Privacy Policy

LEI REGISTER SERVICES PRIVATE LIMITED ("LEI Register Services", "we", "us") operates the business-intelligence website WeeDoo.in (the "Platform"). Protecting the privacy of our customers, suppliers, and visitors (collectively, "you") is central to how we design and deliver our services. This policy explains what personal and organisational information we collect, why we collect it, and how we safeguard it in line with the Digital Personal Data Protection Act 2023 ("DPDP Act") and other applicable Indian laws.

This policy also applies to data processed through our service providers for payment processing, analytics, and support functions, including Razorpay.

Users are presented with a consent banner summarizing key data usage, cookies, and Razorpay payment processing. Choices can be managed anytime through platform settings or the Cookie Policy page.

Information We Collect

1. We do not store full card numbers or CVV codes. All payment processing is handled by our compliant gateway provider; we retain only transaction references and authorisation tokens.
2. Certain personal and organisational information provided for transactions may be shared with our payment gateway (Razorpay) and associated banking/regulatory partners for transaction processing, compliance and fraud prevention purposes.

3. How We Use Your Information:

   • Service Delivery – create user accounts, authenticate log-ins, fetch and deliver company filings, and provide dashboards, APIs and downloadable reports.
   • Billing & Invoicing – issue GST-compliant tax invoices, process refunds, and reconcile payments.
   • Transaction Alerts – send notifications on wallet balance, order status, policy changes, and security events.
   • Analytics & Improvements – analyse anonymised usage patterns to enhance search speed, pre-cache popular filings, and debug errors.
   • Legal & Compliance – satisfy our obligations under the Companies Act 2013 § 399 (statutory inspection), DPDP Act 2023, tax laws, and lawful requests from courts or regulators.
   • We never use your personal data for automated decision-making that produces legal or similarly significant effects without human review.
   • In the context of payments, all data handling is compliant with RBI, PCI DSS, and Razorpay privacy policy requirements to ensure security and legal compliance.

4. Legal Basis for Processing:

   • Contractual necessity – processing needed to fulfil our Terms of Use and any purchase contract you enter into with us.
   • Legal obligation – records we must keep for tax, audit, and regulatory compliance.
   • Legitimate interests – fraud prevention, network security, service analytics, and product improvement.
   • Consent – optional marketing communications; you can withdraw consent at any time via your profile settings or the unsubscribe link in each e-mail.

5. Sharing & Disclosure:

   • We do not sell or rent your personal data. We share it only:
     • With trusted service providers – payment gateways, cloud hosting, e-mail delivery, customer-support tools – bound by confidentiality and data-processing agreements;
     • When required by law – to comply with a summons, court order, or other lawful request by a competent authority;
     • To enforce our rights – investigate fraud, protect the safety of our users and Platform, or defend LEI Register Services in legal proceedings;
     • With your explicit consent – such as when you authorise third-party integrations or referrals.
     • Where required for transaction processing or legal compliance, relevant data may be disclosed to Razorpay, banks, or regulators in accordance with applicable privacy laws and gateway requirements.
     • Where data is transferred outside India for processing (for example, by certain payment, cloud, or analytics providers), we ensure appropriate safeguards are in place, such as contractual data protection clauses and oversight by our Data Protection Officer in accordance with applicable privacy laws and gateway requirements.

6. Data Security:

   • TLS 1.2/1.3 encryption protects all data in transit; AES-256 encryption secures data at rest.
   • Passwords are stored as salted, adaptive hashes (bcrypt/Argon2).
   • Access to production systems is restricted by role-based access control and multi-factor authentication.
   • We perform regular vulnerability scans, penetration tests, and employee security training.
   • In the unlikely event of a data breach that compromises your personal information, we will notify you and the relevant authority within the timeframe required by the DPDP Act.

7. Cookies & Similar Technologies:

   • WeeDoo.in uses first-party cookies and local storage to maintain session state, remember preferences, and compile aggregate analytics. You may disable cookies in your browser, but core functions (log-in, cart, downloads) may not work correctly.
   • For details on cookies, including those used for payment fraud prevention and analytics initiated via Razorpay, please refer to our cookie policy.

8. Third-Party Links:

   • Our Platform includes links to company websites, regulator portals, and other external resources. LEI Register Services does not control and is not responsible for the privacy practices of these third-party sites.
   • We encourage you to review their policies before providing personal information.

9. Data Retention:

   We retain:

   • Account records – for as long as your account remains active and for six (6) years thereafter to meet accounting and tax obligations.
   • Transaction logs – ten (10) years, as required under Indian corporate and tax statutes.
   • Marketing preferences – until you unsubscribe or delete your account.
   • Data marked for deletion is securely purged or irreversibly anonymised.
   • Requests for erasure relating to payment data will also be promptly communicated to relevant service providers, such as Razorpay, where applicable.

10. Your Rights & Choices:

    Subject to applicable law, you may:

    • Access and download the personal data we hold about you;
    • Correct inaccurate or outdated information;
    • Delete your account and associated personal data (except where retention is legally mandated);
    • Object to or restrict certain processing activities;
    • Opt-out of marketing communications at any time.
    • You also have the right to port your data and to escalate any unresolved privacy grievance to the Indian Data Protection Board of India (DPB).
    • You can exercise these rights via your profile settings or by contacting us at [email protected].

11. Policy Updates:

    • We may revise this Privacy Policy to reflect changes in law, technology, or our business practices.
    • We will post the updated version on this page and, if the changes are material, notify you by e-mail or dashboard alert at least 15 days before they take effect.
    • Material updates arising from changes by our payment partners or applicable regulations will be communicated in advance.
    • We proactively monitor and update our practices in line with changing data protection regulations and our payment partners' requirements.

12. Contact Us

    To lodge a formal grievance or to seek redressal, please email our data protection officer. All complaints will be resolved within 7 days as mandated under the DPDP Act.

    Data Protection Officer
    LEI Register Services Private Limited
    [email protected]
13. THIS PLATFORM IS INTENDED FOR USE BY INDIVIDUALS AGED 18 OR ABOVE. WE DO NOT KNOWINGLY COLLECT OR PROCESS DATA FROM MINORS.