Altivor Consult Legal (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use and protect personal data that you provide to us when you visit our website and submit an enquiry through our contact form.
This Policy applies to personal data collected through the contact form on this website. It does not apply to data collected through other means or in the context of an established client relationship, which will be governed by a separate engagement letter or retainer agreement.
Please read this Policy carefully. If you have any questions, please contact us using the details in Section 1.3 below.
1Important information and who we are
1.1. Purpose of this Privacy Policy
This Privacy Policy (the “Policy”) explains how Altivor Consult Legal collects and processes personal data when you visit this website and submit an enquiry through our contact form. The personal data we collect through this website is used solely for the purpose of receiving and responding to legal service enquiries.
This website is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through this website, please contact us immediately so that we can delete it.
1.2. Who we are
Altivor Consult Legal is the data controller responsible for your personal data collected through this website. As a data controller, we determine the purposes for which and the manner in which your personal data is processed.
1.3. Contact details
If you have any questions about this Policy or wish to exercise your rights under it, please contact us as follows:
1.4. Supervisory authority
You have the right to make a complaint at any time to the Nigeria Data Protection Commission (NDPC), the Nigerian regulator for data protection matters. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the opportunity to address your concerns before you approach any of the authorities. Please contact us in the first instance.
1.5. Changes to the Policy
We review this Policy regularly to ensure it remains accurate and up to date. We will notify you of any material changes by posting the updated Policy on this website with a revised "Last updated" date. We encourage you to check this page periodically.
2Collection of data
Personal data means any information by which an individual can be identified, directly or indirectly. It does not include anonymised data from which the individual can no longer be identified.
When you submit an enquiry through our contact form, we collect the following categories of personal data:
Identity Data
First name and last name provided in the contact submission form.
Contact Data
Email address and telephone number to facilitate direct communication.
Professional Data
Company, organisation, or business entity name (if provided).
Enquiry Data
Nature of the legal matter, practice area, and content of the message submitted.
The content of your message may contain sensitive information about your personal or commercial circumstances. We treat all enquiry data with the same confidentiality we apply to all client and prospective client communications, consistent with our professional obligations as legal practitioners.
We do not collect any special categories of personal data (such as data about racial or ethnic origin, health, religious beliefs or criminal convictions) through this website. Please do not include such information in your enquiry message. If you nonetheless include special category or criminal offence data in your enquiry, we will process it solely for the purpose of assessing and responding to your enquiry, and where necessary for the establishment, exercise or defence of legal claims.
3How we collect personal data
We collect personal data through one channel only: the contact form on this website. We do not collect personal data through cookies, tracking technologies, newsletter sign-ups, analytics identifiers or any other means on this website.
We collect your personal data only when you actively and voluntarily complete and submit the contact form. You are not required to submit the form to visit or browse this website.
Providing your personal data through the contact form is voluntary. However, if you do not provide your name and contact details, we will not be able to process or respond to your enquiry.
4Use of personal data
4.1. Legal Basis
The law requires us to have a legal basis for collecting and using your personal data. We rely on the following lawful bases in connection with contact form data:
- Legitimate interests: We have a legitimate interest in receiving and responding to enquiries submitted through our website. Our processing of your contact form data is necessary for this purpose and does not override your interests, rights or freedoms. Specifically, our legitimate interests are: (a) to receive and respond to prospective client enquiries; (b) to manage our professional obligations as legal practitioners; and (c) to maintain records of communications in accordance with our professional and regulatory requirements.
- Legal obligation: In certain circumstances, we may be required to process or retain your personal data to comply with applicable legal or regulatory obligations, including our obligations under Nigerian anti-money laundering legislation, professional conduct rules and court orders.
- Consent: Where we specifically ask for your consent to use your personal data for a particular purpose (for example, if we introduce a newsletter or mailing list in the future), we will only process your data for that purpose where you have given clear, active consent.
4.2. Purposes for which we will use your personal data
We use the personal data collected through the contact form for the following specific purposes only:
| Purpose / Use | Type of Data | Lawful Basis |
|---|---|---|
| To receive your enquiry and understand the nature of the legal matter you have raised | Identity Data Contact Data Professional Data Enquiry Data | Legitimate interests |
| To respond to your enquiry, including to assess whether and how we can assist you | Identity Data Contact Data Enquiry Data | Legitimate interests |
| To maintain a record of pre-engagement communications, consistent with our professional and regulatory obligations as legal practitioners | Identity Data Contact Data Enquiry Data | Legitimate interests |
| To comply with applicable legal, regulatory or court-ordered requirements | All categories as required | Legal obligation |
4.3. What we will not do with your data
We will not:
- Use your personal data for marketing purposes without your explicit consent;
- Sell, rent or otherwise transfer your personal data to third parties for their own commercial purposes;
- Use your personal data to make automated decisions that have a legal or similarly significant effect on you;
- Use your personal data for any purpose incompatible with the purposes set out in Section 4.2 above without first notifying you and identifying the applicable lawful basis.
