Privacy & Cookie Policy

LawMint · Version 2.6 · Last updated: 12 October 2026

This policy explains personal-information handling for LawMint.com, LawMint.net, the LawMint learning platform, and its associated registration, course, payment and support services. Both websites are covered by this policy. Third-party websites and services may have separate privacy notices, as explained below.

1. Who is responsible and how to contact us

We provide our services under the trade name LawMint. LawMint is responsible for the purposes and means of processing described in this notice, except where a provider independently determines its own processing. Our address is 303, Sterling Court, Balamrai, Secunderabad, Telangana, India – 500003.

Contact hello@lawmint.com for privacy questions, grievances, corrections, access or deletion requests. You do not need to be logged in to email us. Logged-in users may also use the contact form.

2. Information we collect

  • Account and sign-in information: your first name, last name and email address, supplied through Google sign-in. These are the only Google profile fields we currently map into your Moodle account. We do not map your Google profile image, address, phone number, nickname, middle name or language preference into Moodle profile fields. The sign-in process also uses your Google account identifier and authentication information needed to link and authenticate your account. Google may include additional attributes in its sign-in response even when they are not mapped into your Moodle profile. LawMint does not receive your Google password through this sign-in process.
  • Location and billing information: your selected country and, when purchasing in India, your state and city/town/village. We use these details, together with the relevant name, course and transaction information, to prepare GST invoices or receipts and administer the purchase.
  • Learning information: course enrolments, access dates, test answers, attempts, scores, completion information and learning activity needed to deliver the service and reports.
  • Transaction information: course and order details, amount, currency, payment references, verification/status information and refund or dispute correspondence. Payment credentials are handled through the payment provider; do not send card security codes, PINs or one-time passwords to LawMint support.
  • Support information: the messages and attachments you send, your contact details and our responses.
  • Technical, session and activity information: IP addresses, browser/device information, login and access times, session records, pages or activities accessed, and recorded actions or errors. Moodle records IP addresses in session, login and activity records, which may be associated with your account. We use relevant records to administer account sessions, investigate suspected misuse or unauthorised access, resolve course or test-access problems and maintain the service. Our web server and Cloudflare may also process connection and security information.

Payment-provider contact information: Razorpay or Cashfree may require your mobile number and other details for payment authentication, processing or security. Mobile numbers and other payment details may be visible to LawMint through the provider's merchant dashboard and transaction reports. We use the transaction information needed to prepare GST invoices or receipts and administer purchases. We do not use mobile numbers made available through payment reports for marketing.

IP addresses, account identifiers and device information may be personal data. Only information that has been effectively anonymised so that people are no longer identifiable is treated as anonymous information.

3. How information reaches us

We receive information directly from you, from Google when you choose Google sign-in, from payment providers in connection with your transaction, and from the learning platform and infrastructure when you use the service. Required fields are identified in the relevant form. Without information necessary for registration, payment or tax records, we may be unable to provide the relevant service.

Country information is used for applicable pricing and billing. For Indian purchases, state and city/town/village information is used for GST invoice or receipt preparation. Please contact us to correct inaccurate information where self-service editing is unavailable. We may retain the original transaction record where needed for accounting, legal obligations or dispute resolution, while recording the correction appropriately.

4. Why we use information

  • Create and authenticate accounts and provide purchased or requested course access.
  • Save learning progress, mark assessments and show results and learning reports.
  • Process and reconcile payments, investigate failures, manage manual refunds and maintain accounting or tax records.
  • Respond to messages and communicate about access, transactions, security or material service changes.
  • Detect misuse, protect accounts and systems, investigate incidents and troubleshoot performance.
  • Comply with applicable legal obligations and establish, exercise or defend legal claims.
  • Where separately authorised or otherwise permitted by applicable law, send optional marketing communications. You may object or withdraw the relevant consent; service messages are separate.

Where EU or UK GDPR applies, necessary account, course and purchase processing relies on performing our contract with you or taking steps you request before entering it. Processing required by law relies on the relevant legal obligation. Necessary, proportionate security, troubleshooting and claims-related processing may rely on our legitimate interests in protecting users and operating the service, balanced against your rights.

Where processing requires consent, including certain marketing or device-storage activities, that consent must be specific and separate from accepting the terms. You may withdraw it without affecting the lawfulness of earlier processing. We do not rely on GDPR legitimate interests as a substitute for consent required by cookie or electronic-marketing rules.

Indian processing is assessed under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, according to their scope and phased commencement. Where those provisions apply, processing must be for a lawful purpose and supported by consent or one of the Act’s permitted “certain legitimate uses”, as applicable. The GDPR grounds described above are not automatically grounds under Indian law. Clicking Got it on the cookie notice does not provide general consent to process your account, learning or payment information.

