Privacy policy

1. Who we are

Okoi, Okoi & Okoi (“we”, “us”, “our”) is a law firm of barristers, solicitors and consultants based in Nigeria. We are the data controller responsible for personal data collected through this website, okois-law.com.

This policy explains what personal data we collect, why we collect it, how we protect it and the rights you have. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and the regulations and directives issued by the Nigeria Data Protection Commission (NDPC).

Contact for privacy matters:
Okoi, Okoi & Okoi, River Valley Estate, Abuja, Nigeria
Email: info@okois-law.com · Phone: +234 810 049 6687

2. The information we collect

Information you give us

When you complete our consultation form, email or call us, we may collect:

• your name, email address and phone number;
• the company or organisation you represent, if any;
• the area of law your enquiry relates to; and
• any details you choose to share about your matter.

Please share only what is needed for us to understand your enquiry. Avoid sending highly sensitive information (such as health, financial or criminal records) through the website form. We will ask for it through a secure channel if it is needed.

Information collected automatically

When you visit our website, we and our service providers automatically collect limited technical information, such as your IP address, browser and device type, the pages you visit and how you arrived at our site. This is collected through server logs and cookies (see section 7).

3. How we use your information and our legal basis

Under the NDPA, we must have a lawful basis for each way we use your personal data. We use your information:

• To respond to your enquiry and arrange a consultation, because you have asked us to and it is a step towards a possible engagement (contract).
• To check for conflicts of interest before we act for you, as our professional rules require (legal obligation).
• To provide legal services if you become a client, under the terms of our engagement (contract).
• To keep records required by law and by the rules governing legal practitioners in Nigeria (legal obligation).
• To run, secure and improve our website, including preventing spam and understanding which pages are useful (legitimate interests).
• To use analytics cookies, where you have agreed to them (consent).

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Confidentiality and legal privilege

We treat all enquiries as confidential. However, sending us an enquiry does not by itself create a lawyer–client relationship. That relationship begins only when we have confirmed in writing that we will act for you. Until then, please do not send information you would not want disclosed if we are unable to act for you, for example because of a conflict of interest.

5. Who we share your information with

We share personal data only where necessary, and only with:

• Service providers who help us run our website and business, such as our website host (Hostinger), our email provider, and Google (for website analytics and spam protection). They may only use your data to provide their services to us.
• Professional advisers, such as auditors or insurers, under duties of confidentiality.
• Courts, regulators and law enforcement, where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.
• Other parties connected with your matter (for example, opposing counsel or experts), but only with your instructions once you are our client.

6. International transfers

Some of our service providers store or process data on servers outside Nigeria. Where this happens, we take the steps required by the NDPA to ensure your data receives an adequate level of protection, for example by relying on the recipient’s data protection commitments and appropriate contractual safeguards.

7. Cookies

Cookies are small files stored on your device. Our website uses:

• Essential cookies, needed for the site and the contact form to work securely, including spam protection.
• Analytics cookies (Google Analytics), which help us understand how visitors use the site so we can improve it. These collect information in a form that does not directly identify you.

You can block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site, such as the contact form, from working.

8. How long we keep your information

• Enquiries that do not lead to an engagement: up to 12 months, then deleted. We may keep a minimal record (name and matter description) longer for conflict-checking purposes.
• Client files: for as long as required by law and by the professional rules that apply to legal practitioners in Nigeria, after which they are securely destroyed.
• Website analytics: according to the retention settings of our analytics provider, and no longer than 26 months.

9. How we protect your information

We use appropriate technical and organisational measures to protect your personal data, including encrypted (HTTPS) connections to our website, access controls, and confidentiality obligations on everyone in our firm. If a personal data breach occurs that is likely to put your rights at risk, we will notify the NDPC and, where required, you, within the time limits set by the NDPA.

10. Your rights

Under the NDPA, you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• ask us to delete your data, where we have no legal reason to keep it;
• restrict or object to how we use your data, including where we rely on legitimate interests;
• receive your data in a commonly used, machine-readable format (data portability);
• withdraw your consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it; and
• complain to the Nigeria Data Protection Commission if you believe we have mishandled your data.

To exercise any of these rights, email info@okois-law.com. We may ask you to confirm your identity, and we will respond within the time required by law. Some rights are limited where we must keep information to meet legal or professional obligations.

11. Children

Our website is not directed at children, and we do not knowingly collect personal data from anyone under 18 through it. If you are acting for a minor, please contact us directly.

12. Links to other websites

Our website may link to other websites. We are not responsible for their content or privacy practices, so please read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.