Privacy Policy

LEGALWEBSITE.in, available at https://www.legalwebsite.in, is operated by WIN Legal Advisors, a division of World of Willpower Pvt Ltd, A1, 202, Sarhi Samruddhi CHS, Kothrud, Pune, Maharashtra, India 411038 (Registered Office). For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described below. You can reach us at vrushali@winlegaladvisors.com, at care@worldofwillpower.com, or on WhatsApp at +91 74982 85423.

• • Account data — your name, email address and, if you provide it, your organisation and phone number. Purpose: to create and secure your account and to show you your saved reports.
• • Audit data — the website or app addresses you submit, the publicly available pages we fetch from those addresses, and the report we generate. Purpose: to deliver the audit you asked for and to let you revisit it later.
• • Legal assistance requests — the contact details and message you send when you ask for a legal opinion or remediation help. Purpose: to respond to your request.
• • Technical logs — IP address, browser type and timestamps generated when you use the service. Purpose: security, fraud prevention and debugging, which is a legitimate use under Section 7 of the DPDP Act.

We do not collect sensitive personal data such as financial account details, health information or biometric data, and we do not ask for it. Please do not submit it to us.

We process your personal data on the basis of the free, specific, informed and unambiguous consent you give when you create an account and submit an audit, and for certain legitimate uses permitted by Section 7 of the DPDP Act (such as security and compliance with law). You may withdraw consent at any time by writing to vrushali@winlegaladvisors.com or by deleting your account, and withdrawal is as easy as giving consent. Withdrawal does not affect processing carried out before the withdrawal.

We do not sell personal data and we do not share it for advertising. We share the minimum necessary data with processors who act only on our instructions under contract:

• • Cloud hosting and database providers, to run the service.
• • A web-crawling service, which fetches only the public pages of the address you submit.
• • An AI model provider, which analyses the fetched page content to produce your report. Report content is not used to train third-party models.
• • Our empanelled advocates, only when you expressly ask for a legal opinion or remediation help.

Some processors operate infrastructure outside India. Such transfers are made only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and are covered by contractual safeguards.

We retain your account data for as long as your account is active. Audit reports are kept until you delete them or delete your account. When you delete your account, personal data is erased within 30 days, except where we must keep records to comply with law, in which case we keep only what the law requires and for no longer than it requires.

• • Right to access a summary of your personal data and how it is processed (Section 11).
• • Right to correction, completion, updating and erasure of your personal data (Section 12).
• • Right to grievance redressal through our Grievance Officer (Section 13).
• • Right to nominate another individual to exercise your rights in the event of death or incapacity (Section 14).

Write to care@worldofwillpower.com to exercise any right. We respond within 30 days. You can delete your account and all associated data yourself from the Delete your account page. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The service is not intended for anyone under 18. We do not knowingly process the personal data of children, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children, as prohibited by Section 9 of the DPDP Act.

We use encryption in transit, access controls, row-level database isolation so that each customer can read only their own records, and least-privilege credentials. These are reasonable security practices within the meaning of Rule 8 of the SPDI Rules, 2011. In the event of a personal data breach we will notify the Data Protection Board of India and affected users as required by Section 8(6) of the DPDP Act, and will report cyber security incidents to CERT-In within 6 hours as required by its directions of 28 April 2022.

Sollicitor and Attorney Vrushali Borade, Grievance Officer, A1, 202, Sarhi Samruddhi CHS, Kothrud, Pune, Maharashtra, India 411038 (Registered Office). Email: vrushali@winlegaladvisors.com. We acknowledge every complaint within 24 hours and resolve it within 15 days.

We will post any change on this page and, where the change is significant, notify you by email before it takes effect.