Privacy Policy
Website: https://lawthinkers.in Effective date: 01 Aug 2026 Last updated: 24 Aug 2026
Who we are
Our website address is https://lawthinkers.in (referred to in this policy as “LawThinkers”, “we”, “us” or “our”). We provide coaching, live and recorded classes, test series, study material and related educational services for judiciary and law competitive examinations, in Hindi and English.
| Legal entity name | Law Thinkers — proprietorship / LLP / Pvt Ltd] |
| Registered or business address | 73 FF, HIG, Behind Sharma Sweets, INDORE, MADHYA PRADESH, 466001 |
| Business registration / UDYAM | UDYAM-MP-23-0304755 |
| lasthinkers26@gmail.com | |
| Support phone / WhatsApp | +91-8889878685 |
Laws this policy is written under
This policy is written to comply with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) and rules made under it;
- The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- The EU General Data Protection Regulation (GDPR), where a visitor is located in the European Union or European Economic Area.
By using this website, our mobile application, or enrolling in any of our programmes, you agree to the collection and use of information as described here.
What personal data we collect and why we collect it
Account, enquiry and enrolment data
When you register, submit an enquiry form, request a demo class, or enrol in a batch or test series, we collect: your name, email address, mobile number, city or state, preferred language (Hindi/English), the examination you are preparing for, and your academic or professional background where you choose to share it.
We collect this to create and manage your account, deliver the course or test series you have purchased, send class links, schedules and results, respond to your queries, and provide support. Legal basis: performance of a contract with you, and your consent for optional fields.
Payment data
When you purchase a programme or test series, payment is processed by a third-party payment gateway. We receive the transaction ID, amount, date, payment status, and the last four digits and type of instrument used. We do not collect or store your full card number, CVV, UPI PIN, net-banking credentials or any other payment authentication data — these are captured directly by the payment gateway on its own secure systems.
We retain transaction records to fulfil your order, issue invoices, process refunds, and meet tax and accounting obligations. Legal basis: performance of a contract and compliance with legal obligations.
Test performance data
If you take our test series, we record your answers, submitted files, marks, time taken, attempt history, rank and comparative performance. We use this to evaluate your tests, publish your scorecard and rank, generate performance analytics, and improve our question papers and teaching. Legal basis: performance of a contract.
Comments
When visitors leave comments on the site, we collect the data shown in the comment form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images or files to the website (for example, an answer sheet or a profile photo), please avoid uploading files with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms and WhatsApp
Enquiry and contact form submissions are retained for [24] months for customer service and follow-up purposes. If you contact us on our published WhatsApp number, we retain the chat history and the phone number for the same purpose. We do not sell or rent information submitted through forms or WhatsApp.
Mobile application
If you download and use the LawThinkers mobile app, we collect the same account and test data described above, plus device identifiers, app version, operating system, crash logs and usage events needed to keep the app working and secure. The app store you download from (Google Play or Apple App Store) applies its own privacy policy to the download itself.
Live classes and recordings
Live classes may be recorded. If you join with your camera or microphone on, or use the chat, your voice, image, name and messages may form part of that recording, which is then made available to other enrolled students of the same batch. You can join with your camera and microphone switched off.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.
If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.
We also use cookies set by [LIST: e.g. Google Analytics, Meta Pixel, Razorpay/PayU checkout, YouTube embeds]. You can control or delete cookies through your browser settings; disabling essential cookies may prevent login and payment from working.
Embedded content from other websites
Articles on this site may include embedded content (for example, YouTube lectures, Instagram reels, or PDF viewers). Embedded content from other websites behaves in exactly the same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
Analytics
We use Google Analytics 4] to understand how visitors use the site. It collects pages viewed, approximate location derived from IP, device and browser type, and referral source. You can opt out using the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout, and the provider’s privacy policy is at [LINK].
Who we share your data with
We do not sell your personal data. We share it only with the following categories of service providers, and only to the extent needed:
| Category | Example provider | What is shared |
|---|---|---|
| Web hosting | Hostinger | All site data stored on the server |
| Payment gateway | RAZORPAY | Name, email, phone, amount |
| Email, SMS and WhatsApp delivery | AiSensey | Name, email, phone |
| Live class / video platform | Zoom | Name, email, class attendance, recordings |
| Learning app / LMS provider | ClassPlus | Account and test performance data |
| Analytics | – | Usage and device data, IP |
| Accountants, auditors and legal advisers | — | Transaction records, as required |
We may also disclose personal data where we are required to do so by law, by a court, or by a government or regulatory authority acting under lawful authority.
Suggested text for comment spam: visitor comments may be checked through an automated spam detection service.
