Privacy Policy
How TR Thrive collects, uses, and protects personal data across jobs, public lawyer profiles, Law Gig, reviews, Pro Bono, ThriveAI, store, and more. Your rights under the Nigeria Data Protection Act 2023 (NDPA) and NDPR.
Overview
TR Thrive (“we”, “our”, “us”) is the data controller for personal data processed on trthrive.com. This includes jobs, events, scholarships, ThriveHire, Law Gig, public lawyer profiles (Thrive LegalSpace), law firm reviews, Pro Bono, the store, LAWDLE, Legal Connections, ThriveAI, professional verification, and advertising.
This Privacy Policy is written to comply with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR), and guidance of the Nigeria Data Protection Commission (NDPC). We apply the NDPA principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, storage limitation, integrity and confidentiality, and accountability.
By using the platform you acknowledge this policy. If you disagree, do not use our services. You may still exercise the rights in the “Your rights” section even if you stop using the platform.
Information we collect
Personal information
Account and profile data (name, email, phone, address, photograph), professional details (qualifications, bar or licence status, experience, CV, LinkedIn), professional verification filings (qualification type, qualification or enrolment number, and certificate files you upload for admin review), public lawyer profile fields you save for the directory (firm, location, jurisdictions, areas of law, languages, services, short bio, consultation links, and similar), job application materials, event registrations, scholarship applications, store orders, subscription and wallet data, and other documents you upload.
Usage information
Device and log data (IP, browser, identifiers), pages visited, job and event interactions, application status, store activity, gameplay engagement (LAWDLE, Legal Connections), and performance metrics.
Communications
Messages between users, support tickets, surveys, newsletters preferences, and platform notifications.
Sensitive and professional data
The NDPA treats some data as sensitive (for example health, religion, biometric identifiers, or data about a child). We do not require those categories for a public lawyer listing. Professional credentials (call to bar, enrolment or licence numbers, certificates) are professional records we process to verify that you may appear as a lawyer. Do not put client files, medical details, or other sensitive third-party data in a public bio, CV, or AI prompt.
Law Gig & Pro Bono
For Law Gig (orders marketplace) we collect order details, interest notes, offered prices, allocation and completion history, escrow and wallet transactions, chat messages, ratings, reviews, dispute records, and Pro Bono Partner status where enabled.
When you express interest in an order, the order creator may see profile information needed to evaluate you—including name, verification status, professional title, phone, address, education, LinkedIn, CV, member since, last login, and performance metrics from prior orders. Your email is not shown in the standard interest modal unless otherwise stated at allocation.
Pro Bono matters use the same infrastructure; participation is optional and controlled from your profile.
Public lawyer profiles (Thrive LegalSpace)
TR Thrive operates a public directory of lawyers at trthrive.com/lawyers, with individual pages at /lawyer/{name}. This feature is limited to accounts whose Professional Verification has been approved by an administrator as a lawyer. Non-lawyers cannot turn a public profile on. Anyone may search the directory; turning your listing off is always available from your dashboard Profile.
Default visibility after verification
When an administrator approves you as a lawyer, we create (or update) a public profile record and set it to live by default so Nigerians and other visitors can find you on the directory and, where indexed, via search engines. This default is how the service is designed to work after verification. You may turn the listing off at any time. If you turn it off, the public page and directory card are withdrawn; we keep the saved fields in your account so you can turn it on again later.
Under the NDPA, this default-on setting after you have asked to be verified as a lawyer is processed on the bases of contract (providing the directory service that verification unlocks) and legitimate interests (operating a findable professional directory for legal services in Nigeria and abroad). You have a right to object and to withdraw visibility by toggling the profile off. We will not treat a turned-off profile as public.
What the public can see
When your profile is live, visitors may see information you have saved for the public form, typically including: display name, professional title, photograph (or a unisex avatar if you have not uploaded one), law firm or organisation, location, jurisdictions, areas of law, years of experience, languages, qualifications you choose to publish, licence or registration text, services, short biography, consultation mode, starting price or availability if you enter them, and contact or booking URLs you provide. We may also show a “verified lawyer” badge.
We do not publish your private account email, phone number, or residential address on the public profile page unless you yourself put that information in a public field (for example a WhatsApp or booking link). Certificate files and qualification numbers submitted for admin verification stay in the verification workflow and are not shown on the public page.
Photographs and the Thrive mark
If you upload a profile photograph, it may appear on your public card and profile. If you have no photograph, we display a gender-neutral avatar. Directory cards may overlay the TR Thrive logo on the image area to identify the listing as part of our service. Do not upload images of other people without a lawful basis.
Search, filters, sitemaps, and search engines
Live profiles can be searched and filtered on the lawyers page (name, keywords, location, practice area, language, consultation mode, experience, firm, verified-only). We may include live profile URLs in our XML sitemap and use standard indexing tags so search engines such as Google can discover public pages. Indexing is not guaranteed and is not a ranking promise. Turning the profile off removes it from the directory and from new sitemap listings; search engines may take time to drop cached copies.
