Privacy Policy

Legalify Attorneys takes its responsibilities with regard to the management of personal data very seriously, and we do not take lightly the trust you place in us by providing us with your personal information. This Policy describes how Legalify Attorneys processes your personal data, but it may not address every possible data processing scenario. This Privacy Policy is a guide to help you understand:

1. The Information We Collect
2. How We Collect and Use Your Data
3. Consent and Access Rights
4. Personal Data Protection Principles
5. User Responsibility
6. Data Security
7. Third Party Access
8. Violation of Privacy
9. How to Contact Us

1. The Information We Collect

We may collect the following information: name, date of birth, residential and contact address, telephone number, email address, marital status, nationality, gender, tax identity number, bank details, information from social networking posts, information on family members, medical information, educational background, genetic data, biometric data, identity number, location, photograph, IP address, MAC address, IMEI number, IMSI number, and other information relevant to the purposes described below.

2. How We Collect and Use Your Data

2.1 Legalify Attorneys collects the information above using forms, email and physical requests, cookies, JWT, and web tokens.

2.2 When you send email or other communications to Legalify Attorneys, we may retain those communications to process your inquiries, respond to your requests, and improve our services. When you access our website, our servers automatically record information that your browser sends whenever you visit.

2.3 We use the information above for due diligence, transaction advisory, legal advisory, litigation, regulatory compliance, marketing, business development, listing on legal directories, publicity, human resources management, recruitment, events planning and hosting, in-house security, research, analysis, and vendor registration.

3. Consent and Access Rights

3.1 We require your consent for the processing of your data and shall obtain your consent to individual matters where any document deals with other matters. If we intend to use your information in a manner different from the purpose for which it was collected, we will ask for your consent prior to such use.

3.2 No consent shall be sought, given, or accepted in any circumstance that may engender direct or indirect propagation of atrocities, hate, child rights violation, criminal acts, or anti-social conduct.

3.3 You may withdraw your consent at any time and may request access to your personal information in our possession. We can, however, decline access where we determine that your request is unreasonable.

3.4 You reserve the right to request the modification or amendment of your personal data in our possession.

3.5 In all cases of access, modification, or amendment of personal information, we shall request sufficient identification to confirm that you are the owner of the data sought to be accessed, modified, or amended.

4. Personal Data Protection Principles

When we process your personal data, we are guided by the following principles, which require personal data to be:

• processed lawfully, fairly, in a transparent manner, and with respect for the dignity of the human person;
• collected only for specified, explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes;
• adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
• accurate and, where necessary, kept up to date;
• not kept in a form which permits identification of the data subject for longer than necessary for the purposes for which the personal data is processed; and
• processed in a manner that ensures its security, using appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

5. User Responsibility

You are required to familiarise yourself with this Policy and to ensure that the information you provide to us is complete, accurate, and up to date.

6. Data Security

6.1 Legalify Attorneys implements and maintains appropriate safeguards to protect personal data, taking into account the risks presented to you by unauthorised or unlawful processing, or accidental loss, destruction of, or damage to, your personal data.

6.2 Safeguarding includes the use of encryption and pseudonymisation where appropriate, and protecting the confidentiality (ensuring only those who need to know and are authorised to use personal data have access to it), integrity, and availability of the personal data. We regularly evaluate and test the effectiveness of those safeguards.

7. Third Party Access

7.1 Legalify Attorneys only shares personal information with other companies or individuals in the following limited circumstances:

• We have your consent.
• We provide such information to other professional advisers or trusted businesses or persons for the purpose of processing personal information on our behalf. We require that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.
• We have a good faith belief that access, use, preservation, or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process, or enforceable governmental request; (b) enforce applicable terms of use, including investigation of potential violations; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect against imminent harm to the rights, property, or safety of Legalify Attorneys, its users, or the public, as required or permitted by law.

7.2 We are at all times responsible for the security and appropriate use of that data for as long as it remains with Legalify Attorneys.

8. Violation of Privacy

8.1 We have put in place procedures to deal with any suspected personal data breach and will notify you of any personal data breach, the steps we have taken to remedy it, and the security measures applied to render your personal data unintelligible to unauthorised parties.