How long we retain your data
| Data | Retention period |
|---|---|
| Enquiry and contact form submissions | [24] months from submission |
| Account and enrolment data | For the duration of your programme validity, plus [3] years |
| Test attempts, answers and scorecards | [3] years from the date of the test |
| Payment and invoice records | [8] years, to meet tax and accounting requirements |
| Comments and their metadata | Retained indefinitely so follow-up comments can be recognised and approved automatically |
| Analytics records | [14] months |
| Server and security logs | [12] months |
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Where a retention period has expired, we delete the data or irreversibly anonymise it.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
More specifically, you have the right to:
- Access a summary of the personal data we process about you and the processing activities undertaken;
- Correction, completion and updating of inaccurate or incomplete data;
- Erasure of your personal data where it is no longer needed for the purpose it was collected, subject to our legal retention duties;
- Withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing done before withdrawal, and may mean we can no longer deliver the service;
- Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act;
- Grievance redressal — to have your complaint addressed by us before approaching the Data Protection Board of India.
If you are located in the EU or EEA, you additionally have the rights to data portability, restriction of processing, objection to processing, and to lodge a complaint with your local supervisory authority.
To exercise any of these rights, write to lasthinkers26@gmail.com with the subject line “Data Request”. We will verify your identity and respond within [30] days.
Where your data is sent
Our servers and our service providers are located in [India / SPECIFY]. Some of our providers — for example analytics, email delivery and video conferencing — may process data on servers outside India, including in the United States and the European Union.
Where personal data of individuals in the EU or EEA is transferred outside the EU or EEA, we rely on Standard Contractual Clauses approved by the European Commission, together with the technical and organisational measures described below. Transfers out of India are made in accordance with Section 16 of the DPDP Act and any restrictions notified by the Central Government.
How we protect your data
We follow reasonable security practices consistent with the IT (Reasonable Security Practices) Rules, 2011, including:
- HTTPS/TLS encryption across the website and app;
- Access to student and payment records restricted to authorised staff on a need-to-know basis;
- Password hashing and, where available, two-factor authentication for administrator accounts;
- PCI-DSS compliant third-party payment gateways, with no card data stored on our systems;
- Regular software, plugin and theme updates, and scheduled backups;
- Confidentiality obligations and periodic data-protection briefings for faculty and staff.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
What data breach procedures we have in place
Staff and faculty are required to report any suspected security incident to [NAME / ROLE — e.g. the Grievance Officer] immediately. On becoming aware of a personal data breach, we will contain and investigate the incident, assess the risk to affected users, notify the Data Protection Board of India and every affected user in the manner and within the timelines prescribed under the DPDP Act, and — where GDPR applies — notify the relevant supervisory authority within 72 hours. We maintain an internal record of breaches and the remedial action taken.
What third parties we receive data from
We may receive data about you from:
- Payment gateways, confirming the status and reference of your transaction;
- Advertising and lead-generation platforms such as [META / GOOGLE ADS], where you submit a lead form on an advertisement;
- Referral partners or affiliates, where you have asked them to share your details with us.
We use this data for the same purposes described above.
What automated decision making and/or profiling we do with user data
Our test platform automatically evaluates objective answers, calculates marks, generates ranks and percentiles, and produces performance analytics (subject-wise accuracy, speed, and comparison with the batch). Subjective answer sheets are evaluated by human faculty; any automated assistance used in evaluation is reviewed by faculty before results are released.
These processes do not produce legal effects concerning you and are used only to give you feedback on your preparation. You may write to us at any time to ask for a manual review of an evaluated answer sheet or a rank calculation.
We may also segment users by exam, batch, language and engagement level in order to send relevant course information. You can opt out of marketing communications at any time using the unsubscribe link in our emails or by writing to us.
Children’s and minors’ data
Our services are intended for individuals who are 18 years of age or older, since judiciary and law competitive examinations require a law degree or enrolment in a law programme. We do not knowingly collect personal data of children as defined under the DPDP Act without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a minor has provided us personal data, please write to us and we will delete it.
Third-party links and educational disclaimer
Our website may link to bare acts, judgments, government notifications and third-party resources. We are not responsible for the privacy practices or content of those websites.
Nothing on this website constitutes legal advice, and no advocate–client relationship is created by using the site or enrolling in a programme. Our content is provided strictly for examination preparation and educational purposes.
Changes to this policy
We may update this policy from time to time. The revised version will be posted on this page with a new “Last updated” date. Where the change is significant, we will notify enrolled students by email or through the app. Continued use of the website after the change takes effect indicates acceptance of the updated policy.
Contact information and Grievance Officer
For any question, request or complaint about this policy or your personal data, contact:
Grievance Officer: Samanvay Richhariya Designation: Manager LawThinkers, 73 FF, Behind Sharma Sweets, INDORE, MADHYA PRADESH, 452010 Email: lasthinkers26@gmail.com Phone: +91-8889878685 Response time: within 30 days of receipt
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India in accordance with the DPDP Act, 2023.