Privacy Policy

Effective Date: January 1, 2026. Last Updated: January 1, 2026

1. INTRODUCTION

Welcome to Techlex (“we,” “us,” or “our”). We are a premier technology startup law firm providing specialized legal services to the innovation ecosystem in Nigeria and beyond. At Techlex, we recognize the importance of privacy and the sensitivity of personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website, engage our legal services, or interact with us.

2. THE DATA WE COLLECT

We collect several types of information from and about users of our Site and clients:

  • Identity Data: Name, title, and profession.
  • Contact Data: Email address, telephone number, and physical/billing address.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
  • Professional/Business Data: Information regarding your startup, company registration details, and legal needs provided during consultations.
  • Usage Data: Information about how you use our website and services.

3. HOW WE COLLECT YOUR DATA

We use different methods to collect data from and about you, including:

  • Direct Interactions: You may give us your data by filling in forms on our Site, subscribing to our newsletter, or corresponding with us by post, phone, or email.
  • Automated Technologies: As you interact with our Site, we may automatically collect Technical Data about your equipment and browsing patterns via cookies and server logs.
  • Third Parties: We may receive information from public sources (e.g., CAC portals) or professional networking sites (e.g., LinkedIn).

4. LEGAL BASIS FOR PROCESSING

Under the NDPA 2023, we process your data only when we have a valid legal basis:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose.
  • Contract: Processing is necessary for the performance of a legal service contract with you.
  • Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation in Nigeria.
  • Legitimate Interest: Processing is necessary for our legitimate interests (e.g., improving our website or preventing fraud), provided your rights do not override those interests.

5. PURPOSE OF PROCESSING

We use your data to:

  • Provide legal advisory and startup-specific services.
  • Respond to inquiries submitted via the website.
  • Send legal updates, newsletters, and firm news (where consented to).
  • Maintain the security and integrity of our website.
  • Comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.

6. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, client files are retained for six (6) years following the conclusion of a matter, unless a longer period is required by law.

7. DATA SECURITY

We have implemented appropriate technical and organizational security measures (such as SSL encryption, firewalls, and access controls) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. In the event of a data breach, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours as required by the NDPA.

8. DISCLOSURE OF DATA

We may share your data with:

  • Internal Personnel: Authorized lawyers and administrative staff.
  • Service Providers: IT and system administration services.
  • Regulators: When required by the NDPC, CAC, or other law enforcement agencies.
  • Professional Advisers: Auditors, insurers, or bankers.

9. INTERNATIONAL TRANSFERS

As a tech-focused firm, we may use cloud-based tools that store data outside Nigeria. We ensure that any such transfer is compliant with Part VI of the NDPA 2023, ensuring the recipient country has adequate data protection laws or that standard contractual clauses are in place.

10. YOUR LEGAL RIGHTS

Under the NDPA 2023, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your data where there is no good reason for us to continue processing it.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing.
  • Right to Data Portability: Request the transfer of your data to you or a third party.
  • Right to Withdraw Consent: At any time where we are relying on consent.

11. COOKIES

Our website uses cookies to distinguish you from other users. You can set your browser to refuse all or some browser cookies, but this may cause some parts of the Site to function improperly.

12. THIRD-PARTY LINKS

Our Site may include links to third-party websites (e.g., social media). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in law or our data practices. We will notify you of any significant changes by posting the new policy on this page with a new "Effective Date."

14. CONTACT & COMPLAINTS

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

If you have concerns about how we handle your data, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).