Privacy & Data Protection Policy
Last Updated: 26th April 2026
1)Introduction
a)This Privacy & Data Protection Policy explains how Septillion Solutions Limited, operating the LegalSeek Platform, collects, uses, processes, stores, transfers, and protects personal data in connection with LegalSeek’s website, mobile applications, software, artificial intelligence functionalities, legal research tools, case-management features, marketplace services, communication tools, and related services.
b)LegalSeek is committed to protecting privacy, confidentiality, integrity, and security of the personal data processed through the Platform. This Policy applies to all individuals and entities who access or use LegalSeek, including website visitors, registered users, individuals seeking legal information or services, lawyers and other legal professionals, and organizations using the Platform.
c)LegalSeek follows a privacy-first approach. Personal data, legal documents, case-related information, communications, and other information submitted through the Platform are processed only for clearly defined purposes and are protected through appropriate technical and organizational measures.
d)By accessing or using the Platform, you acknowledge that you have read and understood this Policy. Where applicable law requires consent for a particular processing activity, LegalSeek will obtain that consent separately and provide an appropriate method for withdrawing it.
e)This Policy should be read together with the LegalSeek Terms of Service, AI Policy, Cookie & Tracking Policy, Security & Platform Integrity Policy, and any other LegalSeek policy applicable to the feature or service being used.
2)Scope of Application
a)This Policy applies to all personal data collected directly from users and, where applicable, through integrations or third-party services that are necessary for the operation and functionality of the LegalSeek Platform. It governs the processing of personal data in connection with LegalSeek's website, mobile applications, software, artificial intelligence functionalities, legal marketplace, communication tools, case-management features, and related services.
b)LegalSeek is operated by Septillion Solutions Limited from the Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates. LegalSeek is committed to processing personal data in accordance with applicable data protection and privacy laws in the jurisdictions where it operates. This includes compliance with internationally recognized privacy frameworks, such as the EU General Data Protection Regulation (GDPR), the DIFC Data Protection Law No. 5 of 2020, and applicable national data protection laws in our operational markets.
c)As LegalSeek operates across multiple international jurisdictions, local privacy rights, legal obligations, data retention requirements, and regulatory protections may vary depending on the user's location. Where mandatory local laws require specific processing conditions, including but not limited to local data residency mandates or specific regulatory approvals, LegalSeek complies with those mandatory requirements. LegalSeek may publish supplementary Country or Regional Addenda to address specific statutory mandates without limiting the general protections provided under this Policy.
3)Categories of Data Collected
a)LegalSeek collects and processes only the information reasonably necessary to operate, secure, maintain, and improve the Platform and to provide the features and services requested by users. LegalSeek applies appropriate technical and organizational measures to protect the confidentiality, integrity, and security of information processed through the Platform.
b)Identity and Account Information
i)LegalSeek may collect information provided during account registration and account management, including a user’s name, email address, telephone number, country or region, preferred language, profile information, login identifier, and securely stored authentication information.
ii)LegalSeek does not store user passwords in plain-text form and applies appropriate security measures to protect authentication credentials.
c)Professional Information
i)Where a person registers as a lawyer or legal professional, LegalSeek may collect professional information including licensing or bar-registration details, qualifications, professional experience, areas of practice, jurisdictional standing, languages, business information, and other details required to manage professional participation and accurately present professional profiles on the Platform.
d)Legal Service and Appointment Information
i)LegalSeek may process information created or submitted when users access legal-service, consultation, appointment, or marketplace features. This may include service requests, appointment details, scheduling information, agreed service scope, deliverables, service progress, cancellations, completion records, and communications between users and legal professionals.
e)Case, Document, and Legal Matter Information
i)LegalSeek may process legal questions, case descriptions, case-management records, hearing schedules, legal documents, correspondence, drafts, evidence, attachments, communications, and other information uploaded, submitted, or generated through the Platform.
