Code & Clause LegalPolicies

Privacy Policy

Learn how Code & Clause collects, uses, and protects your personal information.

Effective date: March 1, 2025

Overview

Who We Are

Code and Clause Legal ("Code & Clause," "we," "our," or "us") is a registered legal consultancy and practice firm operated by Code and Clause LTD, with its registered office in Nigeria. We provide founder-first, technology-enabled legal support to startups, digital businesses, and growth-stage companies operating across borders.

We are committed to respecting and protecting the privacy of all individuals who interact with our services, whether online via our website, through consultations, or as part of our client engagements.

Purpose of This Privacy Policy

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data. It also outlines your rights regarding your personal data and how you can exercise them. Whether you're visiting our website, signing up for updates, booking a consultation, or using our services as a client, this policy is designed to help you make informed choices.

Scope of This Policy

This Privacy Policy applies to all data we collect from visitors, users, clients, and partners through our website www.codeclauselegal.com, communications, services, and third-party platforms we may use (such as email tools, Calendly, Cal.com, Paystack, Stripe etc). It applies regardless of whether you are based in Nigeria, the European Economic Area (EEA), the United Kingdom, or elsewhere.

Applicable Data Protection Laws

This Privacy Policy is designed to comply with the major data protection and privacy laws applicable to the jurisdictions where we operate or serve clients. These include:

  • The Nigeria Data Protection Regulation (NDPR), as issued by the Nigerian Data Protection Commission (NDPC)
  • The General Data Protection Regulation (GDPR), which governs the processing of personal data in the European Economic Area (EEA)
  • The UK General Data Protection Regulation (UK GDPR), which applies post-Brexit in the United Kingdom
  • The California Consumer Privacy Act (CCPA), which provides certain rights and protections to residents of California in the United States

NDPR Compliance Notice

Code & Clause Legal complies with the provisions of the Nigerian Data Protection Regulation (NDPR) as issued by the Nigerian Data Protection Commission (NDPC). This Privacy Policy is designed to align with NDPR requirements, including principles of lawful processing, data minimization, purpose limitation, and data subject rights as set out under applicable Nigerian data protection laws.

Other Jurisdictions: Code & Clause Legal may provide additional or supplementary privacy notices where required for certain products, services, or user categories. For example, this Privacy Policy does not apply to personal information we collect from employees, consultants, contractors, or job candidates such information is governed by a separate internal privacy policy.

You may request a printable copy of this Privacy Policy at any time by contacting us at privacy@codeclauselegal.com.

2. What Personal Data We Collect

We collect personal data to operate effectively, provide legal and consulting services, and offer a seamless experience on our website and related platforms. The type of information we collect depends on how you interact with us, whether you're browsing, scheduling a consultation, submitting a form, or using any of our legal tools.

Information You Provide to Us

You may voluntarily provide personal information when you:

  • Fill out contact or inquiry forms
  • Schedule a consultation
  • Subscribe to our newsletter
  • Request legal documents or services through our Quick Order Documents
  • Communicate with us by email, WhatsApp, Cal.com, Calendly, or other platforms

This information may include your full name, company or organization name, job title or professional role, email address, phone number, mailing or billing address, and preferred contact method. Depending on your interaction with us, we may also collect information about your industry, business registration details, jurisdiction of operation, and specific legal interests or service needs (such as startup law, IP protection, regulatory compliance, or contract drafting).

Information Collected Automatically

When you visit our website or interact with our online platforms, we automatically collect certain technical information through cookies, analytics tools (like Google Analytics), and similar technologies. This may include:

  • IP address and location data
  • Browser type and settings
  • Device identifiers
  • Referring/exit pages
  • Date/time stamps and usage data

This data helps us understand how visitors use our site and allows us to improve performance, security, and user experience. To learn more, please review our Cookie Policy which explains the types of cookies we use and your choices regarding cookies.

