Osuya & Osuya Law Firm, also known as O&O, takes the responsibility of managing personal data very seriously. We understand the trust you have placed in us by providing us with your personal information, and we assure you that we do not take this lightly. This Privacy Policy serves as a guide to help you understand how we process your personal data, although it may not address all possible data processing scenarios.
The policy covers the following topics to help you have a better understanding of the process:
(1) The Information We Collect
(2) How We Collect and Use Your Data
(3) Consent and Access Rights
(4) Personal Data Protection Principles
(5) User Responsibility
(6) Data Security
(7) Third Party Access
(8) Violation of Privacy
(9) How to Contact Us.
- The Information We Collect
We collect various types of personal information such as your name, date of birth, residential and contact address, telephone number, email address, marital status, nationality, gender, tax identity number, bank details, social media posts, information on family members, medical information, educational background, genetic data, biometric data, identity number, location data, photograph, IP address, MAC address, IMEI number, IMSI number, and any other relevant information.
- How We Collect and Use Your Data
2.1 O&O collects the abovementioned information using forms, email and physical requests, cookies, JWT, and web tokens.
2.2 When you send emails or other communications to O&O, we may retain those communications to process your inquiries, respond to your requests, and improve our services. When you access O&O’s services, our servers automatically record information your browser sends whenever you visit a website.
2.3 We use the information mentioned above for due diligence, transaction advisory, legal advisory, litigation, regulatory compliance, marketing, business development, listing on legal directories, publicity, human resources management, recruitment, events planning and hosting, in-house security, research, analysis and vendor registration.
- Consent and Access Rights
3.1 We require your consent to process your data and shall obtain your consent to individual matters where any document deals with other issues. If we use this information in a manner different from the purpose for which it was collected, we will ask for your consent before such use.
3.2 No Consent shall be sought, given or accepted in any circumstance that may engender direct or indirect propagation of atrocities, hate, child rights violations, criminal acts and anti-social conduct.
3.3 You may withdraw your consent at any time and may request access to your personal information in our possession. We can, however, deny you access to the information where we determine that your request is unreasonable.
3.4 You reserve the right to request the modification or amendment of your data in our possession.
3.5 In all cases of access to or modification/amendment of personal information, we shall request sufficient identification to confirm that you are the owner of the data sought to be accessed or modified/amended.
- Personal Data Protection Principles
When we process your data, we are guided by the following principles, which require personal data to be:
- a) processed lawfully, fairly, transparently, and with respect for the dignity of the human person.
- b) collected only for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.
- c) adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
- d) accurate and, where necessary, kept up to date.
- e) removed or not kept in a form which permits identification of data subject for longer than is necessary for the purposes for which the personal data is processed.
- f) processed in a manner that ensures its security, using appropriate technical and organisational measures to protect against unauthorised or unlawful Processing and accidental loss, destruction or damage.
- User Responsibility
You must familiarise yourself with this policy and ensure that the information you provide us is complete, accurate and up to date.
- Data Security
6.1 O&O implements and maintains appropriate safeguards to protect personal data, considering the risks to you presented by unauthorised or unlawful processing or accidental loss, destruction of, or damage to their data.
6.2 Safeguarding will include the use of encryption and pseudonymisation where appropriate. It also includes protecting confidentiality (i.e., only those who need to know and are authorised to use personal data have access), integrity and availability of the personal data. We regularly evaluate and test the effectiveness of those safeguards to ensure the security of our processing of personal data.
- Third Party Access
7.1 O&O only shares personal information with other companies or individuals in the following limited circumstances: - a) We have your consent.
- b) We provide such information to other professional advisers, trusted businesses, or persons to process personal information on our behalf. We require that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.
- c) We have a good faith/belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request, (b) enforce applicable terms of service, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address fraud, security or technical issues, or (d) protect against imminent harm to the rights, property or safety of O&O, its users or the public as required or permitted by law.
7.2 O&O is always responsible for the security and appropriate use of that data as long as it remains with O&O.
- Violation of Privacy
8.1 We have established procedures to deal with any suspected personal data breach. We will notify you of any personal data breach and let you know the steps we have taken to remedy the breach and the security measures we have applied to render your data unintelligible.
8.2 All suspected breaches of personal data will be remedied within 1 (one) month from the date of the breach report.
8.3 If you know or suspect that a personal data breach has occurred, you should immediately contact the O&O team at services@osuyalawfirm.com.ng
8.4 O&O will not be responsible for any personal data breach which occurs as a result of:
- a) an event which is beyond the control of O&O;
- b) an act or threat of terrorism;
- c) an act of God (such as, but not limited to, fires, explosions, earthquakes, drought, tidal waves and floods) which compromises O&O’s data protection measures;
- d) war, hostilities (whether war be declared or not), invasion, act of foreign enemies, mobilisation, requisition, or embargo;
- e) rebellion, revolution, insurrection, military or usurped power, or civil war which compromises O&O’s data protection measures;
- f) the transfer of your data to a third party on your instructions and
- g) the use of your data by a third party designated by you.
- How to Contact Us
For any enquiries you have about this Privacy Policy, please feel free to contact our Data Protection Officer at service@osuyalawfirm.com.ng
