Privacy Notice

01. Who We Are

LexMarke Advisory Limited is a multidisciplinary advisory and consulting company headquartered in Abuja, Nigeria.

For personal data processed for our own purposes, LexMarke Advisory Limited acts as the relevant data controller except where applicable law or the circumstances provide otherwise.

LexMarke Advisory Limited is separate from LexMarke LP.

02. Our Data-Protection Principles

We seek to process personal data:

• lawfully, fairly and transparently;
• for specified and legitimate purposes;
• only to the extent reasonably necessary;
• accurately;
• securely;
• for appropriate periods; and
• with accountability and respect for data-subject rights.

03. Information We May Collect

Depending upon the engagement, we may collect:

04. Why We Process Information

We may process personal data to:

• respond to enquiries;
• evaluate proposed engagements;
• perform conflict and risk checks;
• prepare proposals;
• establish consulting engagements;
• provide advisory services;
• conduct research and analysis;
• manage projects;
• communicate with clients;
• coordinate multidisciplinary teams;
• administer billing and payments;
• manage professional relationships;
• recruit personnel and Professionals;
• manage suppliers;
• protect systems and information;
• comply with applicable legal and regulatory obligations;
• investigate complaints or incidents;
• administer and improve our website and services; and
• establish, exercise or defend legal rights.

05. Lawful Bases

Depending upon the circumstances, processing may be based upon:

• consent;
• contractual necessity or steps taken at your request before entering a contract;
• compliance with legal obligations;
• vital interests where applicable;
• public interest where applicable; or
• legitimate interests where permitted and appropriately balanced.

Where sensitive personal data is processed, an appropriate additional condition will be considered.

06. Multidisciplinary Projects

Some engagements require contributions from several Professionals.

Access to information should be limited to persons whose participation reasonably requires it.

Being associated with LexMarke Advisory Limited does not automatically entitle every Professional to access every client or project file.

07. LexMarke LP

LexMarke LP is a separate Nigerian law firm.

Information provided to LexMarke Advisory Limited is not automatically shared with LexMarke LP.

An engagement with LexMarke Advisory Limited does not create a lawyer-client relationship with LexMarke LP.

Where a client requires legal services, an introduction may be made to LexMarke LP or another legal service provider where appropriate. Any legal engagement is separate.

Any information sharing will be handled in accordance with applicable law, confidentiality obligations and appropriate client arrangements.

08. Third Parties

Depending upon the engagement, information may be provided to:

• Professionals participating in the project;
• technology and cloud providers;
• accounting and administrative providers;
• professional advisers;
• insurers;
• regulators or government bodies where required;
• specialist consultants;
• contractors or vendors supporting an engagement; and
• other recipients authorized by the client or permitted by law.

We seek to limit disclosures to what is appropriate for the relevant purpose.

09. International Processing

Our technology-enabled model and international professional relationships may result in information being processed or accessed across borders.

Where international transfers occur, LexMarke Advisory Limited will seek to comply with applicable data-transfer requirements and implement appropriate safeguards.

10. Information Security

We use appropriate organizational and technical measures intended to protect personal data against unauthorized access, use, loss, alteration or disclosure.

Measures may include:

• access controls;
• authentication;
• secure cloud platforms;
• confidentiality obligations;
• cybersecurity controls;
• training;
• backups;
• incident-response processes; and
• role-based access.

No information system is completely immune from risk.

11. Retention

Personal data is retained only for periods reasonably appropriate to the purposes for which it was collected and applicable:

• legal obligations;
• contractual requirements;
• limitation periods;
• risk-management needs;
• project requirements; and
• legitimate business-record requirements.

Information that is no longer required may be deleted, destroyed or anonymized as appropriate.

12. Your Rights

Subject to applicable law, you may have rights to:

• receive information about processing;
• access your personal data;
• correct inaccurate information;
• request deletion where applicable;
• restrict processing;
• object to certain processing;
• withdraw consent where applicable;
• request portability where applicable;
• raise concerns regarding qualifying automated decision-making; and
• complain to the Nigeria Data Protection Commission.

13. Privacy Requests

Requests should be directed to:

LexMarke Advisory Limited Privacy Contact
Email: privacyadvisory@lexmarke.com

Identity verification may be required before certain requests are processed.

14. Marketing Communications

Where permitted, we may send professional updates, event information, publications and other communications.

Recipients may unsubscribe from optional marketing communications using the available unsubscribe mechanism or by contacting us.

15. AI and Digital Tools

LexMarke Advisory Limited may use approved digital and artificial-intelligence tools to support research, analysis, administration and service delivery.

Human Professionals remain responsible for professional work.

Personal, confidential or sensitive information should be processed through authorized systems subject to appropriate safeguards.

16. Children

Our website is not specifically directed to children.

Where an Advisory project legitimately involves information concerning children, appropriate safeguards will be applied in accordance with applicable law and the nature of the project.

17. External Websites

Links to third-party websites do not make LexMarke Advisory Limited responsible for those websites' privacy practices.

Users should review the relevant third-party privacy notices.

18. Complaints

Privacy concerns may first be raised with LexMarke Advisory Limited using the Privacy Contact above.

Data subjects may also lodge complaints with the Nigeria Data Protection Commission where applicable.

19. Changes to This Notice

This Notice may be updated periodically to reflect changes in law, technology, services or processing activities.

The current version will be published with its effective date.