Information We Receive from Third Parties

We may receive information about you from trusted third-party platforms, such as:

  • Payment processors (e.g., PayPal, Credit Cards, Wire Transfer, Stripe or Paystack)
  • Scheduling tools (e.g., Cal.com, Zoom, Google Meet, Calendly)
  • Social media or professional platforms (e.g., LinkedIn, X, Facebook, Instagram, Reddit, Linktree, YouTube, TikTok)
  • Public sources or legal directories (where lawful)

We ensure these sources comply with applicable data protection laws before processing your data.

Sensitive or Special Category Data

Generally, we do not request or process sensitive personal data unless it is strictly necessary for providing legal services or compliance purposes, and only with your explicit consent or as otherwise permitted by law. This includes data such as government-issued IDs, health or biometric information, and legal matters involving racial, ethnic, or political data.

Children's Data

Our services and site are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that data has been collected from a child without appropriate consent, we will take steps to delete it as required by law.

Data Categories and Statutory Classifications

We have summarized the categories of personal information ("PI") that Code & Clause Legal may collect, the corresponding CCPA statutory categories, and the types of third parties to whom we disclose PI for a business purpose.

Personal Information (PI) We CollectCCPA Statutory CategoryGDPR / NDPR CategoryCategories of Third Parties
Contact Data (email, phone number, address)Identifiers (California Customer Records)Personal Data (Identifiable Contact Information)Affiliates, Service Providers, Third Parties Designated by You, Clients and Other Parties, Professional Advisors, Authorities and Others, Business Transferees, Business and Marketing Co-Sponsors
Demographic Data (gender, age, profession)Identifiers (California Customer Records)Personal Data (Profile Information) Special Category Data (where applicable under GDPR/NDPR)Same as above
Online Identifiers & Account Information (login credentials, IP address, device ID)IdentifiersOnline Identifiers (Technical Data)Same as above
Communications Data (emails, messages, contact forms)Identifiers, Commercial Information, California Consumer Records, Internet or Network InformationPersonal Data (Communication Records)Same as above
Payment & Transactional Data (billing details, bank transfers)Commercial Information, Financial Information, California Consumer RecordsFinancial Data, Transactional RecordsAffiliates, Service Providers, Clients and Other Parties, Professional Advisors, Authorities and Others, Business Transferees, Business and Marketing Co-Sponsors

Regional Privacy Notices

Notice to Users in China

This section applies to individuals located in the People's Republic of China and supplements our global Privacy Policy in accordance with China's Personal Information Protection Law (PIPL). In the event of conflict with other sections, this provision shall prevail.

Processing of Sensitive Personal Information

Some data we collect, such as payment and transactional records or dietary information (if submitted) may be considered Sensitive Personal Information under Chinese law. We process such data only as necessary for the purposes described in the How We Use Your Personal Data section and implement organizational, physical, and technical safeguards to protect your information.

Your Rights

You have the right to:

  • Access, correct, or delete your Personal Information
  • Withdraw consent at any time
  • Object or restrict processing
  • Obtain a copy of your data

To exercise your rights or raise concerns, email: privacy@codeclauselegal.com. We will verify your identity and respond promptly.

Notice to Users in Singapore

This section applies to individuals located in Singapore in accordance with the Personal Data Protection Act (PDPA) and supplements the rest of our Privacy Policy.

Your Rights

You may request:

  • Access to your Personal Data held by us
  • Information on how it has been used or disclosed within the past 12 months
  • Correction of your Personal Data (unless legally exempted)

To make a request or ask questions, email: privacy@codeclauselegal.com. We aim to respond within a reasonable time after confirming your identity.

Notice to Users in the UK and European Economic Area (EEA)

This section applies to users in the European Union (EU) and the United Kingdom (UK) and is aligned with the General Data Protection Regulation (GDPR) and UK GDPR.

Controller

Code & Clause Legal (a limited liability company registered in Nigeria) is the data controller of your personal data for the purposes of EU and UK data protection laws.

Legal Bases for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract (e.g., fulfilling consultation requests)
  • Compliance with legal obligations (e.g., tax or recordkeeping requirements)
  • Legitimate interests (e.g., improving services, responding to queries)
  • Consent (e.g., for marketing communications)
  • Vital interests (in rare cases where your safety is involved)

To contact our data protection lead or exercise any of your rights, email: privacy@codeclauselegal.com.

