Privacy Policy
Last updated: 25th October 2026
1. Introduction & Statutory Framework
CorpLawUpdates.in ("we", "our", "us") is committed to protecting your privacy and handling your data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the DPDP Rules, 2025, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. This Privacy Policy explains what data we collect, how we use it, your rights, and who we share it with when you visit https://www.corplawupdates.in.
2. Information We Collect
A. Newsletter Subscribers
- Email address — collected when you subscribe to our newsletter
- IP address — collected at the time of subscription to prevent automated bot signups (rate-limiting). Stored temporarily in our database.
B. Newsletter & Transactional Email Interaction Data
When we send you a newsletter or transactional confirmation (such as a welcome email), we track:
- Whether the email was delivered, opened, or clicked
- Timestamps of open and click events
This data is processed via Brevo (Sendinblue) and Resend (our email delivery infrastructure providers) and stored in our database to help us measure delivery reliability and campaign performance.
C. Document Generator Inputs & Logs
When you use our Legal Document Generator, we process:
- Form Inputs — whatever details you fill (e.g. company names, director DINs, addresses, financial amounts, custom instructions). These are used to render and format the statutory document.
- Generation Metadata — we log document type, timestamp, IP address, and token usage to enforce rate limits and monitor server load.
D. Article View Counts
We count the number of times each article is viewed. No personal identifiers (IP, name, email) are stored alongside view counts — only the article slug and a total count.
E. Website Analytics
We use the following analytics tools that automatically collect visitor data:
- Vercel Analytics — collects anonymous page views, unique visitors, browser type, OS, and geographic region
- Vercel Speed Insights — collects Core Web Vitals and page performance metrics
- Google Analytics (GA4) — if enabled, collects sessions, interactions, and demographic data via cookies
- Google Reader Revenue Manager (SWG) — used for Google News compatibility; may collect content access signals
We do not collect: your name, phone number, payment information, or create user accounts for public visitors.
3. How We Use Your Information
| Data | Purpose |
|---|---|
| Email address | To send you our free newsletter of corporate law updates |
| IP address (subscription) | To prevent spam/bot subscriptions (rate-limiting only) |
| Open/click events | To measure newsletter performance (admin-only dashboard) |
| AI form inputs | To draft personalized corporate legal documents dynamically |
| Analytics data | To understand site traffic and improve content quality |
We never sell or rent your personal data to any third party.
4. Third-Party Data Processors
We share data with the following services, each operating under their own privacy policy:
| Service | What They Receive | Purpose |
|---|---|---|
| Brevo (Sendinblue) | Your email address, delivery/open/click telemetry | Transactional email delivery (welcome notifications, alerts) and newsletter dispatch |
| Resend | Your email address, delivery/open/click events | Email delivery and tracking |
| Supabase | All database data including subscriber emails | Database hosting and storage |
| Google Cloud APIs | Document generation inputs | Document formatting, translation and template rendering |
| Vercel | IP address, page visits, performance metrics | Website hosting and analytics |
| Google (GA4 + SWG) | Page visits, interactions (if GA4 enabled) | Traffic analytics and News integration |
| Microsoft Clarity | Aggregated session UX metrics, heatmaps | Site usability analysis and UX diagnostics |
5. No Third-Party Advertising & Ad-Free Platform
CorpLawUpdates.in operates as an ad-free intelligence platform for corporate law professionals, company secretaries, legal practitioners, and compliance teams. We do not display third-party advertisements, do not run programmatic ad networks (such as Google AdSense, Clickio, or banner partners), and do not monetize reader visits through ad impressions or behavioral ad tracking.
A. No Advertising Cookies or Cross-Site Ad Trackers
Because CorpLawUpdates.in does not partner with or run third-party advertising networks, no advertising cookies, web beacons, or tracking pixels are placed on your browser for commercial advertising or retargeting purposes.
B. Editorial Integrity & Independence
All statutory regulatory summaries, compliance calendars, and legal calculators are curated objectively by our research team without advertiser involvement or sponsored ad placements.
6. Sponsored Content & Link Attribution
CorpLawUpdates.in may publish sponsored or guest articles submitted by external contributors. These articles are clearly labelled as "Sponsored" and include a disclosure that CorpLawUpdates does not necessarily endorse the views or services mentioned.
A. External Link Attribution in Sponsored Content
External links within sponsored articles are marked with rel="sponsored noopener noreferrer" attributes in accordance with search engine guidelines for paid content. This ensures that search engines can distinguish between editorial links and paid/sponsored links.
B. No Personal Data Collection from Sponsored Content
We do not collect or share your personal information with sponsors or external contributors through sponsored articles. Your interaction with sponsored content is governed by this Privacy Policy and is not shared with the sponsor.
7. Cookies & Analytics Policy
CorpLawUpdates.in uses essential cookies, device storage, and privacy-respecting analytics to enhance user navigation and measure platform readership in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025.
