Cookie Policy · GDPR, UK GDPR, CCPA & DPDP Aware
How My Legal Pal uses cookies and similar technologies on mylegalpal.com, why we use them, and the choices you have. Written in plain language and aligned with the GDPR, the UK GDPR, CCPA, and India’s DPDP Act.
If you want to exercise a data right, withdraw consent, or simply understand how we use cookies, send us a message. A real person will reply.
If you run a website, app, or platform of your own and need a cookie policy, privacy policy, and terms drafted as a consistent set, we do that too.
Last updated: [INSERT DATE]
This cookie policy explains how My Legal Pal uses cookies and similar technologies when you visit our website. It covers what cookies are, the categories we use, how long they last, and how you control them.
We use cookies to make this website work, to remember your preferences, to understand how the site is used through analytics, and to run live chat. We do not use cookies to build advertising profiles, and we do not sell cookie data. Strictly necessary cookies run because the site needs them. Everything else runs only where you permit it, and you can withdraw permission at any time.
Cookies sound trivial, but they are where a great deal of privacy law applies. Under the GDPR and the UK GDPR, non-essential cookies require your prior, informed consent. Under California’s CCPA, you have rights over the information cookies collect. Under India’s Digital Personal Data Protection Act, the same consent and notice principles apply. This policy is written to meet those standards while staying readable.
A cookie is a small text file that a website stores on your device so it can remember things about your visit, such as your preferences or whether you are logged in. Similar technologies include pixels, local storage, and software development kits that do comparable things. When we say “cookies” in this policy, we mean all of these.
Some cookies are set by us directly. Others are set by third parties whose services we use, such as analytics or live chat. We identify which is which below, because the distinction affects who controls the data and how you exercise your rights.
From your first visit to withdrawing consent later, the sequence is the same.
Strictly necessary cookies load so the site works at all. These do not require consent under the law.
Where the law requires it, you are asked to accept or decline non-essential cookies before they run.
Accept all, decline non-essential, or set preferences. Declining is as easy as accepting.
Only the categories you allowed are set. Analytics and chat cookies stay off until permitted.
Withdraw or change consent at any time through our controls or your browser settings.
If our cookies or the law change, we update this policy and, where required, ask again.
Select a category to see what it does, whether it needs your consent, and how to control it.
We group cookies into four categories. Only the first is strictly necessary; the rest run only where permitted.
These make the website work: security, sessions, load balancing, remembering form input, and keeping you logged in if you have an account. The site cannot function properly without them, so they do not require consent under the GDPR. You can block them in your browser, but parts of the site may then break.
These remember choices you make, such as your preferred language or region, so the site feels consistent across visits. They improve your experience but are not essential. Where required, we set them only with your consent.
These help us understand how visitors use the site, which pages are read, where people arrive from, and where they leave, so we can improve. We use Google Analytics for this. Analytics cookies are not strictly necessary, so in regions that require it, such as the EU and the UK, we set them only after you consent.
Our live-chat tool sets cookies so a conversation can continue across pages and so we can respond to you. These run when the chat widget loads. If you do not use the chat, the data they hold is minimal.
We do not use cookies to build advertising profiles, and we do not sell cookie data. If that ever changes, we will update this policy and obtain consent before doing so.
The table below lists the typical cookies for a site built on our stack. [Confirm the names and durations against a real cookie scan before publishing.]
| Cookie | Set by | Category | Purpose | Duration |
|---|---|---|---|---|
| wordpress_*, wp-settings-* | First party | Necessary | Session, login, display settings | Session to 1 year |
| PHPSESSID | First party | Necessary | Maintains your session | Session |
| _ga, _ga_* | Google Analytics | Analytics | Distinguishes visitors, measures usage | Up to 2 years |
| _gid | Google Analytics | Analytics | Distinguishes visitors | 24 hours |
You decide what runs on your device. Here is how to exercise that, in practice.
Where the law requires it, we ask for your consent before setting non-essential cookies, meaning functional, analytics, and chat cookies. You can withdraw at any time, and withdrawing is as easy as giving it. Strictly necessary cookies cannot be switched off through a consent tool because the site needs them, though your browser can still block them.
Every major browser lets you see, delete, and block cookies in its settings. You can block all cookies, block only third-party cookies, or clear cookies when you close the browser. This is your right, though some features of this and other sites may then stop working as expected.
To opt out of Google Analytics specifically, you can install Google’s official browser add-on, which stops your data being used by Analytics across every site you visit.
Some browsers send a “Do Not Track” signal, for which there is still no agreed industry standard, so we cannot promise uniform behaviour. We honour recognised opt-out signals where the law requires, including the Global Privacy Control signal where it applies.
Cookies can involve personal data, so data-protection rights apply. The headline points are below.
Non-essential cookies require your prior, informed, freely given consent, which must be opt-in and never pre-ticked. You have rights to access, correct, and erase data, to object to processing, and to withdraw consent at any time.
You have the right to know what is collected, to delete it, and to opt out of the sale or sharing of personal information. We do not sell cookie data, but you can still exercise your opt-out rights, including through the Global Privacy Control signal.
Where the DPDP Act applies, we process personal data on a lawful basis, typically your consent, give notice of the purpose, and honour your rights to access, correction, and erasure. You may withdraw consent and raise a grievance with us directly.
To exercise any of these rights, get in touch using the contact form above. We respond within the timeframes the applicable law requires.
No. Strictly necessary cookies run because the site needs them to function, but you can decline functional, analytics, and chat cookies and still browse. Some conveniences, like the live chat or remembered preferences, may not work if you decline.
Declining non-essential cookies will not break core browsing. Blocking strictly necessary cookies in your browser can break things like staying logged in or completing a form, because those cookies do essential work.
No. We do not use cookies to build advertising profiles, and we do not sell cookie data. We use cookies to run the site, remember your preferences, understand usage through analytics, and operate live chat. If that ever changes, we will update this policy and ask for consent first.
Through our consent controls, or by clearing cookies in your browser, at any time. Withdrawing is meant to be as easy as giving consent. Withdrawal does not affect processing that already happened lawfully before you withdrew.
A cookie policy explains the specific technologies that store and read data on your device. A privacy policy is the broader document covering all personal data a business handles, how, why, and your full rights. They are designed to be read together, and most websites need both.
Strictly necessary cookies still load so pages render correctly. Analytics and chat cookies load only where you have permitted them. Simply reading content does not opt you into non-essential cookies.
We update it when our cookies or the law change. The “last updated” date at the top shows the current version. Significant changes will be made clear, and where the law requires, we will seek fresh consent.
Prakhar Rai is an advocate enrolled with the Bar Council of India and the founder of My Legal Pal. An alumnus of the National Law School of India University (NLSIU), Bangalore, with a Master of Business Laws, Prakhar has 10+ years of experience advising startups, technology companies, SMEs, and individual entrepreneurs across India, the UAE, the UK, and Southeast Asia.
His practice focuses on technology and commercial work, with particular depth in data protection, platform terms, and privacy documentation for digital businesses. My Legal Pal’s privacy and policy documentation is led by Prakhar and delivered by a team of qualified lawyers experienced in data-protection law.
We are happy to explain anything in this cookie policy or to help you exercise your rights. If you need a cookie policy, privacy policy, or terms drafted for your own website or app, we can help with that too.
Call +91 8004800100