1. About This Notice
This Privacy Notice explains how LTP Solicitors ("we", "us", "our")
collects, uses, stores, and protects your personal data in
accordance with the Nigeria Data Protection Act 2023 (NDPA) and the
Nigeria Data Protection Regulation 2019 (NDPR), to the extent it
remains applicable.
We are committed to handling your personal data lawfully, fairly,
and transparently.
2. Who We Are
LTP Solicitors is a law firm registered in Nigeria, with principal
operations serving clients across Nigeria, including Lagos and Edo
State. We act as a Data Controller in respect of personal data we
process about you.
3. Personal Data We Collect
Depending on your interaction with us, we may collect the following
categories of personal data:
-
Identity data — your full name, title, and
occupation.
-
Contact data — email address, phone number,
and postal address.
-
Transaction and engagement data — details
of the legal services you requested, communications between us,
and billing information.
-
Sensitive personal data — where the nature
of your legal matter requires it, we may process data concerning
health, finances, family circumstances, or criminal matters. We
collect only what is strictly necessary for your matter.
-
Website usage data — IP address, browser
type, pages visited, and duration of visit, collected through
analytics tools.
We do not knowingly collect personal data from children under 18
without verifiable parental consent.
4. How We Collect Your Data
We collect personal data:
-
Directly from you, when you contact us by email, phone, or through
our website enquiry form.
-
From third parties such as referring lawyers, courts, regulatory
bodies, or counterparties in your legal matter, where permitted by
law.
5. Lawful Basis for Processing
Under the NDPA, we must have a lawful basis for processing your
personal data. Depending on the activity, we rely on one or more of
the following:
-
Contract — processing is necessary to
provide you with the legal services you have engaged us for.
-
Legal obligation — processing is required
to comply with our professional obligations under the Legal
Practitioners Act, the Rules of Professional Conduct for Legal
Practitioners, anti-money laundering laws (MLPA 2011, as amended),
and other applicable Nigerian law.
-
Legitimate interests — where we have a
legitimate interest in processing your data (for example, for
internal record-keeping, improving our services, or managing our
business relationships), and that interest is not overridden by
your rights and interests.
-
Consent — where we ask for and obtain your
explicit consent, for example to send you newsletters or legal
updates. You may withdraw consent at any time.
-
Vital interests — in exceptional
circumstances, where processing is necessary to protect your life
or the life of another person.
For sensitive personal data, we rely on the processing of data
necessary for the establishment, exercise, or defence of legal
claims (NDPA, Section 30), or with your explicit consent.
6. How We Use Your Personal Data
We use your personal data for the following purposes:
- To provide legal advice and representation.
-
To communicate with you about your matter and related services.
-
To comply with our legal and regulatory obligations, including
client due diligence (Know Your Client / Anti-Money Laundering
checks).
- To maintain our records and accounts.
-
To manage and improve our website and online communications.
-
To send you legal updates, event invitations, or newsletters,
where you have consented or we have a legitimate interest in doing
so.
We do not use your personal data for automated decision-making that
produces legal or similarly significant effects on you.
7. Sharing Your Personal Data
We treat your personal data with professional confidentiality. We
will only share your data in the following circumstances:
-
With courts, tribunals, regulators, or government agencies as
required by law or court order.
-
With opposing counsel, counterparties, or other professional
advisers where necessary for your matter and with your knowledge.
-
With third-party service providers who process data on our behalf
(for example, IT support, cloud storage, and accounting software
providers), under strict confidentiality and data processing
agreements.
-
With the Nigerian Bar Association or other professional regulatory
bodies as required by our professional obligations.
- Where you have given your consent to a specific disclosure.
We do not sell your personal data to any third party.
8. International Data Transfers
Where your data is transferred outside Nigeria (for example, to
cloud service providers with servers outside Nigeria), we ensure
that appropriate safeguards are in place in compliance with Section
43 of the NDPA, including standard contractual clauses or equivalent
protections approved by the Nigeria Data Protection Commission
(NDPC).
9. Data Retention
We retain your personal data only for as long as necessary for the
purpose for which it was collected, and in accordance with
applicable legal and professional obligations.
As a general guide:
-
Client matter files — retained for a
minimum of 6 years after conclusion of a matter, in line with the
Limitation Law and professional practice standards.
-
Accounting and billing records — retained
for 6 years in accordance with the Companies and Allied Matters
Act (CAMA) and tax obligations.
-
Marketing and communications data —
retained until you withdraw consent or opt out.
-
Website analytics data — retained for up to
12 months.
After the applicable retention period, data is securely deleted or
anonymised.
10. Your Rights Under the NDPA
The NDPA grants you the following rights in respect of your personal
data:
-
Right of access — you may request a copy of
the personal data we hold about you.
-
Right to rectification — you may ask us to
correct inaccurate or incomplete data.
-
Right to erasure — you may request deletion
of your data, subject to our legal and professional obligations to
retain it.
-
Right to restriction — you may ask us to
restrict processing in certain circumstances.
-
Right to object — you may object to
processing based on legitimate interests or for direct marketing
purposes.
-
Right to data portability — you may request
that we provide your data in a structured, machine-readable
format.
-
Right to withdraw consent — where
processing is based on consent, you may withdraw it at any time
without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at
ltpsolicitors@gmail.com. We will respond within 72 hours of acknowledging your request,
and complete the request within 30 days, in accordance with the
NDPA.
We may need to verify your identity before processing your request.
11. Data Security
We take reasonable and appropriate technical and organisational
measures to protect your personal data against unauthorised access,
loss, alteration, or disclosure. These include access controls,
encrypted communications, and confidentiality obligations on all
personnel.
Where a data breach occurs that is likely to result in a risk to
your rights and freedoms, we will notify the NDPC within 72 hours of
becoming aware of the breach, and notify you without undue delay
where required.
12. Complaints
If you have concerns about how we handle your personal data, please
contact us first at
info@ltpsolicitors.com.
If you remain unsatisfied, you have the right to lodge a complaint
with the Nigeria Data Protection Commission (NDPC):
13. Changes to This Notice
We may update this Privacy Notice from time to time to reflect
changes in law or our practices. The "Last Updated" date at the top
of this Notice will reflect the most recent version. We encourage
you to review this Notice periodically.