Skip to main content
DocketBack to Docket

Privacy Policy

Last updated: May 2026 · Effective: May 2026

1. Introduction

Calix Technologies Ltd (“Calix Technologies”, “we”, “us”) operates the Docket platform (“Platform”). We are committed to protecting your personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the regulations issued by the Nigeria Data Protection Commission (NDPC).

This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and your rights as a data subject.

2. Data Controller

Calix Technologies Ltd is the data controller responsible for your personal data. You can reach our Data Protection Officer at: [email protected]

3. Data We Collect

3.1 Information You Provide

  • Account information: Full name, email address, phone number, and role (Client or Counsel)
  • Client profile: Company name (optional), preferred jurisdictions
  • Counsel profile: NBA bar number, biography, practice areas, jurisdictions, years of experience, hourly rate range
  • Matter details: Descriptions of legal matters, documents uploaded, and communications with Counsel
  • Payment information: Processed by Paystack — we do not store card numbers or bank account details

3.2 Information Collected Automatically

  • Usage data: Pages visited, features used, actions taken on the Platform
  • Device information: Browser type, operating system, IP address, device identifiers
  • Cookies: Session cookies for authentication, preference cookies for settings (see Section 9)

3.3 Information From Third Parties

  • NBA verification: Confirmation of bar membership status for Counsel accounts
  • Paystack: Transaction status, payment confirmation, refund status

4. Legal Basis for Processing

Under the NDPA, we process your personal data on the following legal bases:

  • Consent (NDPA s.25): You provide explicit consent during registration and when submitting matter details. You may withdraw consent at any time, though this may affect your ability to use certain Platform features.
  • Contractual necessity (NDPA s.26): Processing is necessary to perform our contract with you (the Terms of Service), including facilitating engagements, processing payments, and managing disputes.
  • Legitimate interest (NDPA s.27): We process data for fraud prevention, platform security, and service improvement where this does not override your fundamental rights.
  • Legal obligation (NDPA s.28): We retain certain records as required by Nigerian tax law, anti-money laundering regulations, and other applicable legislation.

5. How We Use Your Data

  • To create and manage your account
  • To match Clients with Counsel based on practice area, jurisdiction, and availability
  • To facilitate secure communication between Clients and Counsel
  • To process payments through escrow, including TSF calculation and disbursement
  • To manage the dispute resolution process
  • To verify Counsel credentials against NBA and other regulatory records
  • To send transactional notifications (matter updates, payment confirmations, dispute notices)
  • To improve the Platform through aggregated, anonymised analytics
  • To comply with legal obligations and respond to lawful requests from authorities

6. Data Sharing

We share your personal data only in the following circumstances:

  • Between parties to an engagement: Clients and Counsel in the same matter can see each other's relevant profile information and matter communications.
  • Payment processor: Paystack processes all financial transactions. Paystack's privacy policy governs their use of payment data.
  • Service providers: Hosting (Hetzner), email (Resend), and monitoring services that process data on our behalf under data processing agreements.
  • Legal requirements: When required by Nigerian law, court order, or regulatory authority request.
  • Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

We do not sell your personal data to third parties. We do not share your data with advertisers.

7. Cross-Border Data Transfers

Your data may be processed on servers located outside Nigeria (our infrastructure is hosted on Hetzner servers in Europe). In accordance with NDPA s.43, we ensure that any cross-border transfer is subject to appropriate safeguards, including data processing agreements that require the recipient to maintain equivalent data protection standards.

8. Data Retention

  • Account data: Retained for the lifetime of your account plus 6 months after deletion request
  • Matter records: Retained for 6 years after matter completion (in accordance with the Limitation Act and tax record requirements)
  • Transaction records: Retained for 6 years (FIRS and anti-money laundering requirements)
  • Audit logs: Retained indefinitely for platform integrity (append-only, no deletion)
  • Usage analytics: Anonymised and aggregated within 90 days of collection

9. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Platform to function and do not require separate consent. We do not use advertising or tracking cookies. Analytics cookies, if implemented, will be clearly disclosed and require your explicit consent.

10. Your Rights Under NDPA

Under the Nigeria Data Protection Act 2023, you have the following rights:

  • Right of access (s.34): Request a copy of all personal data we hold about you
  • Right to rectification (s.35): Correct inaccurate or incomplete personal data
  • Right to erasure (s.36): Request deletion of your personal data, subject to our legal retention obligations
  • Right to restrict processing (s.37): Limit how we process your data in certain circumstances
  • Right to data portability (s.38): Receive your data in a structured, machine-readable format (JSON export available in your account settings)
  • Right to object (s.39): Object to processing based on legitimate interest
  • Right to withdraw consent (s.25): Withdraw consent at any time for processing based on consent

To exercise any of these rights, email us at [email protected] or use the data export feature in your account settings. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including: encryption in transit (TLS 1.3), encryption at rest, access controls with role-based permissions, audit logging of all administrative actions, regular security assessments, and incident response procedures.

12. Children

Docket is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete such data promptly.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC). You can also contact us first at [email protected] and we will endeavour to resolve your concern.

14. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email and by posting a notice on the Platform at least 14 days before the changes take effect.

15. Contact

Data Protection Officer: [email protected]

Calix Technologies Ltd
Lagos, Nigeria