Last updated: 18 October 2026
This Privacy Policy explains what personal data Lexfolio collects through lexfolio.in, why we collect it, how we use and protect it, and the rights you have over it. Lexfolio is the trade name of a sole proprietorship based in Lucknow, India, whose details are on our Contact page. For the purposes of the Digital Personal Data Protection Act, 2023 and the rules made under it, Lexfolio is the Data Fiduciary for the personal data described here, and you are the Data Principal.
We follow the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 together with the Digital Personal Data Protection Rules, 2025, as each applies.
1. The data we collect
Data you give us
- Account details: your name, email address and password (stored only in encrypted, hashed form).
- Order and billing details: your name, email address, phone number and state, which are needed to process payments and issue invoices.
- Messages: what you write to us by email or through forms, including complaints and refund requests.
- Optional profile details you choose to add, such as the examination you are preparing for.
Data created when you use the Website
- Your orders, purchases, downloads, test attempts, scores and course progress.
- Technical data such as IP address, browser type, device type, pages visited and the time of your visit, recorded in server logs and through cookies.
Data we do not collect
We do not receive or store your card number, CVV, UPI PIN, net banking password or wallet credentials. Payments are handled entirely by Razorpay on its secure checkout.
2. Why we use your data
We use your personal data only for these purposes:
- to create and manage your account and let you sign in;
- to process orders and payments, deliver products, and give you access to tests and courses;
- to send order confirmations, download links, invoices, password resets and important service messages;
- to answer your questions, handle refunds and resolve complaints;
- to prevent fraud, unauthorised sharing of products and misuse of the Website;
- to keep records that the law requires, such as tax and accounting records;
- to understand, in aggregate, how the Website is used so that we can improve it;
- with your separate consent only, to send you newsletters, offers and updates about new products.
We process your data on the basis of your consent, which you give when you create an account, place an order or submit a form, and where the law allows processing for legitimate uses, such as complying with a legal obligation or using data you have voluntarily provided for the purpose for which you provided it.
3. Marketing messages
We send promotional emails only if you have opted in. Every promotional email has an unsubscribe link, and you can also withdraw by writing to support@lexfolio.in. Withdrawing from marketing does not affect service messages about your orders.
4. Who we share data with
We do not sell or rent your personal data. We share it only with service providers who help us run the Website and who act on our instructions as Data Processors:
- Hostinger, which hosts the Website and its database;
- Razorpay, which processes payments and may verify transactions to prevent fraud;
- an email delivery service, which sends our order and service emails.
We may also disclose personal data where the law requires it, for example in response to a lawful order of a court or a government authority, or to protect our legal rights.
Our service providers may store data on servers in India or abroad. Where data is processed outside India, it is processed only as permitted under Indian law.
5. Cookies
The Website uses cookies that are needed for it to work, such as cookies that keep you signed in and remember your cart. These cannot be switched off without breaking the Website. If we use analytics or other non-essential cookies, we will ask for your consent first. You can also block or delete cookies in your browser settings.
6. How long we keep data
We keep your account data for as long as your account is active. If you ask us to delete your account, or if your account is inactive for three years, we will erase your personal data, except data we must keep by law. Order and invoice records are kept for the period required by tax and accounting laws. Server logs are kept for a limited period for security purposes.
7. How we protect data
We use reasonable security safeguards, including encrypted HTTPS connections, hashed passwords, access controls, secure hosting and regular software updates. No system is completely secure, but we take care to protect your data against loss, misuse and unauthorised access.
If a personal data breach occurs, we will inform the Data Protection Board of India and the affected users as required by law, and take steps to limit its effects.
8. Your rights
As a Data Principal, you have the right:
- to obtain a summary of the personal data we hold about you and how we process it;
- to have inaccurate or incomplete data corrected or updated;
- to have your personal data erased when it is no longer needed for the purpose for which it was collected, unless the law requires us to keep it;
- to withdraw your consent at any time, as easily as you gave it, although this will not affect processing already done and may mean we can no longer provide some services;
- to have your grievances redressed by us;
- to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
You can edit most account details yourself under My account. For any other request, write to support@lexfolio.in from your registered email address. We may need to verify your identity before acting on a request.
9. Children
The Website is meant for adults. We do not knowingly create accounts for, or collect personal data from, anyone under 18 except through the account of a parent or lawful guardian who has consented on the child’s behalf. We do not track children or target advertising at them. If you believe a child has given us personal data without such consent, please write to us and we will delete it.
10. Grievances
If you have a concern about how we handle your personal data, please write to our Grievance Officer, whose details are on our Contact page, at support@lexfolio.in. We will acknowledge your complaint within 48 hours and try to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India in the manner provided by law.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. If a change materially affects how we use your data, we will tell you by email or through a notice on the Website.