Pivacy Policy

Privacy Policy for LexPath Uganda

Effective Date:  01/07/2025

1. Introduction

At LexPath Uganda (“LexPath,” “we,” “us,” or “our”), we recognize the importance of protecting your privacy and personal data. We are committed to upholding the highest standards of data protection in accordance with the Data Protection and Privacy Act, 2019 (DPPA) of Uganda and internationally accepted principles of data privacy. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website, use our legal services, interact with our mobile application (if any), or engage with us through any other medium.

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

2. Scope and Application

This Privacy Policy applies to:

Visitors to our website and social media platforms;

Clients and prospective clients;

Users of our online platforms, tools, or applications;

Partners, affiliates, and service providers;

Any individual who interacts with LexPath Uganda in any capacity.

By accessing our services, you accept and consent to the practices described in this policy.

3. Definitions

For the purposes of this policy:

Personal Data refers to any information relating to an identified or identifiable individual.

Data Subject is an individual whose personal data is collected, held, or processed by us.

Processing means any operation performed on personal data, such as collection, storage, use, disclosure, or destruction.

Consent means any freely given, specific, informed, and unambiguous indication of your wishes.

4. What Data We Collect

We collect and process various types of personal data, including but not limited to:

4.1 Information You Provide Directly:

Contact Information: Full name, email address, phone number, physical address.

Legal Information: Case details, documents, statements, or other information related to legal matters. Account Information: Login credentials, profile data, communication preferences.

Payment Data: Billing addresses, payment transaction records (excluding full card details unless processed securely).

4.2 Automatically Collected Data:

Device and Usage Data: IP address, browser type, device identifiers, operating system, and access times.

Cookies and Tracking Technologies: We use cookies to personalize your experience and gather analytics.

4.3 Sensitive Personal Data:

Where necessary and lawful, we may collect:

National ID/Passport numbers;

Biometric data (for identity verification purposes);

Health or criminal records (only where necessary for specific legal services and with explicit consent).

5. How We Use Your Information

LexPath Uganda uses the collected data for the following purposes:

Service Delivery: To provide you with legal services, case management, legal advice, consultations, or access to online tools.

Client Support: To respond to inquiries, resolve issues, and provide client support.

Legal Obligations: To comply with applicable laws, court orders, or lawful requests from regulatory authorities.

Communications: To send legal updates, newsletters, or promotional materials with your consent.

Security and Fraud Prevention: To ensure the integrity, confidentiality, and security of our systems and your data.

Business Operations: To analyze usage trends, improve service delivery, and develop new products or offerings.

6. Legal Basis for Processing

We rely on the following legal bases to process personal data:

Consent: Where you have given clear consent for us to process your personal data.

Contractual Necessity: Processing necessary for the performance of a contract or to take steps before entering into a contract.

Legal Obligation: Compliance with legal obligations under Ugandan or applicable foreign law.

Legitimate Interests: To protect our legitimate interests, provided your rights and freedoms do not override those interests.

7. How We Share Your Data

We do not sell your personal information. However, we may share it under specific circumstances, such as:

Authorized Personnel: Access is limited to staff who need the information to perform their duties.

Third-Party Service Providers: Trusted vendors who help us operate, such as IT providers, payment processors, or professional advisors.

Legal and Regulatory Authorities: Where required by law or to protect the rights and safety of LexPath or others.

Affiliates and Partners: For collaborative legal work, joint ventures, or research projects, with safeguards in place.

With Your Consent: In any other situation, we will ask for your explicit permission before sharing.

All third-party processors are required to comply with applicable data protection laws and sign Data Processing Agreements (DPAs) with us.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

Fulfilling legal or contractual obligations;

Complying with legal retention periods;

Resolving disputes and enforcing agreements.

Upon expiration of the retention period, data will be securely deleted, anonymized, or archived.

9. Your Rights as a Data Subject

Under the Data Protection and Privacy Act, 2019, and other relevant frameworks, you have the following rights:

Right to Access: You may request access to the personal data we hold about you.

Right to Rectification: You can request corrections to inaccurate or incomplete data.

Right to Erasure: You may request that we delete your data under certain conditions.

Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.

Right to Data Portability: You can request that we transfer your data to another service provider.

Right to Withdraw Consent: You can withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at:

LexPath Uganda – Data Protection Officer

Email: lexpath@gmail.com / info@lexpath.com

Phone: +256772731276

Physical Address: Makerere Hill Rd.

Website: www.lexpath.com

Attention: Data Protection Officer

We will respond within the timelines provided by applicable law.

10. Data Security

We implement technical and organizational measures to ensure your data is protected from:

Unauthorized access;

Accidental loss or destruction;

Data breaches or misuse.

These measures include:

Secure servers and encryption protocols;

Access controls and authentication mechanisms;

Regular audits, risk assessments, and staff training;

Incident response protocols in case of a breach.

11. International Data Transfers

Where we transfer personal data outside Uganda (e.g., for cloud storage, partner collaborations, or global legal work), we ensure appropriate safeguards are in place, such as:

Contracts with standard data protection clauses;

Transfers to countries deemed to have adequate data protection laws;

Explicit consent for data sharing outside Uganda.

12. Use of Cookies and Tracking

Our website uses cookies and similar technologies to:

Enhance user experience;

Analyze site traffic;

Remember your preferences;

Provide targeted content.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the website.

13. Children’s Privacy

LexPath Uganda does not knowingly collect personal data from individuals under the age of 18 without parental or guardian consent. If we become aware that we have inadvertently collected such data, we will delete it immediately.

14. Links to Third-Party Sites

Our website or services may contain links to external sites not operated by LexPath Uganda. We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review their privacy policies before providing any personal data.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. When we do, we will revise the "Effective Date" at the top and notify you through appropriate channels (e.g., website notice or email).

Continued use of our services after updates constitutes acceptance of the revised policy.

16. Contact Information

For any inquiries, complaints, or requests related to this Privacy Policy or your personal data, please contact:

LexPath Uganda – Data Protection Officer

Email: lexpath@gmail.com / info@lexpath.com

Phone: +256772731276

Physical Address: Makerere Hill Rd.

Website: www.lexpath. com

If you are not satisfied with our response, you may also lodge a complaint with the Personal Data Protection Office under the National Information Technology Authority - Uganda (NITA-U).

Thank you for trusting LexPath Uganda with your personal data. We are committed to upholding your privacy and ensuring transparency in everything we do.