Privacy policy

This policy explains what personal data thelaw.lk collects, why, and your rights under the Personal Data Protection Act, No. 9 of 2022.

What we collect

• Account details: name, email, mobile number and password (stored as a one-way hash).
• Enquiries you send to a lawyer: your name, contact details and message. These are shared only with that lawyer.
• Lawyer profiles: information lawyers choose to publish, and their enrolment number, which we keep private.
• Practice data that lawyers enter about their clients and cases. Lawyers control this data; we process it on their behalf.
• Payment records from PayHere. We never see or store full card numbers.

Why we use it

To run the directory, deliver enquiries and reminders by email and SMS, provide the practice software, take payments and keep the service secure.

Who we share it with

The lawyer you contact; our service providers for hosting, email (SMTP), SMS (Notify.lk) and payments (PayHere); and authorities where the law requires. We do not sell personal data.

How long we keep it

Account data for as long as your account is open. Enquiries for two years. Practice data for as long as the lawyer’s subscription, plus 90 days to allow export.

Your rights

You can ask to access, correct or delete your personal data, or object to its use, by writing to us from the contact page. If a lawyer holds your data as their client, contact the lawyer directly.