Eko Solicitors & Advocates: How we collect, use, and protect your information.Effective Date:18 May 2026 Last Updated: 18 May 2026
Contents
03. How We Use Your Information
04. Legal Basis for Processing (GDPR)
09. International Data Transfers
01.Who We Are
Eko Solicitors & Advocates (“we”, “us”, “our”) is a Nigerian law firm providing legal advisory, transactional, and litigation services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage our services.
We are committed to protecting your personal data in accordance with applicable laws, including the Nigeria Data Protection Act (NDPA) 2023, the European Union General Data Protection Regulation (GDPR), the California Privacy Rights Act (CPRA), and all relevant advertising platform policies including Google AdSense.
For GDPR purposes, Eko Solicitors & Advocates acts as the Data Controller of personal information collected through this website.
02.Information We Collect
We may collect the following categories of personal information:
Information you provide directly:
- Full name, email address, phone number, and postal address (via contact forms or enquiries)
- Details of your legal matter or service request
- Company name and professional details where applicable
- Any documents or attachments voluntarily submitted to us
Information collected automatically:
- IP address, browser type and version, operating system
- Pages visited, time spent on pages, referring URLs, and click data
- Device identifiers and approximate geographic location
- Cookie data and advertising identifiers (detailed in Section 6)
Sensitive personal information: We do not intentionally collect sensitive personal data (such as health information, financial account numbers, or government ID numbers) through this website. If you share such information in a legal consultation, it is protected under attorney-client privilege and our separate client engagement agreements.
03. How We Use Your Information
We use collected information for the following purposes:
- Responding to enquiries and providing legal information or consultations
- Managing our client relationships and delivering requested legal services
- Sending service-related communications, invoices, and legal updates (with your consent)
- Improving the functionality, content, and performance of our website
- Complying with legal and regulatory obligations under Nigerian law and applicable international frameworks
- Preventing fraud, abuse, or unlawful use of our website and services
- Displaying interest-based advertisements via Google AdSense (see Section 6)
- Analysing aggregate, anonymised website traffic for business intelligence purposes
We do not sell, rent, or trade your personal information to third parties for their own direct marketing purposes.
04. Legal Basis for Processing (GDPR)
Where the GDPR applies — for example, if you are located in the European Economic Area (EEA) or the United Kingdom — we rely on the following lawful bases to process your personal data:
- Legitimate Interests (Art. 6(1)(f)): To operate and improve our website, respond to general enquiries, and ensure security.
- Contract Performance (Art. 6(1)(b)): Where processing is necessary to enter into or perform a legal services contract with you.
- Legal Obligation (Art. 6(1)(c)): Where processing is required by applicable law, such as anti-money laundering regulations or court orders.
- Consent (Art. 6(1)(a)): Where you have given explicit consent, such as subscribing to our newsletter or accepting non-essential cookies. You may withdraw consent at any time.
05. Sharing Your Information
We do not share personal information with third parties except in the following circumstances:
- Service Providers: Trusted vendors who assist us with website hosting, IT support, email delivery, and analytics — bound by confidentiality obligations.
- Google LLC: Our use of Google AdSense means Google may collect and use data as described in Section 6 below.
- Legal Requirements: Where required by a court order, regulatory authority, law enforcement agency, or applicable law.
- Professional Advisors: Our accountants, insurers, or legal auditors who are subject to professional confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or restructuring, personal data may be transferred as part of that transaction. We will notify you of any such change.
We do not share, sell, or disclose your information to data brokers or third parties for their own commercial marketing purposes.
06. Cookies & Google AdSense
Google AdSense Disclosure: This website uses Google AdSense, an advertising service operated by Google LLC. Google AdSense uses cookies and similar tracking technologies to serve interest- based advertisements based on your prior visits to this and other websites.
We use the following categories of cookies on this website:
- Essential cookies: Strictly necessary for the website to function. These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). Activated only with your consent.
- Advertising cookies: Used by Google AdSense to display relevant advertisements. These may collect your IP address, device identifiers, and browsing behaviour across websites.
How Google uses this data: Google may use the data collected through AdSense to personalise the ads you see across the Google Display Network. Google acts as an independent data controller for the data it collects. You can review Google’s privacy practices at policies.google.com/privacy.
Opting out of interest-based advertising: You may opt out of personalised ads by visiting adssettings.google.com, or by visiting the Network Advertising Initiative opt-out page at optout.networkadvertising.org. You can also manage cookie preferences through your browser settings.
When you first visit our website, you will be presented with a cookie consent banner. Non-essential cookies are not activated until you provide your consent.
07. Your Rights — GDPR & CPRA
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data (“right to be forgotten”).
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Opt-Out (CPRA)
California residents may opt out of the sale or sharing of personal information.
Right to Limit Use (CPRA)
Limit how we use or disclose sensitive personal information.
Right to Non-Discrimination
We will not discriminate against you for exercising any privacy right.
California Residents (CPRA): We do not sell personal information as defined under California law. We do not use or disclose sensitive personal information beyond the purposes permitted by the CPRA without your consent. To exercise your California rights, submit a verifiable consumer request to the contact details in Section 12.
EEA / UK Residents (GDPR): You have the right to lodge a complaint with your national data protection supervisory authority if you believe your rights have been violated.
To exercise any of the above rights, contact us at ekosolicitors@gmail.com. We will respond within 30 days (or such shorter period as required by applicable law).
08. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Our general retention periods are:
- Enquiry data (non-clients): Up to 12 months from the date of last contact.
- Client data: For the duration of the client relationship and a further 7 years in accordance with Nigerian legal professional regulations.
- Website analytics data: Anonymised after 26 months (Google Analytics default).
- Cookie and advertising data: Governed by Google’s own retention policies — typically 13 months.
After retention periods expire, personal data is securely deleted or anonymised so that it can no longer identify you.
09.International Data Transfers
Our firm is based in Lagos, Nigeria. If you access our website from outside Nigeria, your information may be transferred to and processed in Nigeria. Where we transfer data from the EEA or UK to a country not recognised as providing adequate data protection, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Data transferred to and processed by Google LLC (including for AdSense purposes) may be stored on servers in the United States or other jurisdictions. Google’s transfers are governed by its own privacy policy and applicable data transfer mechanisms.
- Children’s Privacy
Our website and services are not directed to persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted personal information to us without parental consent, please contact us immediately at ekosolicitors@gmail.com and we will promptly delete such information.
- Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- HTTPS/TLS encryption for all data transmitted through our website
- Access controls limiting who can view personal data internally
- Regular security assessments and software updates
- Staff trained on data protection obligations
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach affecting your rights or freedoms, we will notify you and relevant authorities in accordance with applicable law.
- Contact & Complaints
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection Officer:
Firm
Eko Solicitors & Advocates
Address
No. 62 Kudirat Abiola Way, Ikeja Lagos, Nigeria
Response Time
Within 10 days
If you are dissatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), your national data protection supervisory authority (if in the EEA/UK), or the California Privacy Protection Agency (if in California).
We reserve the right to update this Privacy Policy from time to time. Material changes will be notified via a prominent notice on our website. The “Last Updated” date at the top of this page reflects the most recent revision.
© 2026 Eko Solicitors & Advocates. All rights reserved.
This Privacy Policy is governed by the laws of the Federal Republic of Nigeria and applicable international data protection regulations.
GDPR COMPLIANT, CPRA COMPLIANT, NDPA 2023 COMPLIANT,GOOGLE ADSENSE DISCLOSED