Privacy Policy

Welcome to the official website of Doyin Awoyale SAN & Co. ("the Firm," "we," "us," or "our"). As a premium legal practice, we hold confidentiality, attorney-client privilege, and data protection in the highest regard.

This Privacy Policy comprehensively explains how we collect, process, use, disclose, and safeguard your Personal Data when you visit our website (doyinawoyalesan.com), utilize our contact forms, or otherwise interact with our digital infrastructure. This Policy is strictly designed to comply with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA), and, where applicable to our international clients, the EU General Data Protection Regulation (GDPR).

To evaluate inquiries and provide our services effectively, we collect and process specific categories of data:

• Directly Provided Data (Form Submissions): When you utilize our contact forms, we collect identifiable information such as your full name, email address, telephone number, and company name.
• Sensitive Case Data (Special Categories): Our forms may require you to submit preliminary case briefs. This may inadvertently or deliberately include sensitive personal data related to legal disputes, financial standing, or criminal records. We treat this data with the utmost strictness and confidentiality.
• Technical Data (No Cookies): When you navigate our website, our secure edge servers may automatically log basic technical connection data, such as your IP address, browser type, and operating system, strictly to ensure site security and functionality. Please note that our website does not use cookies, tracking pixels, or targeted advertising trackers to monitor your behavior.

We will only process your personal data when the law allows us to. Our primary legal bases include:

• Legitimate Interest: To evaluate your preliminary legal inquiry, perform essential conflict-of-interest checks, and ensure the cybersecurity of our IT systems.
• Contractual Necessity: If we agree to represent you, processing your data is necessary to take steps prior to entering into a formal engagement or retainer agreement.
• Legal Obligation: Where we need to comply with a statutory, regulatory, or ethical obligation (e.g., anti-money laundering compliance and Nigerian Bar Association rules).

We utilize modern, secure web architecture to protect your data. Information submitted through our contact forms is strictly proxied through a secure edge server network before transmission.

We utilize Web3Forms as a designated third-party data processor to facilitate the secure routing of your form submissions to our Firm's internal email infrastructure. Web3Forms acts exclusively as a secure, transient conduit and does not have the right to retain, use, sell, or independently process your data for any other purpose. We rigorously vet all third-party vendors to ensure their cybersecurity measures are commensurate with NDPR and GDPR requirements.

Crucial Notice: Submitting information through our website contact form does not spontaneously create an attorney-client relationship.

However, we recognize the highly sensitive nature of legal inquiries. Whether or not you ultimately retain our Firm, we treat all submitted preliminary case briefs and personal data with strict professional confidentiality. A formal, legally binding attorney-client relationship is only established upon the execution of a written Engagement Letter signed by a Partner of Doyin Awoyale SAN & Co.

We do not sell, rent, or trade your personal data. We may only share your data with:

• Authorized personnel and legal practitioners within our Firm.
• Trusted IT service providers (like secure email hosts) who are subject to strict confidentiality agreements.
• Regulatory bodies or law enforcement agencies, strictly when compelled by a valid legal order.

If you are accessing our site from the European Economic Area (EEA), please note that your data may be transferred to and processed in Nigeria. We ensure such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses or NDPR-compliant transfer mechanisms.

Your data is retained only for as long as functionally necessary:

• Prospective Clients (No Representation): Data related to conflict checks and general inquiries that do not result in formal representation is securely purged or anonymized within twelve (12) months.
• Retained Clients: If an attorney-client relationship is formed, your data will be retained in our case files for the duration of your matter and thereafter in accordance with statutory limitation periods and the NBA's rules on file retention.

• Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, the Firm maintains strict protocols to notify affected individuals and the relevant regulatory authorities (such as the NDPC) within 72 hours of becoming aware of the breach, in accordance with NDPR and GDPR mandates.
• Children's Privacy: Our website and legal services are strictly directed at adults and corporate entities. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us for immediate deletion.
• Automated Decision-Making: We do not subject your data to purely automated decision-making processes or AI-driven profiling that would produce legal or similarly significant effects concerning you. All legal inquiries are reviewed by human practitioners.

Under the NDPR and GDPR, you possess significant rights regarding your personal data, subject to legal privilege exemptions:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure: Request deletion of your data where there is no good reason for its continued processing.
• Right to Object/Restrict: Object to processing based on legitimate interests.
• Right to Data Portability: Request the transfer of your data to another party.

To exercise these rights, please submit a formal request via the contact details provided below.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Compliance Team:

Doyin Awoyale SAN & Co.
Email: info@doyinawoyalesan.com
Address: 4A Esomo Close, Off Toyin Street, Ikeja, Lagos, Nigeria.
Phone: +234 802 424 5555