Apply For LEI

Privacy Policy — India (LEI24 LTD)

Effective Date: August 29, 2026

This Privacy Policy explains how LEI24 LTD, acting as a local branch of its parent company, Lei24 Group LTD (LEI24) (a GLEIF-compliant Registration Agent and official Registration Agent for our GLEIF-accredited Local Operating Unit (LOU), Nasdaq CSD SE), collects, uses, stores, and protects Personal Data in accordance with the Indian Digital Personal Data Protection Act 2023 (DPDP Act) and applicable data protection rules and the GLEIF RA Governance Framework.

1. Data Controller and Our Structure

1.1. Data Controller Details

The Data Controller responsible for the processing of your Personal Data is the parent company:

Company Name: Lei24 Group LTD
Company Number: HE 469314
LEI: 6367000JXG942DHDPK43
Registered Address: 34 Makarios III Avenue, 2nd Floor, Flat 203, Hadjiyiannis Building, 3065 Limassol, Cyprus.
Website: www.lei24.com

1.2. Local Operating Structure & Representative

Lei24 Group LTD processes data through its local specialist branches. For clients in India, the local representative and primary contact point is:

Company Name: LEI24 LTD
LEI: 64882T0XLM634IX08268
Registered Address: Platina, 11th Floor, Plot C-59, G Block, Bandra Kurla Complex, Mumbai, Maharashtra 400051, India.
Website: www.lei24.in
Data Protection Contact: support@lei24.in

2. Data Collection, Purpose, and Legal Basis

We collect Personal Data solely for the purpose of initiating, maintaining, and renewing Legal Entity Identifier (LEI) services in compliance with global financial regulations.

2.1. Categories of Data Processed

We process the following specific categories of data based on the defined legal grounds:

Contact Person Data:

  • Data: Name, Title, E-mail address, and Phone number of the entity’s authorized representative.
  • Legal Basis: Performance of Contract (necessary for the performance of the LEI service agreement) and Legal Obligation (required by GLEIF validation protocols).

Legal Entity Data:

  • Data: Official Company Name, Address, Registration Number, and Level 2 (Parent) Data.
  • Legal Basis: Legal Obligation (compliance with ISO 17442 standards and GLEIF regulatory mandates).

Payment & Billing Data:

  • Data: Transaction details, billing address, and VAT/tax numbers.
  • Legal Basis: Performance of Contract (to process payments) and Legal Obligation (compliance with tax and accounting laws).

Technical Data & Cookies:

  • Data: IP address, browser type, device information, and cookies.
  • Legal Basis: Legitimate Use (ensuring security and functionality) and Consent (for non-essential cookies, managed via our Cookie Banner).

3. Data Sharing and International Transfers

3.1. Sharing with our GLEIF-accredited LOU

To facilitate your LEI service, we must share the necessary Contact Person Data and Legal Entity Data with our accredited Local Operating Unit (LOU):

Partner LOU: Nasdaq CSD SE
LEI: 485100001PLJJ09NZT59
Address: Vaļņu iela 1, LV-1050, Riga, Latvia.
Nasdaqlei.com Privacy Policy

3.2. Public Disclosure (Global LEI Index)

The Client acknowledges that strictly defined Legal Entity Data (including the LEI code, name, and Level 2 parent relationships) is mandated by the GLEIF framework to be publicly available via the Global LEI Index. Personal data of contact persons is NOT published.

3.3. International Transfers

As LEI24 LTD is part of a global structure, data is processed by the parent company in Cyprus and shared with our LOU, Nasdaq CSD SE, in Latvia (both within the EU/EEA). Cross-border transfer of personal data out of India is permitted under the DPDP Act except to countries specifically restricted by the Indian government.

4. Data Security and Retention

4.1. Security Commitment

We maintain high technical and organizational security standards (TOMs) to protect your Personal Data, aligning with ISO 27001 standards and GLEIF requirements.

LEI24’s data processing infrastructure is certified to SOC 2 Type II and ISO 27001, and all processing is carried out in compliance with GDPR.

All systems and data storage are hosted within the EU/EEA. When you register or renew an LEI, the details you submit, including the personal data of the authorised representative, remain on infrastructure located and operated inside the EEA. Nothing is transferred to a third country, so no standard contractual clauses or transfer impact assessments are required, and your data stays fully under GDPR and the jurisdiction of European supervisory authorities. Our sub-processors and support access are held to the same infrastructure and certification standard.

Payment processing is handled via Stripe, a PCI DSS Level 1 certified service provider.

4.2. Retention Period

LEI Service Data: Due to regulatory requirements and our agreement with the LOU (Nasdaq CSD SE), data related to LEI issuance and maintenance is retained for a period of 10 years following the termination of the service.

Financial Records: Data required for tax and accounting purposes is retained for 7 years in accordance with Indian tax and accounting law.

5. Your Rights (DPDP Act)

As a Data Principal under the DPDP Act, you have the following rights concerning your Personal Data:

  • Right to Access: To obtain a summary of your Personal Data being processed and the processing activities undertaken.
  • Right to Correction and Erasure: To have inaccurate or incomplete data corrected, updated, or erased, provided that legal obligations (such as the mandatory 10-year retention for LEI audit trails) do not require us to keep it.
  • Right to Grievance Redressal: To have any grievance regarding processing addressed in a timely manner.
  • Right to Nominate: To nominate another individual to exercise your rights in the event of death or incapacity.
  • Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time.

5.1. Filing a Complaint

We encourage you to contact us first at support@lei24.in. You also have the right to lodge a complaint with the relevant supervisory authority:

the Data Protection Board of India (established under the Digital Personal Data Protection Act 2023) | www.meity.gov.in

6. Policy Updates

LEI24 LTD reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements or our service. The most current version will always be posted on the www.lei24.in website.