Privacy Policy
Lex Minds operates as a Data Fiduciary in full alignment with the provisions of India's Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) and its notified rules. This policy provides statutory notice under Section 5, details lawful grounds of processing under Section 4 and Section 6, outlines children's protections under Section 9, and provides transparent mechanisms for Data Principals to exercise their rights under Sections 11–14.
01.Statutory Framework & Definitions (DPDP Act, 2023)
Under India's Digital Personal Data Protection Act, 2023, the terms used herein carry specific statutory meanings:
Lex Minds (“we”, “us”, “our”), which determines the purpose and means of processing personal data.
You (“user”, “applicant”, “contributor”), the individual to whom the personal data relates.
Any data about an individual who is identifiable by or in relation to such data.
Any person or entity who processes personal data on behalf of the Data Fiduciary (e.g. cloud hosting, payment gateways).
02.Notice of Personal Data Collection & Purpose Specification (Section 5)
In accordance with Section 5(1) of the DPDP Act, every request for consent is accompanied by this itemized notice detailing the specific categories of personal data collected, specific purposes of processing, and lawful grounds:
| Data Category | Specific Purpose | Lawful Basis | Retention Schedule |
|---|---|---|---|
| Internship Applicant Data (Name, Email, Phone, College, Study Year, SOP) | Evaluating applications, cohort onboarding, task assignments, issuing completion letters and verifiable digital certificates. | Consent (Section 6) | Active cohort period + 3 years for academic verification, or until erasure requested. |
| Author & Manuscript Data (Author Name, Bio, Designation, Legal Content) | Editorial peer review, author attribution, citation indexing, open-access legal publication. | Consent (Section 6) | Retained as persistent academic scholarly record with open-access attribution. |
| Contact & Grievance Inquiries (Name, Email, Query specifics) | Responding to inquiries, grievance resolution, tracking tickets, statutory compliance audit trail. | Consent (Section 6) & Legitimate Uses (Section 7) | 180 days following ticket resolution, or statutory audit window. |
| Technical & Telemetry Data (IP Masked, Browser Type, Page Visits) | Traffic analytics, security logging, DDoS defense, bot filtration. | Affirmative Consent (Google Consent Mode v2) | Up to 14 months (GA4 standard retention). |
Lex Minds adheres strictly to data minimisation. We do NOT request, process, or store government identity documents (Aadhaar, PAN, Passport), biometric information, financial bank account passwords, or complete credit/debit card numbers. All payments are processed through Razorpay in encrypted PCI-DSS compliant sessions.
03.Consent Architecture & Statutory Ease of Withdrawal (Section 6)
Under Section 6(1) of the DPDP Act, consent provided by a Data Principal must be free, specific, informed, unconditional, and unambiguous with a clear affirmative action. Lex Minds enforces:
- No Pre-Ticked Boxes: All consent checkboxes across application forms, contact desks, and paper submissions are un-ticked by default.
- Unbundled Approvals: Acceptance of editorial Terms & Conditions is kept separate from consent to process marketing or auxiliary communication.
- Ease of Withdrawal (Section 6(4)): You have the absolute statutory right to withdraw your consent at any time. In accordance with the Act, the ease of withdrawing consent is comparable to giving it. You can modify your tracking choices instantly via our or withdraw data processing consent by filing a ticket on our Data Principal Rights Portal.
04.Additional Obligations Regarding Children's Personal Data (Section 9)
Lex Minds takes the protection of minors seriously. Under Section 9 of the DPDP Act, a “child” is defined as an individual who has not completed 18 years of age:
Before processing any personal data of an individual under 18 years of age, Lex Minds obtains verifiable consent from the parent or lawful guardian.
In strict compliance with Section 9(2) and Section 9(3), Lex Minds shall never undertake tracking or behavioral monitoring of children, nor direct targeted advertisements at child users.
05.Data Principal Statutory Rights (Sections 11, 12, 13 & 14)
As an Indian Data Principal, you enjoy legally enforceable rights under Chapter III of the DPDP Act:
Request a comprehensive summary of your personal data processed by Lex Minds, identities of third-party processors, and operational activities.
Rectify misleading, inaccurate, or outdated records in your academic profile or internship docket.
Demand permanent erasure of your personal data once the purpose of collection is completed, subject to statutory certificate record retention.
Nominate an individual who shall exercise your statutory rights in the unfortunate event of death or legal incapacity.
Requests are processed with an encrypted docket ID and audited under DPDP rules.
06.Security Safeguards & Breach Protocol (Section 8)
Under Section 8(5) of the DPDP Act, a Data Fiduciary is mandated to implement reasonable security safeguards to prevent personal data breaches:
- Transport Encryption: 100% of network traffic operates over HTTPS with TLS 1.3 encryption.
- Access Controls: Editorial dossiers and applicant personal details are restricted to designated coordinators under strict role-based access.
- Automated Breach Notification: In the unlikely event of a personal data breach, Lex Minds is prepared to notify the Data Protection Board of India (DPBI) and affected Data Principals in accordance with Section 8(6) of the Act and prescribed rules.
07. Grievance Redressal Mechanism & Officer Details (Section 13)
In compliance with Section 8(9) and Section 13 of the DPDP Act, Lex Minds has designated an official Grievance Redressal Officer to address concerns regarding the processing of personal data:
Designation: Grievance Redressal Officer (DPDP Compliance Desk)
Organization: Lex Minds India
Official Email: lexmindsindia@gmail.com
Initial Acknowledgement SLA: Within 48 hours of electronic receipt.
Statutory Determination SLA: Within thirty (30) days as stipulated under DPDP Rules.
As provided under Section 13(3) of the Digital Personal Data Protection Act, 2023: If a Data Principal does not receive a response from the Grievance Redressal Officer within the prescribed thirty (30) days, or is aggrieved by the determination or response provided by Lex Minds, the Data Principal may file a formal electronic complaint with the Data Protection Board of India (DPB) in the manner prescribed under the Act.
08.Multilingual Notice Availability (Constitution Eighth Schedule)
In accordance with Section 5(3) of the DPDP Act, Data Principals have the option to access the summary notice of personal data processing in English or in any of the languages specified in the Eighth Schedule to the Constitution of India. You can switch between English and हिन्दी (Hindi) using the toggle at the top of this document or within the interactive consent manager.
Lex Minds is an academic learning, research fellowship, and student publishing platform. Information published across our website, articles, and commentaries is intended solely for legal scholarship and academic discourse. It does not constitute legal counsel, advocate solicitation, or an advocate-client relationship.