ii)Depending on how the Platform is used, this information may relate to the user, the user’s client, another party, a witness, an employee, a family member, an organization, or another person connected with a legal matter.
iii)LegalSeek processes this information only for the purposes described in this Policy and applies appropriate safeguards based on the nature and risk of the information.
f)Information Submitted on Behalf of Clients or Other Persons
i)Lawyers, organizations, and other authorized users may submit personal data concerning clients or other persons where they have an appropriate lawful basis, professional authority, permission, or other legal justification to do so.
ii)The person submitting such information is responsible for ensuring that it may lawfully be provided to and processed by LegalSeek and that any required permissions, authorizations, or privacy notices have been provided where required by applicable law.
g)Criminal Conviction and Offence Information
i)Some legal matters may contain information relating to criminal allegations, investigations, proceedings, offences, convictions, penalties, or related security measures.
ii)LegalSeek processes such information only where an appropriate lawful basis and any additional authorization required under applicable law exist. Additional access, confidentiality, and security controls may be applied according to the nature and risk of the information.
h)AI Inputs and Outputs
i)LegalSeek may process questions, prompts, instructions, text, documents, and other information submitted to artificial intelligence functionalities, together with responses, drafts, summaries, research results, or other outputs generated in response.
ii)The processing of AI inputs and outputs is further explained in Section 7 of this Policy and in the LegalSeek AI Policy.
i)Communications and Support Information
i)LegalSeek may process communications between users and lawyers, customer-support messages, feedback, complaints, reports, privacy requests, and records of communications necessary to provide assistance, resolve issues, enforce Platform policies, and maintain service quality.
j)Payment and Transaction Information
i)LegalSeek may process transaction-related information including the applicable subscription or service, price, currency, payment status, invoice details, refunds, chargebacks, transaction identifiers, tax information, and limited billing information.
ii)Payments may be processed through authorized third-party payment providers. LegalSeek does not ordinarily receive or store complete payment-card numbers, card-security codes, or other complete payment credentials where those details are collected directly by the payment provider.
k)Technical, Device, and Usage Information
i)LegalSeek may collect technical and operational information including IP address, device type, operating system, browser type, application version, device or application identifiers, session information, login history, security events, system logs, error logs, crash information, interaction records, and general feature-usage information.
ii)This information is used to operate, secure, maintain, troubleshoot, monitor, and improve the Platform.
l)Cookies and Similar Technologies
i)LegalSeek may use cookies, local storage, analytics technologies, and similar tools on its website and web-based services. Further information is provided in the LegalSeek Cookie & Tracking Policy.
m)Device Permissions
i)Where a Platform feature requires access to a device capability, including the camera, microphone, photographs, files, notifications, or similar functionality, LegalSeek will request the relevant device permission.
ii)Such access is used only for the feature requested by the user and may be managed through the device or application settings, subject to the device operating system.
4)Purpose of Data Processing
a)LegalSeek processes personal data to provide, operate, maintain, and improve the Platform and its services. This includes creating and managing user accounts, authenticating users, providing artificial intelligence functionalities, supporting legal research and document drafting, organizing cases and legal documents, facilitating communication between users and legal professionals, enabling appointments and legal service requests, and delivering other Platform features requested by users.
b)LegalSeek may process personal data to verify professional profiles, support legal-service engagements, manage subscriptions, process payments and refunds, issue invoices, administer transactions, and maintain records necessary for the operation of the Platform.
c)Personal data is also processed to maintain Platform security, prevent fraud, detect unauthorized access, investigate misuse, enforce LegalSeek's Terms of Service and other applicable policies, protect users and legal professionals, and comply with applicable legal, regulatory, accounting, taxation, and record-keeping obligations.
d)LegalSeek may process information to respond to customer enquiries, provide technical support, manage complaints, handle privacy requests, communicate important service-related information, and send administrative or operational notifications relating to the Platform.
e)Where permitted by applicable law, LegalSeek may use aggregated, anonymized, or appropriately de-identified information to analyze Platform usage, evaluate system performance, improve service quality, enhance security, develop new features, conduct internal research, and improve Platform features, including artificial intelligence functionalities. Such information is not used to identify individual users.
f)LegalSeek may retain and process information where reasonably necessary to establish, exercise, or defend legal claims, resolve disputes, comply with lawful requests from competent authorities, or fulfil other obligations imposed by applicable law.
