Statutory Data Governance

Privacy Policy & Data Protection

Strict data protection compliance governing client intake, uploaded document vetting, and attorney-client communications.

1. Institutional Scope & Legal Basis

LegalBD operates in strict compliance with the Personal Data Protection Act, 2026 (Act No. 63 of 2026), the Information & Communication Technology Act 2006, and the Canons of Professional Conduct of the Bangladesh Bar Council. This Privacy Policy governs the processing, retention, and encryption of all information submitted via our digital portals, edge functions, and intake forms.

2. Categories of Information Collected

  • Identity & Contact Data: Full legal name, National Identity Number (NID), Passport number, contact phone/WhatsApp, and institutional email addresses.
  • Matter & Case Documents: Title deeds, deeds of gift, company incorporation documents, RJSC filings, board resolutions, and evidence submitted for legal opinion.
  • Technical & Telemetry Data: IP addresses, browser user-agent tokens, and edge network diagnostic logs (collected strictly for DDoS prevention and authentication validation).

3. Attorney-Client Privilege & Confidentiality

All communications transmitted through LegalBD for the purpose of seeking legal advice are strictly confidential and protected by Section 126 of the Evidence Act, 1872 (Privileged Communications). Our Advocates, Barristers, and technical staff are legally bound not to disclose any client communication without express written consent.

4. Data Storage, Encryption & Security

All digital records are transmitted using TLS 1.3 encryption and stored in encrypted storage volumes with strict role-based access control (RBAC). Document uploads are automatically scanned for malware and purged following the conclusion of the advisory engagement unless required for ongoing court proceedings.

5. User Rights under the 2026 Act

Subject to statutory exceptions, you maintain the right to:

  • Request an authenticated copy of all personal data held in our secure registry.
  • Demand correction of any inaccurate, incomplete, or obsolete legal data.
  • Request permanent erasure of non-statutory records upon conclusion of your legal retainer.

6. Data Protection Officer (DPO) Contact

For inquiries regarding data protection, access requests, or regulatory filings, contact our Data Protection Officer at: [email protected].