Privacy Policy

Pandas LP ("we," "us," "our") is a CAC-registered law firm (Business Name BN 9646741) based in Lagos, Nigeria. This policy explains what personal data we collect when you use pandaslp.com.ng, why we collect it, and the rights you have over it under the Nigeria Data Protection Act 2023 ("NDPA").

1. What We Collect

When you use our site or start a case, we collect:

• Account information — your email address (used for magic-link sign-in, no password stored)
• Case details — whatever you tell our AI agent during the guided interview: names, amounts owed, dates, descriptions of the dispute, and any documents you upload (invoices, contracts, screenshots)
• Contact information — a callback phone number, if you provide one for a lawyer to reach you
• Payment information — processed directly by Paystack; we receive confirmation of payment and the amount, never your card or bank details
• Usage data — basic analytics (pages visited, which channel brought you to the site) via Google Analytics

2. Why We Collect It

We use your data to:

• Draft the legal document you've requested (a Letter of Demand, court filing, contract, etc.)
• Have a licensed lawyer on our team review that document before it's served or filed
• Serve or file documents on your behalf, where you've asked us to
• Contact you about the progress of your case
• Verify payment and issue confirmations
• Improve the site and understand which channels reach the people who need us

We do not sell your data, and we do not use it to train any third-party AI model beyond the single request needed to draft your document.

3. Who We Share It With

We share data only where necessary to provide the service:

• Anthropic (our AI provider) — receives the facts of your case to draft your document. Anthropic does not retain this to train its models.
• Paystack — processes your payment. We never see or store your card details.
• Supabase — our database and authentication provider, hosting your case data securely.
• The person you're pursuing a claim against — only to the extent your document itself is served on them, which is the whole point of the service.

We do not share your data with any other third party, and we do not sell it.

4. How Long We Keep It

We retain your case data for as long as your matter could reasonably still be relevant — including any period during which a debt or judgment remains legally enforceable — and in any event no longer than necessary to comply with our own professional and regulatory obligations as a law firm. You can request deletion earlier; see Section 6.

5. Security

Your data is encrypted in transit (HTTPS) and at rest by our database provider. Access to case data is restricted to you, and to Pandas LP staff who need it to work on your matter. Payment is never handled directly by us.

6. Your Rights Under the NDPA

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data, subject to our legal and professional retention obligations
• Object to certain uses of your data
• Withdraw consent where our use of your data relies on it

To exercise any of these rights, email pandaslegalpractitioners@gmail.com with your request. We'll respond within a reasonable time and in line with NDPA requirements.

7. Cookies & Analytics

We use Google Analytics to understand site usage. This does not identify you personally. We do not use tracking cookies for advertising.

8. Changes to This Policy

We may update this policy as our practice evolves. Material changes will be reflected here with an updated "last updated" date.

9. Contact

Questions about this policy or your data can be sent to pandaslegalpractitioners@gmail.com.