NDPR Lawful Basis for Processing

We process personal information in accordance with lawful bases under the NDPR, including consent, performance of a contract, legal obligation, protection of vital interests, and the legitimate interests pursued by Code & Clause Legal or a third party.

Processing PurposeCategories of Personal Information InvolvedLegal Basis for Processing
1. Service delivery and operationsContact Data, Demographic Data, Communications Data, Online Identifiers & Account Info, Payment & Transactional Data, Professional DataGDPR/UK GDPR/NDPR: Processing is necessary for the performance of a contract or to take pre-contractual steps at your request. CCPA: Business purpose.
2. Research and developmentAny and all data types relevant in the context (depending on usage patterns and service feedback)GDPR/UK GDPR/NDPR: Processing is based on our legitimate interests in improving services (Article 6(1)(f)). CCPA: Business purpose.
3. Platform integrity, compliance, and company protectionAll data categories as applicable for security, fraud detection, enforcing terms, audits, restructuringGDPR/UK GDPR/NDPR: Legitimate interest in protecting platform integrity and complying with contract/legal obligations. CCPA: Business purpose.
4. Marketing and advertisingContact Data, Demographic Data, Communications Data, Device Data, Internet Activity Data, Marketing DataGDPR/UK GDPR/NDPR: Based on consent where required, or legitimate interest (soft opt-in for B2B or existing clients). CCPA: Right to opt-out of "sale" if applicable.
5. Legal obligations and protectionAny and all data types relevant in the specific legal contextGDPR/UK GDPR/NDPR: Processing is necessary to comply with legal obligations or protect legal rights. CCPA: Business purpose and required disclosures.

4. How We Share Your Personal Data

At Code and Clause Legal, we do not sell your personal data. However, in the course of delivering our services to technology companies, startups, and users of our Site, we may share your data with trusted third parties in limited and lawful circumstances. We take data minimization and confidentiality seriously, and only disclose what is necessary for the purposes described in this Policy.

Service Providers and Processors

We engage vetted third-party service providers to support the operation of our Site, the delivery of legal services, and our internal business functions. These include:

  • Infrastructure and Hosting Providers (e.g., secure cloud platforms)
  • Communication Tools (e.g., email services, Calendly for scheduling)
  • Payment Processors (e.g., Stripe or similar services)
  • Analytics and Performance Tools (e.g., Google Analytics)

These third parties act as data "processors" under applicable law and are contractually bound to process your data only as instructed by us and in compliance with data protection laws.

Legal and Regulatory Disclosures

We may disclose your personal data if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or regulatory inquiries. We may also disclose information when necessary to:

  • Protect our rights, property, or legal interests
  • Detect, prevent, or address fraud or security issues
  • Enforce our Terms of Service or other agreements

No Sale of Personal Data (CCPA Statement)

We do not sell personal data as defined under the California Consumer Privacy Act (CCPA). We also do not knowingly "share" your data for targeted advertising purposes under CPRA definitions. If that ever changes, we will update this Policy and provide you with opt-out options as required by law.

International Transfers of Data

Given the global nature of digital legal services, your personal data may be transferred to and processed in countries outside your jurisdiction, including Nigeria, the United Kingdom, the European Economic Area, or the United States. When we do so, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, to ensure your data remains protected under applicable standards.

If you are based in the EEA, UK, or a country with specific data transfer requirements, you may contact us at privacy@codeclauselegal.com to learn more about these safeguards.

5. Use of Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files placed on your device when you visit or interact with a website. These files help us recognize your browser, remember your preferences, and enhance your experience across the Site.

Cookies can be session-based (deleted when you close your browser) or persistent (stored on your device until they expire or are deleted).

