Privacy Notice

1. Introduction

Akin Ibidapo-Obe & Co ("AIO Law", "the Firm", "we", "us" or "our") is committed to protecting the privacy and personal data of individuals who visit our website or interact with us.

As a law firm, we recognise the importance of confidentiality, privacy and the responsible handling of personal information, particularly where such information relates to legal enquiries, prospective clients and sensitive legal matters.

This Privacy Notice explains how we collect, use, disclose and protect personal data obtained through our website, www.aiolawfirm.com, and related communications.

We process personal data in accordance with the Nigeria Data Protection Act 2023 ("NDPA"), the Nigeria Data Protection Act General Application and Implementation Directive 2025 ("GAID") and other applicable laws and professional obligations.

By using our website, you acknowledge that you have been provided with this Privacy Notice. Where consent is required for particular processing activities, we will obtain that consent separately.

2. Identity and Contact Details

For the purposes of applicable data protection legislation, Akin Ibidapo-Obe & Co acts as a data controller in respect of personal data collected through its website and processed for its own business purposes.

Organisation: Akin Ibidapo-Obe & Co (AIO Law)

Address: 2nd Floor, 140 Borno Way, Ebute Metta, Yaba, Lagos, Nigeria.

Website: https://www.aiolawfirm.com

Email: hello@aiolawfirm.com

Data Protection and Privacy Contact: hello@aiolawfirm.com

All enquiries relating to this Privacy Notice, including requests to exercise data protection rights, should be directed to the email address above.

3. Personal Data We Collect

We may collect personal data when you visit our website, complete our contact form, send us correspondence or otherwise communicate with the Firm.

The categories of personal data we may collect include:

a. Information provided directly by you

• Full name

• Email address

• Telephone number

• Organisation or company name, where applicable

• Details of your enquiry or the legal assistance requested

• Information contained in emails, correspondence or documents voluntarily provided to us

• Any other personal information you choose to share when communicating with the Firm

b. Information collected through website usage

Depending on the technologies deployed on our website, we may automatically collect:

• Internet Protocol (IP) address

• Browser type and version

• Device and operating system information

• Pages visited and website interaction information

• Date and time of access

• Cookies and similar technical identifiers

c. Information relating to legal enquiries

Where you contact us concerning a potential legal matter, the information you provide may include personal information relating to other individuals or sensitive personal data.

We process such information only where we have an appropriate lawful basis, including where necessary for obtaining legal advice, establishing, exercising or defending legal claims, or conducting legal proceedings, subject to applicable legal requirements.

We encourage visitors not to submit extensive confidential documents or highly sensitive information through general website enquiry forms unless reasonably necessary.

Submission of an enquiry does not, by itself, establish a lawyer-client relationship or mean that the Firm has agreed to act on your behalf.

4. Purposes and Lawful Bases for Processing

We collect and process personal data only for specified, legitimate and lawful purposes.

These purposes and their corresponding lawful bases include:

Where processing is based on legitimate interests, we will take account of your rights, freedoms and reasonable expectations.

Where we rely on consent, we will ensure that consent is freely given, specific, informed and unambiguous, as required by applicable law.

We do not use personal data collected through our website to conduct profiling or make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

We will not process your personal data for purposes incompatible with those for which it was collected, except where permitted by law.

5. Confidentiality of Legal Enquiries

As a law firm, we place particular importance on maintaining the confidentiality of information shared with us.

Information provided in connection with legal enquiries or professional engagements is handled in accordance with applicable legal, ethical and professional obligations, including duties of confidentiality and legal professional privilege where applicable.

Access to such information is limited to persons who have a legitimate need to access it in connection with the relevant enquiry, potential engagement, professional services or other authorised business activities.

We do not disclose confidential legal information to third parties except where authorised, required for the provision of legal services, permitted or required by law, or otherwise consistent with our professional obligations.

6. Cookies and Website Technologies

Our website may use cookies and similar technologies to support functionality, improve performance and understand how visitors interact with the website.

Cookies are small text files or similar identifiers that websites may place on your device.

Depending on the technologies deployed, our website may use:

Strictly Necessary Cookies: These support essential website functions, including security and basic site functionality.

Analytics Cookies: Where deployed, these help us understand website traffic, visitor behaviour and areas for improvement.

Functional Cookies: Where deployed, these enable the website to remember user preferences and improve the browsing experience.

We will obtain consent before deploying non-essential cookies or similar tracking technologies where required under applicable law.

Where non-essential cookies are used, visitors will be provided with appropriate information and the ability to accept, reject or manage such cookies.

You may also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

7. Disclosure of Personal Data

We may disclose personal data to third parties where reasonably necessary for the purposes described in this Notice and where such disclosure is lawful.