6. Providers and other recipients

  • Google — sign-in: authenticates Google sign-in. Our current profile-field mappings import only your first name, last name and email address; the sign-in process also uses the account identifier and authentication information described in section 2. LawMint does not receive your Google password or access to your Gmail inbox through this sign-in. Google's independent processing is described in its Privacy Policy and cookie information.
  • Razorpay, Cashfree and the selected payment participants: process and authenticate payments and handle related verification, refunds or disputes. Relevant order and billing information may be sent to the selected provider. It may collect a mobile number and other payment information directly and make transaction and contact details available to LawMint through its merchant services. See Razorpay's Privacy Policy and Cashfree's Privacy Policy for their data-handling and cookie information.
  • Cloudflare: provides website security, traffic delivery and caching, and may process IP addresses, connection, request and security information. See Cloudflare's Privacy Policy and its information about cookies used on customer websites. The cookies used depend on the services and protections enabled or triggered.
  • Zoho Mail and/or Gmail: provide email services used to send site messages, receipts and support communications. The service used processes recipient and sender addresses, message content, attachments where included, and delivery information. This email-sending arrangement is separate from Google sign-in. See Zoho's Privacy Policy and Google's Privacy Policy.
  • DigitalOcean — hosting infrastructure: hosts our main learning platform and database in a DigitalOcean region in India. Account, learning and transaction information stored in the platform is held on this infrastructure. Related backup storage is governed by the locations and services configured for those backups. LawMint remains responsible for the purposes of this processing and responding to your privacy requests. DigitalOcean describes its handling of hosted customer personal data in its Data Processing Agreement.
  • Authorised technical support providers: process the information necessary to maintain, restore and support the platform, subject to their role and applicable safeguards.
  • Authorities and professional advisers: may receive information where necessary for a legal obligation, a lawful request or the handling of claims. A business transfer may involve relevant records, subject to applicable protections and notice obligations.

Providers may act on our instructions for some activities and independently for others, such as their own regulated payment obligations. Linking their policies does not remove LawMint's responsibilities for its own processing.

7. International processing

Our main Moodle learning platform and database are hosted in India. This does not mean that all information used to provide our services remains exclusively in India: Google sign-in, email, payment, security and content-delivery providers may process relevant information in other countries under their service arrangements. Backup and disaster-recovery locations are also relevant to where copies are held. Where a transfer is restricted by applicable data-protection law, the appropriate legal mechanism and safeguards must apply. Where relevant these may include an adequacy decision or approved contractual safeguards. Contact us for details of the destinations and safeguards relevant to your information and how to obtain a copy, subject to lawful confidentiality limits.

8. Retention and deletion

We retain information only while needed for the purposes described or an applicable legal requirement. The criteria differ by category:

  • Account and learning records are retained to deliver and administer the account, purchased access and relevant learning history; account closure or a valid deletion request triggers a review of what remains necessary.
  • Transaction, billing and tax records may be retained beyond course expiry or account closure for applicable statutory periods and the handling of disputes or claims.
  • Support records are retained according to the nature of the enquiry, follow-up requirements and relevant complaint or claim periods.
  • Technical and security logs are retained according to operational needs and incident investigation; records needed for a specific incident may be retained longer than routine logs.
  • Backups are governed by their rotation and recovery requirements. Removing information from active systems may not immediately remove it from every backup; retained copies remain subject to access restrictions and applicable deletion requirements.

Existing accounts may still contain optional profile information imported under earlier sign-in settings. Removing a Google field mapping does not automatically erase previously stored values or images. You may contact hello@lawmint.com to request review, correction or deletion of such information, subject to applicable retention requirements.

Closing an account, ending course access and deleting personal information are different actions. Privacy requests are reviewed manually across relevant systems and providers. If information must be retained, we will explain the reason and applicable period or criteria. We do not promise that every financial record is erased when a Moodle account is deleted.

9. Security

We use reasonable technical and organisational measures appropriate to the information and risks, including access controls and secure communication where applicable. No online service can guarantee absolute security. We investigate security incidents and make notifications to affected people or authorities where applicable law requires them.

Protect your Google account and any device used to access the platform. Notify us if you suspect unauthorised access. Do not include unnecessary sensitive information in support requests.

10. Your rights and requests

Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent where consent is the basis of processing. Rights are subject to their legal conditions and exceptions, including necessary retention for statutory obligations or claims.

Email hello@lawmint.com with the request and the email associated with your account. We may ask for proportionate information to confirm identity; do not send identity documents unless requested and necessary. A hidden profile-edit page does not prevent you from requesting a correction.

When the relevant Indian DPDP provisions apply, rights include access to information about personal-data processing, correction, completion or updating, erasure subject to lawful retention, grievance redressal, and nomination of another individual to exercise rights in the event of death or incapacity, subject to the Act's conditions. You may contact hello@lawmint.com to make a request or withdraw consent where processing relies on it. Withdrawal may affect our ability to provide the service for which that processing is necessary; it does not automatically require deletion of records that must lawfully be retained.

