: Until you withdraw consent, and for 1 year thereafter. We stop emailing you as soon as you withdraw and mark you as unsubscribed.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Tracker alerts

Data: Email address, The tracker you follow
Purpose: To send you an email when a tracker you follow has a new development.
How long: Until you withdraw consent, and for 1 year thereafter. Alerts stop as soon as you withdraw.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Event seat requests

Data: Name, Email address, Company, Role, Your message (optional)
Purpose: To review your request, confirm attendance, and contact you about the event.
How long: For as long as needed to run the event and follow up, or until you withdraw consent, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Event invitations

Data: Email address
Purpose: To invite you to future events and sessions.
How long: Until you withdraw consent, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Publishing your tool submission

Data: Your account name and email (your name is shown; your email is kept private), The tool details you enter
Purpose: To review your submission and, if approved, publish it on the Legal Tech leaderboard with your name and builder details.
How long: While the listing stays published, or until you ask us to remove it or withdraw consent. Withdrawing consent takes the listing down. Your private email is kept until you withdraw, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Contact about your submission

Data: The email address on your account
Purpose: To ask questions about your submission and tell you the outcome.
How long: Until the submission is resolved, or until you withdraw consent, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Publishing your event listing

Data: The event details you enter, including speaker names and roles (published if approved), Your name and email (kept private), Your private notes to the editors (kept private)
Purpose: To review your submission, publish the listing if it is approved, and contact you about it.
How long: The listing stays published until you ask us to remove it or you withdraw consent. Your private contact details are kept until you withdraw consent, and for 1 year thereafter. Withdrawing consent takes the listing down.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Publishing your comment

Data: Your account name and email, Your comment
Purpose: To show your comment, once approved, under the article.
How long: While the comment stays published, or until you ask us to remove it.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Contact message

Data: Name, Email address, Your message
Purpose: To read and reply to your message.
How long: Until your enquiry is resolved, or until you withdraw consent, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Listing your company in the Legal Tech directory

Data: The company and product details you enter (published if approved), Your name, email and role at the company (kept private)
Purpose: To verify you are authorized to submit on the company’s behalf, review the listing, publish it if approved, and contact you about it.
How long: The listing stays published until you ask us to remove it or you withdraw consent. Your private contact details are kept until you withdraw consent, and for 1 year thereafter.
Basis: your consent, given in the dialog that opens when you submit a form. The consent the form needs is given by ticking “I consent”. Any extra purposes are pre-selected in the dialog and you can untick them before you submit; each is recorded separately.

Signing in to comment or submit a tool is handled by Wix’s member login. We keep the name and email on your account for as long as you keep it.

Email verification

Before we save a form or show you your data, we email a 6-digit code to the address you gave us and ask you to type it in. This proves the address is yours, so nobody can sign you up or read your data by entering your email. We keep the code (as a scrambled hash, not the code itself) and a hash of the network address it was requested from for a short time to stop misuse, and delete them in routine clean-up. If you do not enter the code, nothing from the form is saved. The email is sent through Wix, which is our email provider, and may create a contact record for the address in our Wix account.

Cookies

Essential cookies (always on, no consent needed) keep the site working: an anonymous visitor session for the site and sign-in, a cookie that remembers your cookie choice, a short-lived cookie that proves you entered the emailed verification code (30 minutes, then it expires; it holds a signed copy of your email address), and bot protection from our network provider.

Analytics cookies are off until you allow them. Data: A Wix analytics session identifier and the pages you view. Purpose: To understand which pages are read, so we can improve the site. How long: For the life of the analytics session cookie, or until you switch analytics off in Cookie settings. Use the banner, or “Cookie settings” in the footer, to allow or stop them at any time. We keep a record of your choice under a random identifier stored in your browser, not your name or email.

We do not use advertising cookies, and the site does not load fonts from Google or other outside font services.

Withdrawing consent

You can withdraw consent for any purpose at any time, as easily as you gave it, in your data dashboard (no account needed: we email a code to your address). We stop the processing straight away. Withdrawal does not affect what we did before you withdrew. Withdrawing consent for an event listing also takes the listing down. After you withdraw we keep the related records for 1 year, as stated for each purpose above, unless you ask us to erase them sooner.

Your rights

Under the DPDP Act you may ask us for a summary of the personal data we hold and how it is used, ask us to correct or complete it, ask us to erase it, and nominate someone to exercise these rights on your behalf if you die or become unable to. Use your data dashboard to see and correct your details, withdraw consent, or send us a request. If you ask us to erase your data we will do so unless a law requires us to keep it, and this overrides the 3-year retention above. Records of your consent choices are kept without your identity, as proof of what was agreed.

Grievances

To raise a grievance, use your data dashboard or write to submissions@techpolicylaw.org and we will respond. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Children

This site is written for adults. Please do not submit personal data if you are under 18.

Records we keep of your consent

To show what you agreed to, we record your email address, the purpose, whether you granted or withdrew consent, the date and time, the version of this notice you saw, and the page you used. We keep this record for as long as the consent is relevant, and for 1 year after it ends.