5)Legal Basis for Processing
LegalSeek processes personal data only where an appropriate legal basis exists under applicable law. Depending on the nature of the information, the requested service, and the user's jurisdiction, LegalSeek may process personal data based on one or more of the following legal grounds.
a)Contractual Necessity
i)Processing may be necessary to create and manage user accounts, provide Platform features, facilitate legal services, manage appointments, process subscriptions and transactions, and otherwise perform LegalSeek's contractual obligations or take steps requested by a user before entering into a contractual relationship.
b)Legal Obligations
i)LegalSeek may process personal data where necessary to comply with applicable legal, regulatory, judicial, accounting, taxation, fraud-prevention, anti-money laundering, security, or other statutory obligations.
c)Legitimate Interests
i)LegalSeek may process personal data where reasonably necessary to maintain Platform security, prevent fraud and misuse, protect users and legal professionals, improve services, investigate incidents, enforce LegalSeek's Terms of Service and other applicable policies, maintain system reliability, and establish, exercise, or defend legal claims, provided such interests are not overridden by the rights and freedoms of the individual.
d)Consent
i)Where required by applicable law, LegalSeek will obtain a user's consent before processing personal data for specific purposes. Where processing is based on consent, users may withdraw that consent at any time through the available Platform settings or by contacting LegalSeek, without affecting the lawfulness of processing carried out before the withdrawal.
e)Sensitive Information
i)Where applicable law imposes additional requirements for processing sensitive personal data or other categories of information requiring enhanced protection, LegalSeek will process such information only where the relevant legal conditions and any required authorizations have been satisfied.
6)AI Data Processing and Automated Systems
a)LegalSeek provides artificial intelligence ("AI") functionalities designed to assist users with legal research, document drafting, document analysis, case organization, knowledge retrieval, and other legal support features available through the Platform.
b)To provide these functionalities, LegalSeek may process questions, prompts, instructions, documents, text, and other information voluntarily submitted by users. Such information is processed through automated systems solely for the purpose of generating the requested response or providing the requested functionality.
c)AI-generated outputs are intended to assist users and legal professionals in their work and should be independently reviewed and verified before being relied upon in any legal, professional, or other important decision. While LegalSeek continuously works to improve its AI functionalities, AI-generated outputs may contain inaccuracies, omissions, or incomplete information.
d)LegalSeek does not use user-submitted legal documents, case materials, or private communications to train general-purpose artificial intelligence models.
e)Where permitted by applicable law, LegalSeek may use aggregated, anonymized, or appropriately de-identified operational information to improve system performance, reliability, security, and service quality without identifying individual users.
f)LegalSeek implements reasonable technical and organizational safeguards to protect information processed through AI functionalities in accordance with this Policy and the LegalSeek AI Policy.
g)Further information regarding AI functionality, user responsibilities, limitations, and safeguards is provided in the LegalSeek AI Policy, which forms part of LegalSeek's overall legal framework.