Types of Cookies We Use

On www.codeclauselegal.com, we may use the following categories of cookies and related tracking tools:

  • Strictly Necessary Cookies -- These are essential for the Site's core functionality, including security and session management.
  • Performance and Analytics Cookies -- These help us understand how visitors use our Site and services. We may use tools like Google Analytics or similar services, which collect anonymised usage data.
  • Functionality Cookies -- These enhance your experience by remembering preferences and custom settings (e.g., preferred language).
  • Third-Party Cookies -- We may embed third-party tools such as Calendly for scheduling, Stripe for payments, or social media plugins. These tools may set their own cookies according to their respective privacy and cookie policies.

Why We Use Cookies

Cookies help us:

  • Ensure the Site functions as intended
  • Improve the performance, design, and usability of our content
  • Understand user behavior for analytics and improvement
  • Enable integrations with trusted third-party services used by our users, especially founders and startup teams

We do not use cookies to serve targeted ads or to sell your data.

Cookie Consent and Control

When you first visit our Site, a cookie banner will inform you of our use of cookies and request your consent (where required by law, such as under GDPR, NDPR, or UK GDPR). You may manage your cookie preferences or withdraw your consent at any time by adjusting your browser settings or interacting with our cookie banner.

Please note that disabling certain cookies may limit your ability to use key features of the Site.

For a detailed overview of the specific cookies we use, their duration, purpose, and how you can manage them, please review our full Cookie Policy.

6. Your Privacy Rights

We believe that transparency and control over your personal data are essential. Depending on your location and the applicable privacy laws, like the General Data Protection Regulation (GDPR), Nigeria Data Protection Regulation (NDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA), you may be entitled to certain rights regarding your personal data.

Rights Under NDPR

If you are based in Nigeria or your personal data is processed within Nigeria, you have specific rights under the Nigerian Data Protection Regulation (NDPR):

  • Right to Access -- You have the right to request confirmation of whether we hold personal data about you, and to access that data, including details of how it is processed.
  • Right to Correction (Rectification) -- You may request that we correct any personal data that is inaccurate, incomplete, or misleading.
  • Right to Erasure (Right to Be Forgotten) -- You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis exists for processing.
  • Right to Data Portability -- You can request to receive a copy of your personal data in a commonly used, machine-readable format, and where feasible, request that we transfer your data directly to another data controller.
  • Right to Object to Processing -- You may object to the processing of your personal data where such processing is based on our legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent -- Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal.
  • Right to Lodge a Complaint -- You have the right to file a complaint with the Nigerian Data Protection Commission (NDPC) if you believe your rights under the NDPR have been violated. Visit https://ndpc.gov.ng for contact details and procedures.

Rights Under GDPR and UK GDPR

If you are based in the European Economic Area (EEA), or the United Kingdom, you may exercise the following rights:

  • Right to Access -- Request access to the personal data we hold about you.
  • Right to Rectification -- Ask us to correct inaccurate or incomplete personal information.
  • Right to Erasure -- Request deletion of your personal data where it is no longer needed or processed unlawfully (also known as the "right to be forgotten").
  • Right to Restrict Processing -- Request that we temporarily suspend processing of your data under certain circumstances.
  • Right to Data Portability -- Receive your data in a structured, commonly used, and machine-readable format, and request that we transfer it to another controller.
  • Right to Object -- Object to processing based on legitimate interests, including direct marketing.
  • Right Not to Be Subject to Automated Decision-Making -- You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Rights Under CCPA

If you are a California resident, the CCPA provides the following additional rights:

  • Right to Know -- You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete -- You can ask us to delete the personal data we have collected, subject to certain exceptions.
  • Right to Opt-Out of Sale -- We do not "sell" your personal data as defined under the CCPA. If that changes, we will update this Policy and provide a clear opt-out mechanism.
  • Right to Non-Discrimination -- You will not receive discriminatory treatment for exercising your privacy rights.

How to Exercise Your Rights

To make a privacy-related request, please contact us at:

Email: hello@codeclauselegal.com

Subject Line: "Privacy Request -- [Right You Wish to Exercise]"

We aim to respond to all valid requests within 30 days, or as otherwise required by applicable law. In some cases, we may need additional information to confirm your identity or clarify the scope of your request.

Identity Verification

For your safety and privacy, we may need to verify your identity before processing your request. This may involve confirming your email address, answering a security question, or providing supporting documentation.