AI-assisted profile fill
If you use “Fill with AI”, we send your existing or newly uploaded CV to our AI provider solely to suggest public-profile fields. You must review those suggestions before saving. Do not upload a CV that contains another person’s confidential data or privileged client material. AI output is assistance only and is not legal advice.
Professional verification documents
To become a verified lawyer you may submit a qualification type, number, and certificate (image or PDF). Administrators review these files. We store them with access limited to verification and compliance staff, retain them for as long as needed to evidence the decision and meet legal duties, then delete or restrict them when no longer required. Rejected applications may be kept briefly for dispute handling and re-application.
Children
Public lawyer profiles and professional verification are for adults who are qualified to practise. We do not knowingly create public lawyer listings for persons under 18.
Law firm reviews
Reviews require a signed-in account for integrity, even when displayed anonymously to the public. We collect review text, ratings, reviewer type, moderation status, firm responses, claim/verification data for law firms, and reports or disputes.
Do not include confidential client information, privileged material, or settlement terms in reviews—see review guidelines.
ThriveAI & career tools
ThriveAI processes prompts and context you provide in chat to deliver assistance. CV generator, AI CV review, and “Fill with AI” on the public lawyer profile send documents or fields you choose to our AI processor (currently Google Gemini or a successor we name in-product) so we can return suggestions. That processing may occur on servers outside Nigeria. We use this data to provide the feature, improve quality, and prevent abuse—not to provide legal advice.
Do not submit client-confidential or privileged content into AI tools unless you have authority to do so. Suggested profile text is not published until you save it and, for the directory, until the listing is live.
Legal basis for processing
We process personal data under NDPA/NDPR on grounds including:
- Consent — e.g. marketing, non-essential cookies, optional AI tools, and some sensitive processing. You may withdraw consent; the service that depended on it may stop working.
- Contract — delivering services you request (account, jobs, orders, store, subscriptions, professional verification, and the public directory that verification unlocks)
- Legal obligation — tax, regulatory, court, or NDPC requirements
- Legitimate interests — security, fraud prevention, product improvement, operating a searchable professional directory after lawyer verification, and showing contextual advertising on public pages (balanced against your rights; you may object)
- Vital or public interest — where applicable in emergencies or regulatory cooperation
You may withdraw consent where processing is consent-based; some features may then be unavailable.
How we use information
- Operate core services: applications, events, orders, reviews, store, payments, ThriveHire pipelines, and the public lawyer directory
- Verify professional status and, for approved lawyers, publish a findable public profile unless you turn it off
- Match clients with legal professionals and run escrow until work is verified
- Moderate content and enforce Terms of Service
- Personalise recommendations, alerts, and communications (with consent where required)
- Improve platform performance, analytics, and AI-assisted features
- Provide customer support and resolve disputes
Security
We use encryption in transit, access controls, monitoring, backups, and staff training. Verification certificates and private account contacts are restricted to staff who need them for review or support. No system is perfectly secure—use strong passwords and report suspicious activity to legal@trthrive.com.
Breach notification
If a breach risks your rights, we will notify the Nigeria Data Protection Commission within 72 hours where required and inform affected users with recommended protective steps.
Your rights
Under the NDPA you may request: access to your personal data; rectification of inaccurate data; erasure where the Act allows; restriction of processing; data portability in a structured, commonly used format where processing is automated and based on consent or contract; and to object to processing based on legitimate interests (including objecting to a live public listing by turning the profile off, or by writing to us). You may also complain about automated decisions that produce legal or similarly significant effects; directory search and ranking filters are not used as solely automated decisions that grant or refuse a legal right.
Contact legal@trthrive.com. We aim to respond within one month, as required under the NDPA/NDPR, and may extend that period for complex requests after notifying you. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you are not satisfied.
Advertising & Google AdSense
We may display ads through Google AdSense on public pages, including news, blog, and the lawyers directory. Google and partners may use cookies to serve ads based on prior visits to our site and others. Opt out via Google Ads Settings or our cookie preferences. See the Cookie Policy for full detail. Advertisers do not receive your private account email or phone from us as part of a public profile listing.
Retention
We retain data only as long as needed for services, legal obligations, disputes, and legitimate business needs, then delete or anonymise it. Public profile fields remain while your listing is on, and in your account after you turn it off so you can republish. Verification certificates are kept for the life of the verification decision plus any period required for complaints, tax, or regulatory requests. Request deletion subject to those lawful retention limits.
Data Protection Officer
Our Data Protection Officer oversees NDPA/NDPR compliance and is the contact for data-subject requests, objections to a public listing, and complaints about this policy: legal@trthrive.com. You may also use the contact page.
Changes
Material changes will be notified at least 30 days in advance where practicable. Continued use after the effective date constitutes acceptance.