4.4. Change of purpose
If we need to use your personal data for a purpose that is unrelated to the original purpose for which it was collected, we will notify you of the new purpose and the legal basis for the new use before any such processing begins.
5Disclosures of your personal data
We treat your personal data with the same duty of confidentiality that applies to our professional legal obligations. We do not share your personal data with third parties except in the following limited circumstances:
- Service providers: We may share your data with trusted third-party service providers who assist us in operating our website and managing communications (for example, email delivery or form submission services). These providers act as data processors and are contractually required to process your data only on our instructions and in accordance with applicable data protection law.
- Professional advisers: We may share your data with professional advisers such as accountants or insurers where necessary for our business operations, subject to confidentiality obligations.
- Regulatory and legal authorities: We may disclose your personal data where required to do so by law, court order, or regulatory authority, including the Nigeria Data Protection Commission, the Nigerian Bar Association, or other bodies with lawful authority to request such disclosure.
We do not transfer your personal data to any third party for marketing, advertising or commercial purposes.
6International transfers of personal data
Your personal data may be transferred to or processed in countries outside Nigeria in the following circumstances:
- Where we use third-party service providers (such as form submission or email delivery platforms) whose servers or processing infrastructure are located outside Nigeria.
- Where we use cloud-based tools or software services hosted outside Nigeria to store or process communications.
Where personal data is transferred outside Nigeria, we ensure that appropriate safeguards are in place consistent with the requirements of the NDPA 2023. Such safeguards may include:
- Transfers to countries or organisations that the NDPC has determined provide an adequate level of protection;
- Standard data protection clauses approved or adopted by the NDPC;
- Contractual terms with third-party recipients that impose data protection obligations equivalent to those applicable in Nigeria.
Where personal data of individuals in the European Economic Area or United Kingdom is transferred outside Nigeria, we rely on adequacy decisions of the European Commission/UK authorities, or Standard Contractual Clauses adopted by the European Commission, as applicable.
Please contact us if you wish to obtain further information about the specific safeguards we apply to international transfers.
7Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:
- Encrypted transmission of data submitted through the contact form using HTTPS (Secure Sockets Layer / Transport Layer Security);
- Restricted access to enquiry data, limited to authorised personnel within Altivor Consult Legal who have a legitimate need to process it;
- Confidentiality obligations binding all personnel who handle personal data;
- Periodic review of our data handling practices and security measures.
Where we use third-party service providers to handle any aspect of data transmission or storage, we require those providers to implement equivalent security standards.
8Data retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any applicable legal, regulatory or professional obligation.
We may anonymise your personal data at the end of the applicable retention period, in which case the anonymised data may be retained for internal record-keeping purposes without further notice to you. Anonymised data cannot be used to identify you and does not constitute personal data.
9Your legal rights
Under the Nigeria Data Protection Act 2023, you have the following statutory rights in relation to your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you and to receive information about how we process it (Subject Access Request).
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data where it is no longer necessary or where you have withdrawn consent, subject to legal obligations.
Right to Restriction
You have the right to request that we restrict processing in certain circumstances, such as when you contest its accuracy or processing legality.
Right to Object
You have the right to object to processing where we rely on legitimate interests, unless we demonstrate compelling legitimate grounds.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used machine-readable format where processing is automated.
Right to Withdraw Consent
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Complain
You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local EEA/UK supervisory authority.
To exercise any of the rights set out above, please contact us using the details in Section 1.3 (info@altivorconsult.com).
We will respond to all legitimate requests within one month. Where requests are complex or numerous, we may extend this period by a further two months and will notify you accordingly. We may need to verify your identity before processing your request. There is ordinarily no fee for exercising your rights; however, we may charge a reasonable fee or decline to respond where requests are manifestly unfounded or excessive.
10Glossary
Data Controller
A person or organisation that determines the purposes for which and the manner in which personal data is processed. Altivor Consult Legal is the data controller for the personal data collected through this website.
Data Processor
A person or organisation that processes personal data on behalf of the data controller, acting on the controller's instructions.
NDPA 2023
The Nigeria Data Protection Act 2023, the primary legislation governing the processing of personal data in Nigeria.
NDPC
The Nigeria Data Protection Commission, the regulatory authority established under the NDPA 2023 to oversee data protection compliance in Nigeria.
Personal Data
Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier.
Processing
Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure or deletion.
Legitimate Interests
A lawful basis for processing personal data under the NDPA 2023 where the processing is necessary for the purposes of the legitimate interests pursued by the controller, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Need Legal Advisory or Have Questions?
Contact our legal team directly to discuss your commercial or personal legal matters.