For GDPR requests, we ordinarily respond within one month. Where an extension is legally permitted because of complexity or the number of requests, we will explain it within the original period. We apply the deadlines and complaint procedures required by other applicable laws where relevant.

You may complain to us and to the competent data-protection authority where the relevant law applies, including the relevant EU supervisory authority or the UK's Information Commissioner's Office. Applicable Indian grievance and escalation rights remain available according to the provisions in force. Ordinary support response targets do not replace statutory privacy-request requirements.

11. Children and young users

Users under 18 may use our educational content, but purchases for them must be made by a parent or guardian authorised to use the payment method. The parent's or guardian's purchase authorisation and any legally required consent to process a child's personal information are separate matters; a payment alone does not establish that all required privacy consent has been obtained.

Where applicable law requires parental or guardian consent or verification, that requirement must be met before the relevant processing. Parents and guardians should review this policy with the young user and contact us before registration if the required consent route is unclear. They may contact us about access, correction or deletion of the child's information, subject to verification of authority and the child's rights under applicable law.

If we learn that a child's information has been processed without consent required by applicable law, we will investigate and take appropriate steps to obtain the required consent, restrict processing or delete information as appropriate. Do not send a child's identity documents or other sensitive information unless we specifically request information that is necessary for a lawful verification process.

12. Assessment results and automated processing

The platform automatically marks relevant test responses, records progress and generates learning reports. These are practice-learning tools and do not constitute an official examination result or professional eligibility decision. Payment and security systems may also apply automated checks. Contact us if you believe a result, access decision or transaction record is incorrect so it can be investigated.

13. Cookies and similar storage

Cookies and browser storage help maintain sessions, remember choices and operate interactive features. Technologies can differ between LawMint.com, the LawMint.net learning platform and external services you choose to use.

  • Login and session cookie: LawMint.net uses a first-party cookie named MoodleSessionlawmint to associate requests with your session and keep sign-in, courses and tests working. This is a session cookie used to operate the service, not for advertising tracking. Signing out ends authenticated access. Browser session-restoration settings can affect how long a session cookie remains on a device.
  • Cookie-notice dismissal: When you click Got it on LawMint.net's cookie information notice, we set a first-party preference cookie named lmxui_cookie_notice. It remembers that you have dismissed the current version of the notice, so it does not repeatedly appear on the front page and login page in that browser. The cookie contains only a notice-version value, not your name, email address, account ID or browsing history. It is not used for advertising or tracking your activity, and no separate dismissal record is saved in your account or our application database.
  • Dismissal-cookie lifetime: lmxui_cookie_notice expires one calendar month after you click Got it. If the following month has no matching day, it expires on that month's final day. Ordinary visits do not extend this period. Each browser or device remembers its own dismissal; it is not shared with LawMint.com or synchronised through your account. The notice may appear again after expiry, if you clear the cookie, in a different browser or private-browsing session, or when we introduce a materially revised version of the notice.
  • Security storage: Cloudflare may use security or challenge-related storage where its enabled protections require it. The storage used and lifetime depend on the protection triggered and configuration.
  • Sign-in and payments: Choosing Google sign-in redirects you to Google, which may set or access cookies on its own domains under its own policies and your Google settings. See How Google uses cookies. Selected payment services may also use cookies or similar storage when you interact with their services. Their notices explain the purposes and lifetimes of that storage. LawMint's notice-dismissal button does not control cookies set by these providers.
  • Optional storage: analytics, advertising or other non-exempt tracking must be identified and controlled separately where applicable law requires consent or an objection mechanism. Clicking Got it, accepting our terms or continuing to browse is not, by itself, consent to such tracking.

The notice on the front page and login page provides cookie information. Got it dismisses that notice and remembers your choice for the period described above; it does not accept our terms, grant marketing permission or change your Google or payment-provider settings.

You can inspect, clear or block cookies using your browser's site-data controls. To reset only the notice dismissal, delete lmxui_cookie_notice for LawMint.net; the notice will return when you next load the front page or login page. Blocking this preference cookie does not prevent access to courses or tests, but your dismissal may not be remembered. Blocking essential session or security storage may prevent sign-in, tests or checkout. Browser controls are additional to any consent or objection mechanism required for optional technologies; this policy is not itself a consent mechanism.

For help identifying storage used on a particular page, contact us with the page address and browser name. Do not send cookie values or session identifiers.

Following an external link or choosing a third-party service brings you within that service's practices. We remain responsible for our own disclosures and processing.

We will update this notice when relevant practices change and identify the effective version. Material changes will be communicated as required. An updated notice does not retrospectively create consent or permit incompatible uses of information. Contact hello@lawmint.com for questions or a copy of the notice relevant to an earlier interaction.