Indian Company Master Data Made Simple
Privacy Policy
LEI REGISTER SERVICES PRIVATE LIMITED ("LEI Register Services", "we", "us") operates the business‑intelligence website WeeDoo (the "Platform"). Protecting the privacy of our customers, suppliers, and visitors (collectively, "you") is central to how we design and deliver our services. This policy explains what personal and organisational information we collect, why we collect it, and how we safeguard it in line with the Digital Personal Data Protection Act 2023 ("DPDP Act") and other applicable Indian laws.
Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Details | Name, e‑mail address | Supplied by you during sign‑up or profile edits |
| Organisation & Billing | Registered address, GSTIN, PAN, CIN/LLPIN, authorised signatory, payment method token | Supplied by you, generated on invoices, or validated via statutory portals |
| Service Usage | Company searches, documents purchased, click‑stream on Platform pages | Captured automatically as part of normal service logs |
| Device & Log Data | IP address, browser type, operating system, time‑stamp, referral URL | Captured automatically for security and analytics |
| Communications | E‑mails | Supplied by you or generated by our support desk |
Note: We do not store full card numbers or CVV codes. All payment processing is handled by our compliant gateway provider; we retain only transaction references and authorisation tokens.
How We Use Your Information
- Service Delivery – create user accounts, authenticate log‑ins, fetch and deliver company filings, and provide dashboards, APIs and downloadable reports.
- Billing & Invoicing – issue GST‑compliant tax invoices, process refunds, and reconcile payments.
- Transaction Alerts – send notifications on wallet balance, order status, policy changes, and security events.
- Analytics & Improvements – analyse anonymised usage patterns to enhance search speed, pre‑cache popular filings, and debug errors.
- Legal & Compliance – satisfy our obligations under the Companies Act 2013 § 399 (statutory inspection), DPDP Act 2023, tax laws, and lawful requests from courts or regulators.
We never use your personal data for automated decision‑making that produces legal or similarly significant effects without human review.
Legal Basis for Processing
- Contractual necessity – processing needed to fulfil our Terms of Use and any purchase contract you enter into with us.
- Legal obligation – records we must keep for tax, audit, and regulatory compliance.
- Legitimate interests – fraud prevention, network security, service analytics, and product improvement.
- Consent – optional marketing communications; you can withdraw consent at any time via your profile settings or the unsubscribe link in each e‑mail.
Sharing & Disclosure
We do not sell or rent your personal data. We share it only:
- With trusted service providers – payment gateways, cloud hosting, e‑mail delivery, customer‑support tools – bound by confidentiality and data‑processing agreements;
- When required by law – to comply with a summons, court order, or other lawful request by a competent authority;
- To enforce our rights – investigate fraud, protect the safety of our users and Platform, or defend LEI Register Services in legal proceedings;
- With your explicit consent – such as when you authorise third‑party integrations or referrals.
Data Security
- TLS 1.2/1.3 encryption protects all data in transit; AES‑256 encryption secures data at rest.
- Passwords are stored as salted, adaptive hashes (bcrypt/Argon2).
- Access to production systems is restricted by role‑based access control and multi‑factor authentication.
- We perform regular vulnerability scans, penetration tests, and employee security training.
- In the unlikely event of a data breach that compromises your personal information, we will notify you and the relevant authority within the timeframe required by the DPDP Act.
Cookies & Similar Technologies
WeeDoo uses first‑party cookies and local storage to maintain session state, remember preferences, and compile aggregate analytics. You may disable cookies in your browser, but core functions (log‑in, cart, downloads) may not work correctly.
Third‑Party Links
Our Platform includes links to company websites, regulator portals, and other external resources. LEI Register Services does not control and is not responsible for the privacy practices of these third‑party sites. We encourage you to review their policies before providing personal information.
Data Retention
We retain:
- Account records – for as long as your account remains active and for six (6) years thereafter to meet accounting and tax obligations.
- Transaction logs – ten (10) years, as required under Indian corporate and tax statutes.
- Marketing preferences – until you unsubscribe or delete your account.
Data marked for deletion is securely purged or irreversibly anonymised.
Your Rights & Choices
Subject to applicable law, you may:
- Access and download the personal data we hold about you;
- Correct inaccurate or outdated information;
- Delete your account and associated personal data (except where retention is legally mandated);
- Object to or restrict certain processing activities;
- Opt‑out of marketing communications at any time.
You can exercise these rights via your profile settings or by contacting us at [email protected].
Policy Updates
We may revise this Privacy Policy to reflect changes in law, technology, or our business practices. We will post the updated version on this page and, if the changes are material, notify you by e‑mail or dashboard alert at least 15 days before they take effect.