Privacy Policy
Last updated 2026. This policy explains how we handle personal data for the Vakeel CMS website and service, and your rights under UK GDPR and the DPDP Act 2023.
1. Who we are
Vakeel CMS is a trading name of Vakeel Ltd (company number 17346646), registered office 128 City Road, London, United Kingdom, EC1V 2NX. For privacy questions contact contact@vakeelcms.com. When we decide how and why personal data is processed, for example for our own marketing and website, we are the data controller. When we process client data inside the Service on behalf of a subscribing firm, we act as a processor and that firm is the controller.
2. Scope
This policy covers visitors to our website and people who contact us or request a demo. Personal data processed inside the Service on behalf of a firm is governed by that firm privacy notice and our data processing agreement.
3. The personal data we collect
- Contact and enquiry data you give us, such as name, firm, email, phone and the content of your message when you request a demo or contact us.
- Consent records, including the choice you made and when, so we can evidence it.
- Technical data such as IP address and browser type, used to keep the site secure.
- Preference data, such as your region choice, described in our Cookie Policy.
4. How and why we use it
- To respond to your enquiry and set up a demo or trial.
- To provide, secure and improve the website and the Service.
- To send you information you asked for, and, only with a lawful basis, occasional updates you can opt out of at any time.
- To meet our legal and regulatory obligations.
We do not sell personal data, and we do not use it for automated decisions that produce legal effects.
5. Our lawful bases
For visitors in the UK and the EU, we rely on the following bases under UK GDPR and the EU GDPR: consent, for optional cookies and marketing; contract, to respond to a demo or trial request; legitimate interests, to run and secure our website and understand demand, balanced against your rights; and legal obligation, where the law requires. For visitors in India, we process personal data in line with the Digital Personal Data Protection Act 2023, relying on your consent or another lawful ground under that Act. You can withdraw consent at any time.
6. Cookies and consent
We use strictly necessary cookies and, with consent, store your region preference. See our Cookie Policy for the detail and to change your choice.
7. Sharing and processors
We share personal data only with service providers who help us run the website and respond to you, under written terms that require them to protect it. These may include hosting, email delivery and, where you choose to use them, e-signature and accounts providers. We may disclose data where required by law.
8. International transfers
Where personal data is transferred outside the UK, the EU or India, we use appropriate safeguards, such as adequacy decisions or standard contractual clauses, and offer regional data residency options for the Service.
9. Retention
We keep enquiry and consent data for as long as needed to deal with your request and to keep a record of consent, then delete or anonymise it. Service data is retained in line with your agreement with us.
10. Security
We use encryption in transit and at rest, role based access, and audit logging, and we review our controls regularly. No system is perfectly secure, but we take our responsibilities seriously and will notify you and any regulator where the law requires.
11. Your rights
Subject to law, you may request access to your personal data, correction, deletion, restriction or portability, and you may object to certain processing or withdraw consent. Under the DPDP Act 2023, data principals in India have equivalent rights, including access, correction, erasure and grievance redressal. To exercise any right, contact contact@vakeelcms.com. We will respond within the time the law allows.
12. Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to a regulator: in the UK, the Information Commissioner Office; in the EU, your local supervisory authority; in India, the Data Protection Board of India.
13. Children
The website and Service are intended for law firms and business users, not children, and we do not knowingly collect childrens data.
14. Changes and contact
We may update this policy and will change the date above when we do. For any privacy question, or to exercise a right, contact contact@vakeelcms.com or write to Vakeel Ltd, 128 City Road, London, United Kingdom, EC1V 2NX.