7)Data Sharing and Disclosure
a)LegalSeek does not sell, rent, trade, or otherwise commercially disclose users' personal data to third parties.
b)LegalSeek may engage carefully selected third-party service providers solely to support the operation, security, maintenance, and delivery of the Platform. These services may include secure hosting, payment processing, communications infrastructure, customer support, and other technical services necessary for the operation of LegalSeek.
c)Where such providers process personal data on behalf of LegalSeek, they receive only the minimum information reasonably necessary to perform their authorized services and are contractually required to protect that information and use it only for the purposes for which it was provided.
d)Where a user requests legal services or communicates with a lawyer through the Platform, LegalSeek may make available the information reasonably necessary to facilitate that specific engagement. Such information is shared only with the selected legal professional or the relevant user, as applicable, and only to the extent necessary for providing the requested service.
e)LegalSeek may disclose personal data where required to comply with applicable law, a valid court order, lawful request from a competent authority, or another legally binding legal process.
f)LegalSeek may also disclose personal data where reasonably necessary to:
i)protect the security or integrity of the Platform;
ii)investigate fraud, misuse, or unauthorized activities;
iii)protect the rights, safety, or property of LegalSeek, its users, legal professionals, or the public;
iv)enforce LegalSeek's Terms of Service or other applicable policies; or
v)establish, exercise, or defend legal claims.
g)Where LegalSeek undergoes a merger, acquisition, corporate restructuring, investment transaction, or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality, data protection, security obligations, and applicable legal requirements.
8)Cross-Border Data Transfers
a)LegalSeek operates across multiple global jurisdictions. To provide our services, maintain platform security, process payments, and support infrastructure, personal data may be accessed, processed, or transferred across international borders.
b)Where mandatory local laws require personal data of citizens or residents to be stored, hosted, or otherwise processed within national boundaries, LegalSeek will implement appropriate technical, organizational, and operational measures to comply with those mandatory legal requirements before any permitted cross-border processing or transfer occurs.
c)Where personal data is transferred internationally outside the user’s country of residence, LegalSeek implements appropriate legal, contractual, technical, organizational, and operational safeguards in accordance with applicable law. Depending on the relevant jurisdiction, these safeguards may include:
i)Standard Contractual Clauses, model clauses, or other contractual safeguards recognized by a competent authority;
ii)adequacy decisions or other legally recognized transfer mechanisms;
iii)explicit user consent where required by applicable law;
iv)Regulatory approvals, registrations, filings, or notifications required before an international transfer takes place; and
v)additional technical or organizational safeguards appropriate to the nature of the personal data, the destination jurisdiction, and the risks associated with the transfer.
d)LegalSeek periodically reviews its international data infrastructure and sub-processors to ensure that cross-border transfers maintain an equivalent level of security, confidentiality, and legal protection consistent with this Policy and applicable international standards.
9)Data Retention
a)LegalSeek retains personal data only for as long as reasonably necessary to provide the Platform and its services, fulfil the purposes described in this Policy, maintain Platform security, comply with applicable legal and regulatory obligations, resolve disputes, and establish, exercise, or defend legal claims.
b)User-submitted information, including legal documents, case-related materials, communications, and other content, is generally retained while the relevant account, case, or service remains active, unless the user deletes the information, requests its deletion, or retention is required by applicable law.
c)LegalSeek may retain limited information after an account is closed or a service has ended where reasonably necessary to comply with legal, regulatory, taxation, accounting, security, fraud-prevention, professional record-keeping, payment, accounting or dispute-resolution requirements.
d)Technical records, security logs, and operational information may be retained for limited periods where reasonably necessary to maintain Platform security, investigate incidents, improve system reliability, comply with applicable legal requirements, or protect the rights and legitimate interests of LegalSeek, its users, and legal professionals.
e)When personal data is no longer required for the purposes described in this Policy, LegalSeek will take reasonable steps to securely delete, anonymize, or otherwise dispose of the information in accordance with applicable legal requirements and internal data management practices.