Recipients may include:

• Website hosting and technical service providers

• Email and business communication providers

• IT support and cybersecurity service providers

• Professional advisers and consultants subject to appropriate confidentiality obligations

• Courts, tribunals, regulatory authorities and law enforcement agencies, where disclosure is legally required or otherwise lawfully permitted

• Other parties where disclosure is necessary for the provision of legal services and consistent with applicable professional obligations

Where third parties process personal data on our behalf, we require appropriate safeguards to protect the confidentiality and security of the information.

We do not sell personal data to third parties.

Nothing in this section is intended to override applicable duties of client confidentiality, legal professional privilege or other professional obligations.

8. International Transfers of Personal Data

In the course of operating our website and using technology service providers, personal data may be stored, accessed or processed outside Nigeria.

Where personal data is transferred internationally, we will ensure that the transfer complies with the applicable requirements of the NDPA, including Sections 41–43.

We will rely on an appropriate legal transfer mechanism, such as an adequate level of data protection, appropriate contractual or other safeguards, or another permitted basis for international transfer.

Where applicable, you may contact us at hello@aiolawfirm.com for information about international transfers and the safeguards adopted.

9. Data Security

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, destruction or unlawful processing.

These measures may include:

• Appropriate access controls and authentication

• Secure website communication protocols

• Restricted access to personal information

• Confidentiality obligations for authorised personnel

• Appropriate information security procedures

• Security monitoring and periodic reviews

• Incident management and response procedures

We retain personal data for periods appropriate to the purpose of collection and applicable legal or professional requirements. Website enquiries are ordinarily retained for 6 years or as required by law, and website technical records for 6 years or as required by law, subject to any applicable requirement for longer retention. Where information relates to a legal engagement, different periods may apply based on applicable legal and professional obligations.

Although we implement safeguards to protect personal data, no method of internet transmission or electronic storage is entirely risk-free.

In the event of a personal data breach, we will assess the circumstances and comply with applicable reporting and notification obligations under the NDPA.

10. Your Rights Under the NDPA

Subject to applicable legal requirements, limitations and exemptions, you have rights in relation to your personal data, including the following:

a. Right to information and access

You may request information about whether we process your personal data and, where applicable, obtain access to that data and relevant information about its processing.

b. Right to rectification

You may request correction of personal data that is inaccurate, incomplete, outdated or misleading.

c. Right to erasure

You may request deletion of your personal data where the applicable legal conditions are satisfied.

d. Right to restriction of processing

You may request that certain processing activities be restricted in circumstances recognised under applicable law.

e. Right to object

You may object to the processing of your personal data, subject to applicable legal grounds permitting continued processing.

f. Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing undertaken before the withdrawal.

g. Right to data portability

Where applicable, you may request a copy of your personal data in a structured, commonly used and machine-readable format or request its transfer to another data controller.

h. Right to lodge a complaint

You may lodge a complaint with the Nigeria Data Protection Commission where you believe that your personal data has been processed contrary to applicable data protection law.

Exercising Your Rights

To exercise your rights, please send an email to:

hello@aiolawfirm.com

Please include sufficient information to enable us to identify you and understand your request.

We may request reasonable information to verify your identity before responding.

We will respond without unreasonable delay and in accordance with applicable legal requirements.

Certain requests may be subject to restrictions where necessary to comply with legal obligations, protect the rights of others, preserve legal professional privilege or meet other applicable legal requirements.

Where we are unable to fulfil a request, we will explain the reason to the extent legally permissible.

11. Third-Party Websites

Our website may contain links to websites operated by third parties.

Such websites are not controlled by AIO Law and may be subject to separate privacy notices and data protection practices.

We encourage visitors to review the privacy notices of third-party websites before submitting personal information.

We are not responsible for the independent data processing activities of third parties that do not act on our behalf.

12. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in applicable laws, regulatory requirements, website functionality or our personal data processing activities.

Where changes are made, the revised version will be published on our website with an updated effective date.

Where a change materially affects the processing of personal data, we will provide additional notice or obtain consent where required by law.

We encourage visitors to review this Privacy Notice periodically.

13. Complaints and Contact Information

If you have questions, concerns or complaints concerning the collection, use, disclosure or protection of your personal data, please contact:

Akin Ibidapo-Obe & Co (AIO Law)

2nd Floor, 140 Borno Way,
Ebute Metta, Yaba,
Lagos, Nigeria.

Email: hello@aiolawfirm.com
Website: https://www.aiolawfirm.com

We will review privacy-related enquiries and complaints and take appropriate steps to address them.

You may also lodge a complaint directly with the Nigeria Data Protection Commission.

Nigeria Data Protection Commission (NDPC)
Website: https://ndpc.gov.ng

Your right to complain to the NDPC is independent of any complaint you may first submit to the Firm.

AKIN IBIDAPO-OBE & CO (AIO LAW)