Privacy Policy

Effective Date: 18/11/2025

Last Updated: 18/11/2024

Introduction:

This Privacy Policy (“Policy”) governs the manner in which iuraverse Technologies Private Limited, a Company incorporated under the Companies Act, 2013, also known as “Being Vakil”, with its brand name has its registered office at 211, Oyo Workspaces India Private Limited, Okhla Industrial Estate, Phase III, Okhala, New Delhi – 110020 (hereinafter “Company”, “We”, “Us”, or “Our”), with respect to its lawful collection, use, storage, disclosure, and protection of Personal Data processed through its brand Being Vakil (“Platform” or “Website”).

Being Vakil is a legal-tech platform that facilitates access to verified legal and compliance professionals, including but not limited to Advocates, Chartered Accountants, Company Secretaries, and Insolvency Professionals. The services are technology-enabled and governed by principles of confidentiality, transparency, and lawful processing of user data.

This Policy has been framed pursuant to and in compliance with:

The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
The Information Technology Act, 2000 and IT Rules, 2011;
Applicable regulatory guidelines and sectoral compliances (including Bar Council of India and ICAI, ICSI guidelines, as may be applicable).

By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to be legally bound by the terms of this Policy.

Definitions:

For purposes of this Policy, the following terms shall have the meanings ascribed below:

“Personal Data” – Any data about an individual who is identifiable by or in relation to such data.
“Sensitive Personal Data” – Data including but not limited to financial information, health information, biometric data, sexual orientation, caste or tribe, religious belief, or official government identifiers.
“Data Principal” – the natural person to whom the personal data relates.
“Data Fiduciary” – the Company, which determines the purpose and means of processing of Personal Data.
“Processing”- includes automated or manual operations performed on personal data such as collection, storage, use, disclosure, and deletion.
“Consent” – any freely given, specific, informed, and unambiguous indication of the Data Principal’s agreement to the processing of their personal data.

Applicability and Scope:

This Policy applies to:

Visitors and users of the Website and Platform;
Legal and compliance professionals onboarded onto the Platform;
Individuals or entities engaging Being Vakil for legal and allied services;
Any data shared via digital intake forms, emails, WhatsApp integrations, chat box, or customer support channels maintained by Being Vakil.

Categories of Personal Data Collected:

Data Provided by Users:

Identity and Contact Information: Name, mobile number, email address, address, gender, and date of birth.
Professional Information: Registration numbers (Bar Council ID, ICAI, ICSI, IBBI), PAN, Aadhaar (with masking or tokenization), certifications, and employment history.
Service Usage Details: Service preferences, uploaded documents, case details, contracts, and associated parties.
Payment & Financial Data: UPI ID, payment method, bank account information (where required), GSTIN, invoice data.
Communications: Support queries, grievance redressal communications, customer feedback, call/chat transcripts.

Data Collected Automatically:

Device identifiers, browser type, IP address, location data (approximate), user behaviour patterns (cookies, session tokens), and time stamps.

Data Collected from Third Parties:

Government portals (MCA, Income Tax, GSTN, Court system)
KYC Verification providers;
Public records and legal databases

Legal Basis for Processing:

The Company processes Personal Data on the following lawful grounds:

Consent of Data Principal, where explicitly obtained;
Performance of a Contract, including the provision of services;
Compliance with Legal Obligation, such as court orders or regulatory directives;
Legitimate Interests, such as platform improvement, fraud prevention, and dispute resolution;
Vital Interests, in case of emergencies involving the safety of the Data Principal or another individual.

Data Fiduciary Obligations:

As a responsible Data Fiduciary under the DPDP Act, Being Vakil:

Ensures transparency and lawful purpose in every processing activity;
Collects only such data as necessary (“data minimization”);
Implements technical and organisational safeguards;
Conducts regular audits and Data Protection Impact Assessments (DPIAs);
Provides a grievance mechanism to resolve privacy concerns;
Ensures prompt reporting and mitigation of data breaches.

Purpose of Processing Personal Data:

Personal Data is processed for the following purposes:

Registration and verification of users and professionals;
Rendering legal, compliance, documentation, and advisory services;
E-signing, escrow, and document automation services;
Internal audits, usage analytics, and reporting;
Processing payments and fulfilling accounting obligations;
Compliance with tax, regulatory, or judicial mandates;
Business continuity and operational management;
Managing and resolving disputes or grievances;
Notification of updates, service alters, and support assistance.

Disclosure of Data:

Personal Data may be disclosed to:

Third-Party Service Providers:

Identity verification agencies;
Cloud storage and SaaS solution vendors;
Payment gateway providers and accounting tools;
CRM, ticketing, and analytics platforms.

Engaged Professionals:

Advocates, Cas, CSs, IRPs, or other onboarded experts, strictly on a need-to-know basis and under confidentiality obligations.

Government, Regulators, or Law Enforcement:

Only in response to lawful orders, court directives, or statutory obligations.

Affiliates or Successors:

In case of a merger, acquisition, reorganisation, or transfer of business, with prior notification to Data Principals, subject to applicable data protection safeguards.

Data Storage and Retention:

Data is stored in encrypted formats on secure servers, preferably located in India, unless otherwise compliant with cross-border norms;
Retention period is limited to the purpose for which data is collected or for the duration mandated by applicable laws;
Users may request deletion of data subject to legal, regulatory, and contractual obligations;
Data that is no longer required is anonymised or permanently deleted using secure erasure protocols.

Rights of Data Principals:

Under the DPDP Act, you have the following rights:
Right to Access your personal data held by the Company;
Right to Correction of inaccurate or misleading data;
Right to Erasure subject to statutory and contractual exceptions;
Right to Grievance Redressal;
Right to Nominate a legal representative to exercise rights in case of death/incapacity.

Request may be addressed to our Grievance Officer at the contact below.

Cookies and Tracking:

We use cookies to:

Maintain secure sessions;
Personalise user experience;
Analyse usage and improve platform performance

Users may disable cookies in browser settings, though the same features may not function properly as a result.

Grievance Redressal Mechanism:

If you have concerns regarding the processing of your data or believe your rights are violated, please contact:

Grievance Officer: Mr Akshay Sathe

Email: office@iuraverse.com

Complaints will be acknowledged within 24 hours and resolved within 07 business days as mandated under applicable laws.

Updates and Amendments:

The Company reserves the right to amend this Policy at its sole discretion to align with updates in law or practices. Material changes will be notified to users via email or Platform notifications. Continued use of the Platform post-notification shall constitute deemed acceptance of the revised terms.

Governing Law and Jurisdiction:

This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the Courts at Mumbai, Maharashtra.