Privacy policy

Who we are

Startup Legal Care helps businesses sell online. Our registered office is in Patna, Bihar, India. A Noida office is coming soon. You can reach us at info@startuplegalcare.com or on WhatsApp at +91 79828 25595.

Legal entity name, registration details and the person responsible for data protection: [OWNER TO CONFIRM].

What we collect

• Enquiries: name, phone or email, the service you are interested in, and any message you write.
• Order requests: name, email, mobile number, business name, business type, website address (if any), requirements, and the package you chose.
• Security checks: when you submit a form, Cloudflare Turnstile checks that a real person is submitting it. This uses technical signals from your browser.
• Technical records: your IP address is used briefly to limit repeated submissions. Our servers keep short-lived counters and error logs.
• Staff accounts: names, work emails, roles and sign-in records for our internal team.

We do not ask for card numbers, bank details or passwords on this website. Online payments, when enabled, will be handled by a payment provider.

How we use it

• To reply to your enquiry, prepare a quotation and deliver the service you ordered.
• To keep our records of orders and customer communication.
• To prevent spam, abuse and fraud, and to keep the website and our systems secure.
• To meet legal and accounting obligations.

Legal basis

We rely on your consent when you tick the consent box on a form, on taking steps before a contract when you ask for a quote or order, on our legitimate interests in keeping the website secure, and on legal obligations where they apply. You can withdraw consent at any time by contacting us, without affecting processing done before that.

Who we share it with

• Cloudflare: hosting, database, security checks and staff access control. Cloudflare processes data on our behalf.
• WhatsApp (Meta): only if you choose to message us there. Their terms apply to that conversation.
• Payment providers: only when you pay, once online payment is enabled. The provider's privacy notice applies to payment details.
• We do not sell your personal information or use it for advertising.

How long we keep it

• Enquiries and order records: [OWNER TO CONFIRM] (proposed: 3 years after the last contact, to meet accounting and dispute needs).
• Staff sign-in sessions: deleted when they expire (8 hours at most, or after 30 minutes without activity).
• Security counters: reset within 15 minutes.
• Audit records of staff actions: [OWNER TO CONFIRM] (proposed: 12 months).

Cookies and browser storage

• Staff sign-in cookie: one strictly necessary cookie, used only in the staff area. It is HttpOnly and Secure.
• Cloudflare Turnstile: may set its own technical cookies to tell real visitors from bots.
• Your country choice: stored in your browser so that the site remembers it. It is not sent to us unless you submit a form.
• We do not use advertising or third-party tracking cookies on this website.

Security

We use HTTPS, role-based access for staff, hashed passwords, rate limits, bot checks and activity logs. No online system is completely secure, so please avoid sending sensitive identity documents by email or on this website.

Your rights

Depending on where you live, you may ask to see, correct or delete your personal information, or to restrict or object to its use. For India, this is governed by the Digital Personal Data Protection Act, 2023. For the United Kingdom, the UK GDPR applies. Email info@startuplegalcare.com with your request. We will respond within the time required by law.

Grievance officer: [OWNER TO CONFIRM]. You may also complain to the relevant data protection authority.

Children

Our services are for businesses and adults. We do not knowingly collect information from children under 18.

Changes to this notice

We may update this notice. The date at the top of the page shows when it last changed. Material changes will be announced on this website.

Last updated: [OWNER TO CONFIRM].