8.2 All suspected breaches of personal data will be investigated and remedied within one (1) month from the date the breach is reported.

8.3 If you know or suspect that a personal data breach has occurred, please contact our team immediately at admin@legalifyattorneys.com.

8.4 Legalify Attorneys will not be responsible for any personal data breach which occurs as a result of: (a) an event beyond the control of Legalify Attorneys; (b) an act or threat of terrorism; (c) an act of God (including but not limited to fires, explosions, earthquakes, drought, tidal waves, and floods) which compromises our data protection measures; (d) war, hostilities (declared or not), invasion, act of foreign enemies, mobilisation, requisition, or embargo; (e) rebellion, revolution, insurrection, military or usurped power, or civil war which compromises our data protection measures; (f) the transfer of your personal data to a third party on your instructions; or (g) the use of your personal data by a third party designated by you.

9. How to Contact Us

For any enquiries in relation to this Privacy Policy, please contact our Data Protection Officer at admin@legalifyattorneys.com.

10. Website Visitors, Enquiries and Our Newsletter

10.1 Who is responsible. Legalify Attorneys, No. 3 Mwanza Close, Off Abidjan Street, Zone 3, Abuja, Nigeria, is the data controller for personal data collected through this website. Our Data Protection Officer can be reached at admin@legalifyattorneys.com.

10.2 Newsletter. If you subscribe, we collect your email address and, where you provide them, your first and last name. We use a double opt-in: we send you one email containing a personal link, and you are added to our mailing list only when you click it. If you do not confirm, we send up to two reminders and then delete your request after 30 days. We also keep, in pseudonymised (hashed) form, technical information such as a hashed IP address and the version of the consent wording you saw, so that we can demonstrate your consent and protect the form against abuse. Every message contains an unsubscribe link.

10.3 Enquiries. If you contact us through a form or by email, we use the details you provide to respond to you and, where you become a client, to provide our services.

10.4 Security checks. To keep our forms free of automated abuse, we apply checks such as rate limiting and hidden-field tests. These process your IP address in hashed form and are not used to profile you.

10.5 Cookies and similar technologies. Optional analytics cookies are used only if you accept them in the cookie banner. See our Cookie Policy. You can change your choice at any time through the “Cookie settings” button on every page.

10.6 Children. This website is not directed at persons under 18 and we do not knowingly collect their personal data.

11. Lawful Bases, Retention and Transfers

11.1 Lawful bases. Under the Nigeria Data Protection Act 2023 (“NDPA”) and, where it applies to you, the EU or UK General Data Protection Regulation (“GDPR”), we rely on: your consent (newsletter, optional analytics cookies); steps taken at your request before entering into an engagement, and performance of a contract (client services); compliance with legal obligations (for example professional, anti-money-laundering and tax obligations); and our legitimate interests in responding to enquiries and securing our website, where these are not overridden by your rights.

11.2 Retention. We keep newsletter details until you unsubscribe or ask us to erase them; unconfirmed newsletter requests for no more than 30 days; enquiry correspondence for as long as needed to deal with it and for any period required by law or professional rules; and client files for the periods required by law and professional regulation.

11.3 Service providers and transfers. We use trusted providers to host our website, deliver email and, only if you consent, measure website usage (Google Analytics). Some of these providers may process data outside Nigeria. Where personal data is transferred across borders, we do so only where the NDPA permits it, for example where adequate protection exists or appropriate safeguards are in place.

12. Your Rights

12.1 Subject to the NDPA and, where it applies, the GDPR, you have the right to: be informed about how your data is used; access your personal data; have inaccurate data corrected; have your data erased; restrict or object to processing, including processing for direct marketing; receive your data in a portable format; and withdraw your consent at any time, without affecting processing that took place before withdrawal. You also have the right not to be subject to a decision based solely on automated processing that significantly affects you; we do not take such decisions.

12.2 To exercise any right, write to admin@legalifyattorneys.com. We will respond within the period required by law, normally within one (1) month. We may need to verify your identity first. Newsletter subscribers can unsubscribe at any time through the link in every email.

12.3 Complaints. If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or, if you are in the European Economic Area or United Kingdom, to your local supervisory authority.