Limitations on Rights

Your rights are not absolute. They may be limited, for example, if fulfilling your request would adversely affect another person's rights, conflict with legal obligations, or involve disproportionate effort. We will always explain any such limitations in our response.

7. Exercising Your Privacy Rights & How We Protect Your Data

At Code & Clause Legal, we take your privacy seriously and your rights even more so. Whether you're a client, platform user, or visitor browsing from Nigeria, the EU, California, or anywhere else, you deserve control over your personal data and confidence that it's handled with care.

Submitting a Privacy Request

If you wish to access, correct, delete, or restrict how we use your personal data, or exercise any other rights under GDPR, NDPR, or CCPA, you can reach us by:

Email: hello@codeclauselegal.com

Subject Line: "Privacy Request -- [Insert Right Being Exercised]"

Mail (if required): Code & Clause Legal, [Insert Office Address]

We're happy to assist you and will provide instructions tailored to the specific right you're exercising.

Identity Verification Process

To ensure your data doesn't fall into the wrong hands, we may need to verify your identity before processing your request. Depending on the sensitivity of your request and the nature of the data involved, verification may include:

  • Confirming the email address associated with your interactions
  • Requesting additional documentation
  • Verifying your authority (if you're acting on behalf of someone else or a company)

We'll use any identity verification information strictly for security and authentication purposes.

Response Time and Format

We aim to respond to valid privacy requests within 30 calendar days, or as otherwise required by applicable law. In complex cases or where we receive multiple concurrent requests, we may extend this period and will inform you promptly. Responses are typically sent via email, unless you request otherwise or your local law mandates a different format.

How We Protect Your Personal Data

We adopt a layered, proactive approach to security to help safeguard your personal data from unauthorized access, loss, misuse, or alteration.

Our security practices include:

  • Encryption of data in transit (TLS/SSL) and at rest (where applicable)
  • Access controls to restrict data visibility to authorized personnel only
  • Secure infrastructure powered by reputable third-party cloud providers
  • Regular monitoring for vulnerabilities and potential threats
  • Internal policies on confidentiality, privacy, and secure data handling

Whether you're submitting a legal intake form, scheduling a call, or using our Clause Library tools, your data is protected with industry-standard safeguards.

Breach Notification Protocol

In the unlikely event of a data breach that poses a high risk to your rights or freedoms, we will notify you and the appropriate supervisory authorities in accordance with applicable data protection laws (e.g., NDPR, GDPR, or CCPA timelines and requirements). We are committed to transparency and will provide timely updates, steps we are taking to mitigate harm, and advice on protective measures you can take.

Third-Party Security Standards

Our third-party service providers including payment processors (e.g., Stripe), scheduling tools (e.g., Cal.com, Google Meet, Zoom, Calendly), analytics platforms, and hosting services are selected based on their adherence to modern security standards and data protection compliance. Where we share your data with third parties (as outlined in Section 4), we ensure contractual safeguards are in place, including data processing agreements (DPAs) where required.

8. Data Retention

We don't keep your data longer than we need to. We believe in smart, minimal, and lawful data retention, aligned with the services we provide, the obligations we uphold, and the rights you retain.

How Long We Keep Your Information

We retain personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, including:

  • To provide you with our legal or consulting services
  • To comply with applicable legal, regulatory, accounting, or tax obligations
  • To resolve disputes, enforce our agreements, and protect our legal rights
  • Or as otherwise required or permitted under relevant data protection laws (e.g., GDPR, NDPR, CCPA)

For example, if you've engaged us for a one-off service or consultation, we may retain your contact and transaction records for several years in line with legal or professional obligations.

Criteria for Determining Retention Periods

The specific retention period for your personal data depends on several factors, including:

  • The type and sensitivity of the data
  • The purpose for which the data was collected
  • Whether we have a continuing relationship with you (e.g., active retainer, support inquiries)
  • Legal or regulatory requirements (e.g., tax and financial laws)
  • The potential risk of harm from unauthorized use or disclosure

We periodically review our data holdings and securely dispose of or anonymize information no longer required.

