Privacy Notice

LexMarke LP is a Nigerian law firm headquartered in Abuja, Nigeria.

For personal data processed for our own purposes, LexMarke LP acts as the relevant data controller except where applicable law or the circumstances provide otherwise.

LexMarke LP is separate from LexMarke Advisory Limited.

An engagement or interaction with LexMarke LP does not automatically constitute an engagement or interaction with LexMarke Advisory Limited.

We seek to process personal data in a manner that is:

• lawful, fair and transparent;
• appropriate to specified and legitimate purposes;
• limited to information reasonably necessary for those purposes;
• accurate and appropriately maintained;
• retained only for as long as reasonably necessary or legally required;
• appropriately protected against unauthorized access, loss, disclosure, alteration or destruction; and
• handled with accountability and respect for applicable rights.

Depending upon your relationship with us, we may process information including:

We may obtain information:

• directly from you;
• from your authorized representatives;
• from clients or prospective clients;
• from counterparties and their representatives;
• from courts, tribunals, regulators and government agencies;
• from publicly available records;
• from professional advisers;
• from referral sources;
• through our website and technology systems; and
• from other lawful sources relevant to a professional engagement.

We may process personal data to:

• respond to enquiries;
• conduct conflict checks;
• determine whether we can accept an engagement;
• verify identity and conduct appropriate due diligence;
• provide legal services;
• communicate with clients;
• manage matters and deadlines;
• conduct research;
• prepare documents;
• communicate with courts, regulators, government bodies and third parties where appropriate;
• manage billing and payments;
• maintain professional records;
• comply with legal, regulatory and professional obligations;
• manage risk and professional insurance;
• investigate complaints or incidents;
• recruit and manage Professionals and personnel;
• protect our systems and information;
• improve our operations and service delivery;
• administer our website;
• provide publications or communications where appropriately requested or permitted; and
• establish, exercise or defend legal rights.

Depending upon the circumstances, our processing may rely upon one or more lawful bases recognized under applicable data-protection law, including:

• consent;
• performance of or steps connected with a contract;
• compliance with legal obligations;
• protection of vital interests where applicable;
• performance of a task carried out in the public interest where applicable; and
• legitimate interests where permitted and appropriately balanced against the rights and interests of the data subject.

Where sensitive personal data is processed, we will seek to ensure that an appropriate additional legal condition applies.

Consent is not necessarily the lawful basis for every processing activity.

Data protection obligations operate alongside the professional duties applicable to legal practitioners.

Information entrusted to LexMarke LP may also be protected by professional confidentiality, legal professional privilege or other legal protections where applicable.

Nothing in this Privacy Notice is intended to diminish those protections.

Access is limited according to role, professional responsibility and legitimate need.

Depending upon the matter, information may be accessible to:

• lawyers and other authorized LexMarke LP personnel;
• service providers supporting our technology, communications, records, accounting or administration;
• courts and tribunals;
• regulators and government agencies;
• experts, consultants or other Professionals properly involved in a matter;
• insurers and professional advisers;
• foreign or local counsel appropriately involved in a matter; and
• other recipients where disclosure is authorized, legally required or professionally appropriate.

We do not treat access to personal data as unrestricted merely because a person is associated with the LexMarke brand.

LexMarke Advisory Limited is a separate business.

Information supplied to LexMarke LP is not automatically shared with LexMarke Advisory Limited.

Where a matter may benefit from Advisory services, any disclosure or introduction will be handled in accordance with applicable legal and professional obligations and appropriate client arrangements.

An engagement with one entity does not automatically create an engagement with the other.

We may use reputable third-party providers for services including:

• cloud hosting;
• email and productivity systems;
• practice management;
• document management;
• accounting;
• cybersecurity;
• communications;
• website hosting;
• electronic signatures; and
• other professional or administrative functions.

Appropriate contractual, confidentiality and security measures should be used where required.

Our work and technology may occasionally involve processing or storage of information outside Nigeria.

Where personal data is transferred internationally, we seek to use lawful transfer mechanisms and appropriate safeguards as required by applicable data-protection law.

Cross-border professional collaboration does not create unrestricted access to client information.

We use organizational and technical measures designed to protect personal data.

These may include:

• access controls;
• role-based permissions;
• authentication controls;
• secure cloud systems;
• cybersecurity measures;
• confidentiality requirements;
• staff training;
• incident-response procedures;
• backups; and
• appropriate records-management controls.

No electronic system can, however, be guaranteed to be completely secure.

We retain personal data only for as long as reasonably necessary having regard to:

• the purpose for which it was collected;
• professional obligations;
• legal and regulatory requirements;
• limitation periods;
• contractual requirements;
• risk-management considerations;
• dispute or litigation requirements; and
• legitimate recordkeeping needs.

Different categories of records may therefore have different retention periods.

Where information is no longer required, it may be securely deleted, destroyed or anonymized as appropriate.

Subject to applicable law and any relevant professional or legal limitations, you may have rights concerning your personal data, including rights to:

• be informed about processing;
• request access;
• request correction of inaccurate information;
• request deletion where applicable;
• request restriction of processing;
• object to certain processing;
• withdraw consent where processing depends upon consent;
• request data portability where applicable;
• raise concerns regarding certain automated decision-making; and
• lodge a complaint with the Nigeria Data Protection Commission.

Some rights may be limited where information is protected by privilege, required by law, necessary for legal proceedings or subject to another lawful restriction.

Requests concerning personal data should be sent to:

We may need to verify your identity before responding to a request.

We will seek to address requests within the period required by applicable law.

If you have concerns about how LexMarke LP handles your personal data, we encourage you to contact us first so that the matter can be considered and, where appropriate, remedied.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission where applicable.

LexMarke LP does not operate its website specifically for children.

Legal matters may nevertheless require us to process information concerning children.

Where this occurs, such information will be handled with appropriate care and in accordance with applicable legal and professional requirements.

Where permitted, we may send publications, invitations, legal updates or other professional communications.

Where consent is the applicable basis, you may withdraw that consent.

Where an unsubscribe facility is provided, you may use it to stop receiving the relevant communications.

Client-service and administrative communications necessary for an existing engagement are different from optional marketing communications.

LexMarke LP may use technology and artificial-intelligence tools in appropriate circumstances to assist professional and administrative work.

We do not regard technology as a substitute for professional responsibility.

Where applicable law provides rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, those rights will be respected.

Confidential or personal information should only be processed through authorized systems subject to appropriate safeguards.

Our website may contain links to third-party websites.

LexMarke LP is not responsible for the privacy practices of independent websites.

Visitors should review the privacy information applicable to those websites.

We may update this Privacy Notice to reflect changes in:

• law;
• regulatory guidance;
• technology;
• our services; or
• our information-processing practices.

The current version and effective date will be published on our website.