A. Cookie Consent Management
We use a privacy-first cookie consent banner that gives you complete control over cookies. You can manage:
- Essential Cookies: Required for core site operations (navigation, security, authentication tokens, theme persistence). These cannot be disabled.
- Analytics Cookies: Help us measure readership and optimize site speed (Google Analytics 4, Microsoft Clarity, Vercel Analytics). You can accept or reject these.
- Functional Cookies: Remember your user interface preferences and tool inputs. You can accept or reject these.
We do not use third-party advertising cookies or cross-site commercial trackers. Your consent choices are stored locally on your device and can be changed at any time using the cookie preferences link in our footer.
B. Google Consent Mode v2
We have implemented Google Consent Mode v2 with advertising storage (ad_storage, ad_user_data, and ad_personalization) strictly denied by default. Analytics telemetry complies with your explicit preferences.
C. Managing Your Browser Cookie Settings
In addition to our consent banner, you can control, restrict, or clear cookies through your browser settings (Chrome, Safari, Firefox, Edge). Note that disabling essential cookies may affect site functionality.
D. European Economic Area (EEA), UK & Swiss Visitors (GDPR)
Our consent banner implements granular consent options as required by GDPR for EEA, UK, and Swiss visitors. You can accept or reject analytics and functional cookie categories independently. Your consent preferences are respected and can be withdrawn at any time.
E. United States State Privacy Disclosures (CPRA, CCPA, CPA, VCDPA)
Residents of California (California Consumer Privacy Act as amended by the CPRA), Colorado, Virginia, Connecticut, Utah, and other US states with comprehensive privacy legislation have specific rights regarding their personal information:
- Do Not Sell or Share My Personal Information: We do not sell or share your personal information for monetary consideration or cross-context behavioral advertising.
- Right to Know & Access: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you over the past 12 months.
- Right to Delete: You have the right to request deletion of your personal information, subject to statutory exceptions.
- Non-Discrimination: We will never discriminate against you, deny services, or alter pricing because you exercised your statutory privacy rights.
8. Newsletter & Email Delivery Tracking
Our newsletters and transactional communications (such as welcome messages and regulatory notifications) use industry-standard email delivery infrastructure provided by Brevo (Sendinblue) and Resend. Standard tracking technology detects when an email is delivered, opened, or links are clicked to ensure high deliverability and measure engagement. This telemetry is used strictly for internal diagnostics and service delivery, and is never sold or shared with any third party. You can unsubscribe or update your email preferences at any time via the one-click unsubscribe link provided in every email.
9. Data Retention & Purpose Limitation
In strict compliance with the purpose limitation and data retention principles under the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025, personal data is retained only for the duration necessary to satisfy the specific purpose for which it was collected or until consent is withdrawn:
- Subscriber emails: Retained until you unsubscribe. After unsubscribing, your email is marked inactive and permanently deleted within 30 days upon written request.
- IP addresses & Security Logs: Retained for a short rolling operational window (maximum 90 days) to prevent bot attacks, enforce rate-limiting, and defend against fraudulent traffic.
- Document Generator Data: Draft inputs entered into client-side generators are processed in real-time. Saved user documents in encrypted databases can be permanently erased upon user request.
To request erasure of your data: [email protected]
10. Your Rights (DPDP Act, 2023 & DPDP Rules, 2025)
As a Data Principal under India's Digital Personal Data Protection (DPDP) Act, 2023 and DPDP Rules, 2025, you enjoy statutory rights regarding your personal data:
- Right to Access Information: Obtain a summary of personal data being processed by us and the processing activities undertaken.
- Right to Correction & Completion: Request correction of inaccurate personal data, completion of incomplete data, or updating of outdated records.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data when the purpose for which it was processed is no longer served.
- Right to Grievance Redressal: Access an effective, readily available grievance redressal mechanism provided by CorpLawUpdates.in.
- Right to Nominate: Nominate another individual who shall, in the event of death or incapacity, exercise your data principal rights in accordance with the DPDP Rules, 2025.
- Right to Withdraw Consent: Revoke consent for newsletter communications or data processing at any time with immediate effect.
To exercise any statutory right, contact our Grievance Officer at: [email protected]
10. Children's Privacy
This site is not intended for persons under 18 years of age. We do not knowingly collect, process, or track data from minors in accordance with Section 9 of the DPDP Act, 2023.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect regulatory notices, judicial interpretations, or technological changes. The "Last updated" date at the top of this page indicates the latest revision.
12. Contact & Grievance Officer
In accordance with the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025, CorpLawUpdates.in has designated a Grievance Officer to address any inquiries, complaints, or rights requests regarding the processing of your personal data:
Grievance Officer: Komalpreet Singh
Role: Founder & Lead Regulatory Analyst
Desk Location: Lucknow, Uttar Pradesh, India
Official Email: [email protected]
Website: www.corplawupdates.in
Resolution Timeline: Grievance communications are acknowledged within 24–48 hours, and substantive resolutions are delivered within statutory deadlines prescribed under the DPDP Rules, 2025 (maximum 30 days).