10)Data Security
a)LegalSeek implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to support the security, confidentiality, integrity, and availability of information processed through the Platform.
b)Security measures implemented by LegalSeek may include, where appropriate, encryption of data in transit and at rest, secure authentication mechanisms, controlled access, role-based permissions, system monitoring, logging, backup and recovery procedures, vulnerability management, and other reasonable security practices appropriate to the nature and risk of the information being processed.
c)Access to personal data is restricted to authorized personnel, service providers, or legal professionals only where access is reasonably necessary to perform their authorized responsibilities or provide the requested services, and such access is subject to applicable confidentiality, contractual, and security obligations.
d)LegalSeek continuously monitors and improves its security practices in response to evolving technologies, emerging threats, operational requirements, and applicable legal and regulatory obligations.
e)While LegalSeek applies reasonable safeguards to protect personal data, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Users are encouraged to protect their account credentials, use strong authentication practices, and promptly notify LegalSeek of any suspected unauthorized access to their accounts.
11)User Rights
a)Account Deletion: Regardless of jurisdiction, any user may initiate full deletion of their account and associated personal data at any time directly through the Mobile Application settings (Settings > Account > Delete Account) or by submitting a request via our web portal at “www.legalseek.io/delete-account”.
b)Depending on applicable law and the user’s location, users may have the right to access personal data held by LegalSeek, request correction of inaccurate or incomplete information, request deletion of information that is no longer required, and request restriction of certain processing activities.
c)Users may also have the right to object to processing based on legitimate interests, withdraw consent where processing relies on consent, and receive certain personal data in a structured, commonly used, and machine-readable format where data portability rights apply. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
d)LegalSeek will not unlawfully discriminate against users for exercising privacy or data-protection rights available under applicable law.
e)Users may also have the right to submit a complaint to a competent data-protection or supervisory authority.
f)Requests to exercise privacy rights may be submitted through the Platform, where available, or by using the contact information provided in this Policy. LegalSeek may take reasonable steps to verify the identity, account ownership, or legal authority of the person making the request before acting on it.
g)LegalSeek will respond to valid requests within the period required by applicable law. Certain requests may be limited or refused where permitted by law, including where information must be retained for legal, regulatory, security, fraud-prevention, professional record-keeping, dispute-resolution, or legal-claim purposes.
12)Third-Party Services and Links
a)LegalSeek may engage carefully selected third-party service providers to support hosting, payment processing, communications, security, technical maintenance, customer support, and other services necessary for the operation of the Platform.
b)Where such providers process personal data on behalf of LegalSeek, they receive only the information reasonably necessary to perform their authorized services and are required to protect it through appropriate contractual, confidentiality, data-protection, and security obligations.
c)The Platform may also contain links to, or integrations with, websites and services operated independently by third parties. Where users choose to access an independent third-party service, that provider’s own privacy practices and terms may apply.
d)LegalSeek does not control and is not responsible for the privacy practices, security, or content of independent third-party websites or services. Users are encouraged to review the relevant privacy information before providing personal data directly to such third parties.
13)Changes to this Policy
a)LegalSeek may update this Privacy & Data Protection Policy from time to time to reflect changes in applicable laws, regulatory requirements, technology, Platform functionality, security practices, or business operations.
b)The updated version of this Policy will be published on the Platform together with its revised "Last Updated" date and will become effective upon publication unless otherwise required by applicable law.
c)Where required by applicable law or where changes materially affect users' rights or obligations, LegalSeek may provide notice through the Platform, email, or another appropriate communication method and, where necessary, request renewed acknowledgment or consent.
14)Contact Information
a)LegalSeek values the trust placed in it by its users and remains committed to protecting personal data through responsible privacy practices, appropriate security measures, and continuous improvement of its Platform and services.
b)If you have any questions, concerns, or requests regarding this Privacy & Data Protection Policy or the processing of your personal data, you may contact LegalSeek using the following details:
LegalSeek
Septillion Solutions Limited
Dubai International Financial Centre (DIFC)
Dubai, United Arab Emirates
Privacy Contact: privacy@legalseek.io
General Support: info@legalseek.io
Website: https://www.legalseek.io
------------------------------------------------- END OF DOCUMENT --------------------------------------------------
Page 1 | 1
