Privacy Policy
Lawberon Legals & Co. (“we,” “us,” “our,” or “the Firm”) is committed to protecting the personal data of everyone who visits our website, downloads our resources, or contacts us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and its General Application and Implementation Directive (GAID 2025).
1. Who We Are
Lawberon Legals & Co. is a full-service commercial law firm based at No. 12 Thomas Laniyan Street, Anthony, Lagos State, Nigeria. For the purposes of the NDPA, we are the Data Controller in respect of personal data collected through this website, lawberonlegals.com.
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
- Email: info@lawberonlegals.com
- Address: No. 12 Thomas Laniyan Street, Anthony, Lagos State, Nigeria
2. What Personal Data We Collect
We collect personal data in the following ways when you interact with our website:
| How we collect it | Personal data collected |
|---|---|
| Downloading a free resource (checklist, guide, or template) | Your email address, and where requested, your name |
| Contacting us via a form, email, or phone | Your name, email address, phone number, and the content of your message or enquiry |
| Booking a consultation | Your name, email address, phone number, and any information you provide about your legal matter |
| Browsing our website | Technical data such as IP address, browser type, pages visited, and time spent on the site, collected via cookies and analytics tools (see Section 7) |
| Subscribing to email updates | Your email address and your marketing consent preference |
3. Why We Collect Your Personal Data (Lawful Basis)
Under the NDPA, we must have a lawful basis for every way we process personal data. We rely on the following bases:
- Consent — where you actively opt in to receive marketing emails, newsletters, or legal updates from us. You can withdraw this consent at any time (see Section 6).
- Legitimate interest — where we respond to an enquiry you have raised, or where we send you the specific resource you requested (for example, delivering a checklist you downloaded).
- Contractual necessity — where processing your data is necessary to provide legal services you have engaged us for.
- Legal obligation — where we are required to retain certain records under Nigerian law, including anti-money laundering and client due diligence obligations applicable to law firms.
We use your personal data specifically to:
- Deliver the resource, checklist, or guide you requested
- Respond to enquiries and provide requested information about our services
- Send legal updates, articles, and insights where you have consented to receive them
- Improve our website and content based on aggregated, anonymised usage patterns
- Comply with our own regulatory and legal obligations
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
4. Email Marketing and Automated Communications
If you download a free resource from our website or otherwise provide your email address, we may enrol you in an automated email sequence relevant to the topic you engaged with. These emails may include follow-up insights, related articles, and — after a period of time — an invitation to book a consultation with our team.
We only send marketing emails to people who have given explicit, affirmative consent by checking the relevant consent box at the point of collection. We do not pre-tick consent boxes on your behalf. Every marketing email we send includes a clear, one-click unsubscribe link.
We use MailerLite as our email service provider to manage these communications. Your email address and any related engagement data (such as whether you opened an email) is processed by MailerLite on our behalf, under a data processing arrangement consistent with NDPA requirements.
5. How We Share Your Data
We may share your personal data with the following categories of third parties, strictly limited to what is necessary for the purposes described in this Policy:
- Service providers who support our operations, including our email marketing platform (MailerLite), website hosting provider, and scheduling tools used to book consultations. Each provider is contractually required to protect your data and use it only for the purpose we specify.
- Regulatory or law enforcement authorities where required by law, court order, or legal process.
- Professional advisers, such as auditors, where necessary for our own compliance and only under confidentiality obligations.
We do not transfer your personal data outside Nigeria except where a lawful transfer mechanism exists under Section 41 of the NDPA — such as a data processing agreement with adequate safeguards, or your explicit consent to the transfer.
6. Your Rights Under the NDPA
As a data subject, you have the following rights in relation to your personal data:
| Right | What it means |
|---|---|
| Right to access | You can request a copy of the personal data we hold about you |
| Right to rectification | You can ask us to correct inaccurate or incomplete data |
| Right to erasure | You can ask us to delete your personal data, subject to any legal retention obligations we may have |
| Right to withdraw consent | Where we rely on your consent, you can withdraw it at any time — this will not affect the lawfulness of processing before withdrawal |
| Right to object | You can object to your data being used for marketing purposes at any time |
| Right to data portability | Where applicable, you can request your data in a structured, commonly used format |
To exercise any of these rights, unsubscribe from marketing emails using the link in any email we send you, or contact us directly at info@lawberonlegals.com. We will respond to all requests within the timeframe required under the NDPA.
7. Cookies and Website Analytics
Our website uses cookies and similar tracking technologies to understand how visitors use our site and to improve the content and experience we provide. This may include analytics tools that collect information such as pages visited, time spent on the site, and general location (country/city level, not precise location).
You can control or disable cookies through your browser settings. Disabling cookies may affect certain website functionality but will not prevent you from accessing our published articles and resources.
8. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes it was collected, or as required by law. As a guide:
- Marketing contacts (email subscribers) — retained until you unsubscribe or request deletion, or until your address is inactive for an extended period, at which point we periodically clean our list
- Client and enquiry records — retained in accordance with our professional obligations as a law firm, including applicable limitation periods and regulatory record-keeping requirements
9. How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration, consistent with our obligations under the NDPA. This includes restricting access to personal data to authorised personnel, using reputable, security-conscious service providers, and reviewing our data handling practices as part of our own annual compliance obligations.
In the unlikely event of a data breach affecting your personal data, we will notify the Nigeria Data Protection Commission within 72 hours as required under Section 40 of the NDPA, and will notify you directly where the breach is likely to negatively affect your rights and interests.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. The “Last updated” date at the top of this page will always reflect the most recent version. We encourage you to review this page periodically.
11. Contact Us and Complaints
If you have questions, concerns, or wish to exercise any of your rights under this Policy, please contact us at:
- Email: info@lawberonlegals.com
- Address: No. 12 Thomas Laniyan Street, Anthony, Lagos State, Nigeria
If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) via ndpc.gov.ng.
Questions About How We Handle Data?
Lawberon Legals & Co. advises commercial clients across Lagos and Abuja on data protection, regulatory compliance, and the full spectrum of Nigerian commercial law — including helping other businesses build policies exactly like this one.
Contact our team at info@lawberonlegals.com.
