Legal Professional Privilege Protection (Evidence Act 2011, Section 192)
Under Nigerian law, communications between a legal practitioner and their client are privileged and confidential. CaseSimpli is engineered with Zero-Trust Technical Safeguards: platform operators, developers, and support personnel have zero visibility into your privileged legal dossiers, intake briefs, or client correspondence.
1Statutory Demarcation: Data Controller vs. Data Processor
Under Section 65 of the Nigeria Data Protection Act (NDPA 2023):
Your law firm acts as the Data Controller for all client contact records, matter briefs, and consultation files. Your chambers determines the lawful purpose and retention of client information.
CaseSimpli acts strictly as a Data Processor. We process client intake, website bookings, and notification queues exclusively on behalf of and under the documented instruction of your subscribed law firm.
2Information We Collect & Process
We process personal and chambers data only to the extent necessary to deliver the CaseSimpli service:
- Practitioner Account Data: Practitioner name, official email, telephone number, firm name, CAC business registration, Supreme Court Roll number, and NBA branch affiliation.
- Client Intake & Booking Information: Prospective client name, email, phone number, matter category, opposing party names (for conflict checks), and scheduled appointment timestamps.
- Billing & Payout Details: Commercial bank account NUBAN numbers and settlement subaccount tokens processed securely via licensed payment gateways (Flutterwave & Paystack). We never store credit/debit card PINs or CVVs.
- Technical Telemetry: Anonymized server logs, error traces, and browser device types used strictly for performance optimization and cybersecurity incident mitigation.
3Cryptographic & Architectural Safeguards
CaseSimpli deploys sovereign, enterprise-grade security controls to safeguard chambers records:
PostgreSQL RLS ensures 100% cryptographic tenant isolation between firms.
TLS 1.3 in transit and AES-256 at rest across all databases and backups.
Chambers data is never used to train public generative AI or LLM models.
4Your Rights Under the Nigeria Data Protection Act
Under the NDPA 2023, data subjects (both legal practitioners and their clients) enjoy statutory rights including:
- Right of Access & Portability: You may request a complete export of your chambers data in standard structured format (CSV/JSON).
- Right to Rectification: You may correct inaccurate practitioner or client information directly through your Practice Hub settings.
- Right to Erasure ("Right to be Forgotten"): Upon account termination, you may request permanent deletion of your chambers workspace and associated records.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been handled unlawfully.
5Data Retention & Chambers Closure
CaseSimpli retains active chambers records for the duration of the firm's subscription. In the event of account cancellation or chambers dissolution, we retain an archived copy for 30 days to facilitate final data export, after which all tenant records are permanently expunged from production databases and automated backups.
6Data Protection Officer (DPO) Contact
To exercise your NDPA rights, submit a data privacy request, or report a suspected security concern:
Office of the Data Protection Officer
CaseSimpli Legal Tech Solutions Ltd
Email: [email protected]
Official DPO Inquiries: [email protected]