Privacy Policy

This Privacy Policy explains how LNX Technologies Company Ltd ("LegitNexus", "we", "us" or "our") handles personal data in connection with the LegitNexus website and the LegitNexus Law Practice Management System ("LPMS"). We are committed to protecting personal data and processing it lawfully, fairly, and transparently.

Our role depends on the context in which data is processed:

• For visitors to our website (for example, when you submit a contact or demo request), LegitNexus acts as the data controller.
• For data that a law firm uploads into LPMS (Client Data), the firm is the data controller and LegitNexus acts as the data processor, processing that data on the firm’s documented instructions solely to provide the Service.

We process personal data in accordance with the Data Protection and Privacy Act, 2019 of Uganda, related regulations issued under Ugandan law, and applicable international best practices on data privacy.

Website visitors:

• Contact details you provide (such as name, email, phone, firm name) when you submit an enquiry or demo request.
• Message content you choose to send us.
• Basic technical and usage information collected through cookies and similar technologies.

LPMS platform (as processor, on behalf of the firm):

• Client identification and contact data.
• Case files, matters, and legal documents.
• Advocate-client communications and related records.
• Financial and billing records.
• Employee and user account data.
• Other data uploaded by the firm into LPMS.

We process personal data only for defined purposes, including:

• Providing, operating, and maintaining LPMS and the website.
• Responding to enquiries, demo requests, and support requests.
• Hosting and storing Client Data on behalf of firms.
• Security monitoring and protection of the Service.
• Complying with legal obligations.

We do not access, use, or disclose Client Data for any unrelated commercial purpose.

Where LegitNexus acts as a processor, the firm (as controller) is responsible for ensuring that personal data uploaded into LPMS is lawfully obtained, that all necessary consents are in place, and that its use of LPMS complies with applicable data protection obligations.

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction, including:

• Access controls and role-based permissions.
• Secure authentication systems.
• Encryption where appropriate.
• Secure, monitored cloud infrastructure.
• Backup and disaster recovery systems.

Access to Client Data is restricted to authorized personnel who require it for service delivery, maintenance, or support, and who are bound by confidentiality obligations.

We engage trusted third-party providers (for example, for cloud hosting, storage, and infrastructure) as sub-processors. We require such providers to be bound by data protection obligations equivalent to ours. We do not otherwise disclose personal data to third parties except where required by law or court order, or with consent.

Data may be stored or processed using secure cloud infrastructure that may be located outside Uganda. Where this occurs, we take steps to ensure the data continues to receive an adequate level of protection.

We retain personal data for as long as necessary to provide the Service and to comply with legal obligations. On termination of a subscription, a firm may request export of its Client Data within a reasonable period, after which data may be securely deleted unless retention is required by law.

Subject to applicable law, individuals may exercise rights in relation to their personal data, including the right of access, correction, deletion (where applicable), and restriction of processing. Where we act as processor, we will assist the relevant firm (as controller) in responding to such requests where technically feasible.

We recognize that LPMS may hold legally privileged information, including advocate-client communications and litigation materials. We treat such information with the highest level of confidentiality and do not access it except where strictly necessary for maintenance, troubleshooting, or legal compliance.

In the event of a confirmed data breach affecting personal data, we will notify the affected firm without undue delay, including the nature of the breach, the categories of data affected, likely consequences, and the measures taken or proposed to address it.

Our website uses cookies and similar technologies. For details, see our Cookie Policy.

We may update this Privacy Policy from time to time. Material changes will be communicated where reasonably practicable, and the effective date above will be updated.

For privacy questions or to exercise your rights, contact:

LNX Technologies Company Ltd
Registered office: P.O. Box 104843, Kawempe, Uganda
Email: info@legitnexus.com
Telephone: +256 700 986095 / +256 787 292442