Deletion or Anonymisation of Data

When your personal data is no longer needed, we will either:

  • Securely delete it from our systems; or
  • Anonymise it so that it can no longer identify you, and use it for analytics, service improvement, or research purposes where permitted

You may also request data deletion at any time, see Section 7 for how to exercise your rights. Please note that in some cases, we may need to retain certain information to comply with legal duties or contractual obligations.

9. Data Security and International Transfers

We understand that when you share personal information, you trust it will be kept safe, secure, and handled with care. Protecting your data is not only a legal obligation, it's a core part of our professional promise.

Our Security Measures

We implement a range of technical and organizational safeguards designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include:

  • Secure server environments and encrypted data storage
  • Role-based access controls and password protection
  • Firewalls, SSL/TLS encryption, and vulnerability monitoring
  • Periodic staff training and strict internal data handling protocols

While no security system is entirely foolproof, we regularly review and update our measures to stay aligned with industry best practices and applicable regulatory standards.

How You Can Help Keep Data Secure

Data protection is a shared responsibility. You can help by:

  • Using strong, unique passwords and changing them regularly
  • Keeping your device and browser software up to date
  • Avoiding public or insecure networks when accessing sensitive content
  • Alerting us immediately if you suspect unauthorized access to your Account or personal information

International Data Transfers

As a digital legal consultancy and legal tech solution outfit, some of our systems or third-party service providers may operate or store data in jurisdictions outside of your country of residence, including the United States, European Union, United Kingdom, and Nigeria. This means your personal data may be transferred to or processed in countries that may have different levels of data protection than your local law.

Safeguards for International Transfers

Where we transfer personal data internationally, especially from the EU/EEA, UK, or Nigeria, we take appropriate steps to ensure it remains protected. These safeguards may include:

  • Entering into contracts based on Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
  • Relying on adequacy decisions from relevant regulators
  • Implementing additional technical, legal, and organizational measures as needed

By using our Site or engaging our services, you acknowledge that your data may be transferred internationally and consent to those transfers, subject to applicable protections and rights under your jurisdiction.

Cross-Border Data Transfers

Code & Clause Legal is headquartered in Nigeria, and some of our service providers, technology partners, legal advisers, or other trusted data processors may be located in countries outside your jurisdiction including outside the European Economic Area (EEA), the United Kingdom (UK), or other regions with comprehensive data protection laws.

You may request further details about the international transfer mechanisms or obtain a copy of the applicable safeguards by contacting us at privacy@codeclauselegal.com.

10. Your Choices and Controls

We believe in transparency and giving you meaningful control over your personal data. Whether you're a startup founder accessing legal resources or a tech professional engaging our services, here's how you can manage the information we hold and how we communicate with you.

Marketing Emails and Communications

If you've opted in to receive legal insights, updates, or promotional content from us, you can opt out at any time. Each email will include a clear "unsubscribe" link you can click to stop receiving non-essential communications.

Please note: Even if you unsubscribe from marketing emails, we may still send you important administrative messages related to your account or ongoing service (such as consultations, invoice reminders, or policy updates).

Cookie Preferences

You can manage your cookie preferences directly from our Cookie Banner or by adjusting your browser settings. Depending on your location, you may have the ability to:

  • Accept or decline non-essential cookies
  • Opt out of analytics or tracking technologies
  • Review the types of cookies used on our platform via our Cookie Policy

Please note that disabling certain cookies may affect your experience or limit functionality on our Site.

Account Settings and Data Deletion

If you've created an account on our Site, you may view, update, or delete your information by accessing your account settings or contacting us at accounts@codeclauselegal.com. You may also request the deletion of your personal data under applicable data protection laws (e.g., GDPR, NDPR, or CCPA). In some cases, we may need to retain certain information for legal, regulatory, or contractual purposes, but we will always explain this clearly and transparently if applicable.

11. Third-Party Sites and Services

Our platform integrates with a number of third-party tools and services to deliver a seamless, modern experience for users, from scheduling consultations to processing payments. While we carefully select these partners, your interaction with third-party services is subject to their own privacy practices.

