1. Data Controller

The KONGOLEX platform (website and mobile application) is operated by ILLUMINATION METAVERSE GROUP, an S.A.L.U company incorporated under OHADA company law and the legislation of the Democratic Republic of the Congo.

• Legal name: ILLUMINATION METAVERSE GROUP
• Legal form: S.A.L.U
• Registered office: Av. KABAMBARE, N° 195A, C. Lingwala, Kinshasa, DRC
• RCCM: CD/KNG/RCCM/25-B-02215
• ID. NAT: 01-J6100-N76066E
• Email: contact@revival-business.com
• Phone: +243 860 275 282
• Website: www.kongolex-online.com

2. Data We Collect

We collect personal data that you provide directly, together with data generated by your use of the platform.

• Identity data: first and last name, profile photo, date of birth, nationality, gender and identity documents (used for verification).
• Contact data: phone number, email address, physical address, country and city of residence.
• Professional data (lawyers and law firms): legal specialities, bar registration number, certifications, firm information, professional experience and supporting verification documents.
• Account and payment data: account details, billing information and payment transaction history.
• Communication data: messages and files you share, appointment and consultation records, and call metadata (participants, type, time and duration).
• Technical data: IP address, device type, operating system, browser and app version, connection and usage logs, and usage statistics.
• Location data: precise location (GPS coordinates) collected with your permission, for example to display nearby lawyers with the “Near Me” search.
• Community data: forum posts, comments, likes and bookmarks that you publish.

Audio and video calls are transmitted live between the participants through a third-party provider (Agora). KONGOLEX does not record call content.

3. How We Use Your Data

• provide and operate the platform services;
• connect users with lawyers and law firms;
• provide location-based features, such as showing nearby lawyers and the “Near Me” search;
• verify professionals (KYC / KYB);
• process payments for appointments and consultations;
• facilitate audio and video consultations;
• secure the platform and prevent fraud;
• send service and account notifications;
• provide customer support;
• personalise recommendations;
• improve the product and comply with legal obligations.

4. Verification and Compliance

We may carry out identity and professional verification procedures to strengthen the security, compliance and credibility of the platform, and to reduce the risk of impersonation, fraud and non-compliant use.

• Know Your Customer (KYC);
• Know Your Business (KYB);
• document verification;
• validation of professional licences (bar registration);
• anti-fraud controls and compliance checks.

5. Sharing of Data

We do not sell user personal data. We share data only when strictly necessary to operate the service or to comply with a legal obligation, including with:

• lawyers, law firms and service providers involved in a consultation;
• payment processors and related financial institutions, to complete payments that you initiate;
• Agora, which provides the audio and video call infrastructure;
• Pusher, which provides real-time in-app messaging and notifications;
• map and location service providers;
• hosting, storage, analytics and cybersecurity providers;
• competent authorities when the law requires it.

Card and bank details for payments are entered by you on the payment provider’s secured pages and are processed directly by those providers; KONGOLEX does not collect or store your full card details.

6. Data Retention

Personal data is kept no longer than reasonably necessary to provide the services and to meet legal, accounting, security and dispute-resolution requirements. Payment and verification records may be kept longer where the applicable legislation requires it or where a legitimate need for proof, security or litigation management justifies it.

7. Data Security

We apply reasonable technical, administrative and organisational measures to protect personal data against unauthorised access, loss, theft, disclosure, alteration and fraud, including encryption, firewalls, secure authentication, access controls, anti-fraud monitoring and secure backups.

8. Your Rights

Subject to applicable law, you have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data and closure of your account;
• object to or restrict certain processing;
• receive or transfer your data (portability);
• withdraw your consent at any time.

Deleting your account: you can ask us to permanently delete your account and related personal data at any time. We will process the deletion as soon as possible, subject to legal and regulatory retention obligations.

To exercise any of these rights, contact us using the details on this page.

9. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, secure the platform, remember preferences and analyse usage. You can manage most cookie settings through your browser or device settings, subject to technical limitations.

10. Third-Party Services

Certain features rely on third-party providers whose own privacy policies apply to their processing of your data, for example Agora for calls, payment processors, Pusher for real-time messaging and notifications, and map providers for location features. We encourage you to review their respective policies.

11. Minors

KONGOLEX is not intended for minors except with parental or legal authorisation, in accordance with applicable law. By using the service you declare that you have the legal capacity required to use the platform.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when published on the official website and in the application. You are encouraged to review this policy regularly.

13. Governing Law

This Privacy Policy is governed by the laws of the Democratic Republic of the Congo and the applicable OHADA Uniform Acts. In the event of a dispute, the competent courts of Kinshasa have exclusive jurisdiction, unless otherwise required by law.

14. Contact

For any question about this Privacy Policy or about the processing of your personal data, contact us by email at contact@revival-business.com, by phone at +243 860 275 282, or by post at Av. KABAMBARE, N° 195A, C. Lingwala, Kinshasa, DRC.

Last updated: 6 September 2026.