Privacy Policy

The Legal Database (hereinafter referred to as "we", "our", or "us") is committed to safeguarding the privacy of its users. This Privacy Policy sets out the types of personal data we collect, the purposes for which such data is processed, the legal bases for processing, the rights available to users under applicable law, and our data retention and security practices.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

1. 1.1. Account Information: Full name, email address, password, contact number, passport or national ID number, and any optional profile information you choose to provide.
2. 1.2. Billing Information: Payment details (processed securely via third-party payment processors; we do not store payment card details).
3. 1.3. Usage Data: Data on your interactions with our platform, including search queries, downloads, and purchase history.
4. 1.4. Technical Data: IP address, browser type, device type, operating system, and related metadata, collected for security, diagnostics, and optimisation purposes.
5. 1.5. Cookies and Analytics: Information collected via cookies and similar technologies for performance monitoring, security enhancement, and service improvement.

2. Use of Personal Data

We process your personal data for the following purposes:

1. 2.1. To provide you with access to our legal research services.
2. 2.2. To process payments and manage your subscription account.
3. 2.3. To enhance platform security and prevent unauthorised access.
4. 2.4. To personalise user experience and improve our services.
5. 2.5. To send essential service-related communications, including billing notices, technical updates, and policy amendments.

We do not sell your personal data under any circumstances.

3. Legal Basis for Processing

We process your personal data in accordance with the Sri Lanka Personal Data Protection Act and other applicable laws. The legal bases for processing include:

1. 3.1. Contractual necessity – where processing is required to provide the services you have requested.
2. 3.2. Legal obligations – where retention or disclosure is required to comply with applicable legal or regulatory obligations.
3. 3.3. Legitimate interests – to maintain platform integrity, enhance user experience, and ensure service continuity.
4. 3.4. Consent – for optional communications such as marketing emails. You may withdraw your consent at any time.

4. Your Rights

Under the Sri Lanka Personal Data Protection Act, you have the following rights with respect to your personal data:

1. 4.1. Right of Access – to obtain a copy of your personal data held by us.
2. 4.2. Right to Rectification – to correct inaccurate or incomplete personal data.
3. 4.3. Right to Erasure – to request deletion of your data where applicable.
4. 4.4. Right to Object – to object to the processing of your data in certain circumstances.
5. 4.5. Right to Withdraw Consent – to opt out of optional communications at any time.

To exercise any of the above rights, you may do so via your Account Settings or by contacting us at hello@thelegaldatabase.lk.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

1. 5.1. Account-related data is retained for the duration of your subscription.
2. 5.2. Upon cancellation, minimal data may be retained for compliance with legal and accounting obligations.
3. 5.3. Usage data may be retained for a longer period for security and fraud prevention.

6. Cookies

We use cookies and similar technologies for the following purposes:

1. 6.1. To remember user preferences and authentication details.
2. 6.2. To analyse website traffic and usage patterns.
3. 6.3. To present relevant content and enhance user experience.

You may disable cookies through your browser settings; however, doing so may limit certain functionalities of the platform.

7. Data Security

We implement industry-standard security measures to protect your data, including:

1. 7.1. End-to-end encryption protocols.
2. 7.2. Secure server infrastructure.
3. 7.3. Optional multi-factor authentication.

8. Contact and Complaints

If you have questions or concerns regarding this Privacy Policy or wish to lodge a complaint, you may contact our Data Protection Officer at:

Email: hello@thelegaldatabase.lk

We will endeavour to respond to all queries within a reasonable timeframe.

9. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal or regulatory requirements or in our data processing practices. In the event of material changes, we will notify users via email or prominent notice on our website.

Thank you for choosing The Legal Database. We are committed to ensuring the security and confidentiality of your personal data as you focus on your legal research and professional pursuits.