Platforms We Integrate With

To enhance your experience on the Code and Clause Legal platform, we may connect with trusted external services such as:

  • Calendly (for booking consultations)
  • Stripe or other payment processors (for secure payment handling)
  • WhatsApp or email services (for communication and updates)
  • Analytics providers (like Google Analytics, for understanding usage patterns)

These integrations are designed to support core service functionality and simplify your access to legal support, but they may collect or process data in ways beyond our direct control.

Links to External Sites and Third-Party Responsibilities

Our Site may also contain links to websites, services, or resources operated by third parties. Clicking on those links will take you to a different domain that may be governed by different privacy and security practices. We do not endorse or control the privacy policies or practices of third-party sites or services.

As such, we encourage you to review the privacy policies of any external platform you interact with, especially when sharing personal or payment information.

Your use of third-party tools is entirely at your discretion and subject to their respective terms of use and privacy notices. We are not liable for any loss, misuse, or unauthorized disclosure of your information resulting from your interaction with those platforms.

12. Children's Privacy

We are committed to protecting the privacy of minors, and our platform is not intended for use by individuals under certain age thresholds as defined by law.

Age Limits for Site Use

Our Site and services are not directed to, nor intended for use by, children under the age of 13 (or 16 in certain jurisdictions, including the UK and countries within the European Economic Area). If you are under the applicable age threshold, please do not use the Site or submit any personal information through it.

We do not knowingly collect, solicit, or store personal data from children below these age thresholds without verifiable parental consent, as required under applicable laws such as the Children's Online Privacy Protection Act (COPPA), GDPR, or Nigeria Data Protection Regulation (NDPR).

Parental Consent and Data Removal Requests

If we become aware that a child under the relevant age has submitted personal information without verified parental consent, we will promptly delete such data from our records.

If you are a parent or legal guardian and believe that your child has submitted personal data to us, you may contact us at privacy@codeclauselegal.com to request access, correction, or deletion of the information.

We encourage parents and guardians to actively monitor their children's online activities and to educate them on safe data practices.

13. Changes to This Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, legal requirements, or improvements to our services. Your continued use of our Site or services after any such changes constitutes your acceptance of the updated policy.

How We Update This Policy

We reserve the right to modify this Privacy Policy at any time. When we do, we will revise the "Last Updated" date at the top of the policy and post the updated version on our website at www.codeclauselegal.com.

Notification of Changes

If the changes are material such as involving new categories of data collected, a change in how we use personal data, or updates to your privacy rights, we will provide a more prominent notice. This may be via email (if you have an active relationship with us), a notification on our Site, or any other legally required method.

We encourage you to review this page periodically to stay informed about how we protect your data.

Date of Last Update

This Privacy Policy was last updated on 1st March 2025.

14. Contact Us

We value transparency and are committed to addressing any questions or concerns you may have about your personal data. If you'd like to make a request, lodge a complaint, or simply need more information about how we handle your data, here's how to reach us:

How to Contact Code & Clause Legal

If you have questions about this Privacy Policy or our data practices, please contact:

Code & Clause Legal

A Legal Consultancy operated by Code and Clause LTD

Email: privacy@codeclauselegal.com

Website: www.codeclauselegal.com

Office Address: [Insert Office Address]

You may also reach out to our data protection contact by email if you have specific concerns related to your personal data or wish to exercise your data subject rights.

Supervisory Authorities and Regulatory Contacts

Depending on your location, you have the right to lodge a complaint with the appropriate data protection authority:

  • Nigeria: Nigerian Data Protection Commission (NDPC) - https://ndpc.gov.ng
  • EU/EEA: Your local Data Protection Authority
  • UK: Information Commissioner's Office (ICO) - https://ico.org.uk
  • California: California Attorney General's Office

Complaints and Resolution

We take privacy complaints seriously. If you believe your personal data has been mishandled or processed in a way that violates your rights, we encourage you to contact us first. We will work to resolve your complaint fairly and promptly, typically within 30 days of receipt.