DPDP Act rights

Your data rights & grievance redressal

See, correct or erase your data, withdraw consent, nominate someone or make a complaint. Send a request below and you will get a reference number.

On this page
  1. Your rights
  2. If your data is in a law firm’s case
  3. Make a request
  4. Grievance Officer
  5. Escalating to the Data Protection Board

Your rights

Under India’s Digital Personal Data Protection Act, 2023 and the DPDP Rules, as they come into force, you have these rights over your personal data. How we handle data is explained in our Privacy Policy.

Access

You can ask for a summary of the personal data we hold about you, what we do with it, and the other organisations we have shared it with (such as the service providers in our Privacy Policy).

Correction, completion and updating

If your data is wrong, incomplete or out of date, tell us and we will fix it. Most account details you can also change yourself in the app.

Erasure

You can ask us to erase your data once it is no longer needed for the purpose you gave it for. We may keep some data where a law requires it, such as invoices for tax.

Withdraw consent

You can withdraw consent at any time, as easily as you gave it. Processing already done stays lawful, and some features or your account may stop working without the data they need.

Nominate

You can name another person to exercise your rights if you die or become unable to act. Give their name and contact details and how they are related to you.

Grievance redressal

If you are unhappy with how we have handled your data or a request, you can complain to us and we will look into it and reply.

Complain to the Data Protection Board

If our reply does not resolve your complaint, you can complain to the Data Protection Board of India. The Act expects you to use our grievance process first.

If your data is in a law firm’s case

Law firms and advocates use Legal Staff to manage their cases. For the client and party details they enter, the firm is the data fiduciary: it decides what is collected and why, and we only process it for them. If your request is about that data, we will pass it to the firm and tell you that we have done so. It will usually be quicker to contact the firm directly.

Make a request

Fill in the form and we will reply by email. We may ask you to confirm your identity before we act. We will respond within the time the DPDP Rules prescribe.

Grievance Officer

Complaints about how we handle personal data are dealt with by our Grievance Officer.

Grievance Officer

Grievance Officer, Legal Staff

Reachable through the request form on our Data rights page.

Operator
Legal Staff (the operator of legalstaff.in)

Escalating to the Data Protection Board

If you have used our grievance process and are not satisfied with the outcome, you can complain to the Data Protection Board of India, set up under the DPDP Act. Check the Board’s official website for how to file a complaint. Before you escalate, please give us a chance to fix the problem.

This policy is provided for information and should be reviewed by your legal adviser.