Legal · Privacy
Privacy Policy
This Privacy Policy is designed to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act). As a Data Fiduciary, Triedge Platform Services Pvt Ltd is committed to processing your personal data lawfully, fairly, and transparently.
Contents
1. Who we are
Triedge Platform Services Pvt Ltd ("Triedge", "we", "our", "us") is a company incorporated under the Companies Act, 2013, with its registered office at Delhi, India. We operate the digital platform known as Lekha Advisory ("Lekha", "the Platform") at lekhaadvisory.com.
For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Triedge Platform Services Pvt Ltd is the Data Fiduciary. By using our platform, you are the Data Principal.
This Privacy Policy describes how we collect, use, store, share, and protect your personal data. It applies to all services offered through lekhaadvisory.com, including our startup advisory services, professional connect services, and all related interactions.
2. Personal data we collect
We collect only the personal data necessary to provide our services. The categories of data we collect are:
When you request a service or fill a contact form: - Full name - Email address - Phone number - Business or company name (if applicable)
When you apply as a professional on our panel (/join): - Full name, professional type, and registration number - Registering body (ICAI, ICSI, IBBI, SEBI) - City of practice - Contact email address - LinkedIn profile URL (voluntary) - Professional experience summary (voluntary) - Services offered and declared fee per service
When you make a payment (T1 Lekha-delivered services): - Payment details are processed entirely by Razorpay or Cashfree — we do not store card numbers, CVVs, or bank account details. We receive a payment confirmation reference only.
Technical data collected automatically: - IP address, browser type, device type - Pages visited and time spent (via cookies and analytics) - Referring URL
Data we do not collect: We do not knowingly collect special category data (health data, caste, religion, political opinions, biometric data, or financial details beyond what is necessary for service delivery). We do not process data of children under 18 years of age without verifiable parental consent.
3. Why we collect your data and the legal basis
Under the DPDP Act, 2023, we process your personal data on the basis of your informed consent and, where applicable, legitimate purposes. The specific purposes are:
Service delivery: To process your service request, match you with an appropriate professional, and communicate about your engagement. This is the primary purpose for which you provide your data, and your consent is collected at the point of submission.
Communications: To send you order confirmations, connection notifications, status updates, and responses to your enquiries. These are service-related communications, not marketing.
Panel management: For professionals who apply at /join, to verify registration details, manage empanelment status, and send engagement notifications. Your consent is collected at the point of application.
Platform improvement: Aggregated, anonymised usage data to understand how the platform is used and improve it. No individual is identified in this analysis.
Legal compliance: To comply with applicable Indian laws including the DPDP Act, Income Tax Act, GST Act, and Companies Act.
What we will not do with your data: - We will not sell your personal data to third parties - We will not use your data for behavioural advertising or profiling for marketing - We will not share your data with any party for their independent marketing purposes
5. How long we keep your data
We retain your personal data only for as long as necessary for the purposes described in this Policy:
Service request data (name, email, phone): Retained for 3 years from the date of the last interaction, after which it is deleted or anonymised. This period is necessary to handle any disputes or follow-up communications related to the service.
Professional panel application data: Retained for the duration of empanelment plus 2 years after removal from the panel. Rejected applications are deleted after 1 year.
Payment records: Retained for 8 years as required under the Income Tax Act, 1961 and applicable GST laws.
Technical/log data (IP addresses, access logs): Retained for 90 days.
Email communication records: Retained for 2 years.
After the applicable retention period, we securely delete or anonymise your personal data so that it can no longer be attributed to you.
6. Your rights under the DPDP Act, 2023
India's Digital Personal Data Protection Act, 2023 grants you the following rights as a Data Principal:
Right to access information (Section 11): You have the right to obtain confirmation of whether we process your personal data, a summary of the data we hold, and information about how it has been processed.
Right to correction and erasure (Section 12): You have the right to correct inaccurate or misleading personal data, complete incomplete data, and request erasure of personal data that is no longer necessary for the purpose for which it was collected, or where you withdraw consent and we have no other legal basis for processing.
Right to grievance redressal (Section 13): You have the right to raise a grievance with our Grievance Officer (see Section 10) regarding any breach of this Policy or the DPDP Act. We will acknowledge your grievance within 48 hours and resolve it within 30 days.
Right to nominate (Section 14): You may nominate another individual to exercise your rights in the event of your death or incapacity.
Right to withdraw consent: You may withdraw your consent for processing at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawal of consent may result in our inability to provide the requested service.
How to exercise your rights: Email us at privacy@lekhaadvisory.com with your request. Include your full name, email address used on the platform, and a clear description of your request. We will respond within 30 days.
Right to approach the Data Protection Board: If you are not satisfied with our response to your grievance, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.
7. Security safeguards
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:
- All data in transit is encrypted using TLS (HTTPS) - Database access is restricted to authorised personnel and service accounts only - Payment processing uses PCI-DSS compliant payment gateways — card data never touches our servers - Administrative access to the platform requires authentication - Third-party service providers are assessed for security practices before engagement
No method of transmission over the internet or method of electronic storage is 100% secure. While we use commercially reasonable means to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to cause harm to you, we will notify you and the Data Protection Board of India (once established) as required under the DPDP Act.
9. Cross-border data transfers
Some of our service providers (including Supabase for database hosting and Vercel for application hosting) may process or store your data on servers located outside India. These transfers are to entities in countries that provide an adequate level of data protection or where we have put in place appropriate safeguards.
We will comply with any restrictions on cross-border data transfers prescribed under the DPDP Act and rules notified by the Central Government. We will update this section as the regulatory framework develops.
10. Grievance Officer
In accordance with Section 13 of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, we have designated a Grievance Officer:
Name: To be appointed Designation: Grievance Officer — Data Privacy Organisation: Triedge Platform Services Pvt Ltd Email: grievance@lekhaadvisory.com Address: Delhi, India Response time: 30 days from receipt of complaint
You may contact the Grievance Officer for any complaints, concerns, or queries about how we process your personal data. All communications should be in English or Hindi.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email.
Your continued use of the platform after the updated Policy is posted constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you should stop using the platform and may request deletion of your data by writing to privacy@lekhaadvisory.com.
12. Contact us
For any questions about this Privacy Policy or about how we handle your personal data:
Email: privacy@lekhaadvisory.com General enquiries: hello@lekhaadvisory.com Registered name: Triedge Platform Services Pvt Ltd Brand: Lekha Advisory (lekhaadvisory.com) Address: Delhi, India