How Recholam Consult Handles Your Personal Data

Who we are

Recholam Consult Limited (RC 8601370, registered with the Corporate Affairs Commission, Nigeria) (“Recholam”, “we”) is the data controller for personal data collected through this website and in our correspondence with you. We are based in Lagos and London. For any privacy question or request, email segun@recholamconsult.com with “Privacy” in the subject line. Our data protection work is directed by a Certified Data Protection Officer.

This notice is written to meet the Nigeria Data Protection Act 2023 and the NDPC General Application and Implementation Directive 2025, and, for people in the UK, the UK GDPR and the Data Protection Act 2018.

What we collect

• Enquiries. If you email or call us, or use the request-a-call form, we receive what you choose to share: usually your name, role, firm, email address, phone number and the subject of your enquiry. Form submissions reach us through our form-handling provider; where that service is unavailable, the form instead prepares an email that you send from your own account.
• Self-check answers. These stay in your browser and are never sent to us.
• Technical data. This site uses no analytics, advertising or tracking cookies. Fonts are loaded from Google Fonts, so your browser shares your IP address with Google when a page loads. Our hosting provider, Cloudflare, processes standard request data to deliver and secure the site.

Why we use it, and on what basis

• To reply to your enquiry and prepare a proposal: steps you ask us to take before a possible engagement, and our legitimate interest in responding to business enquiries.
• To deliver and administer an engagement or training programme, including attendance, assessment and completion records: performance of our contract with you or your firm.
• To keep records we are required to keep, such as accounting and tax records: legal obligation.
• To send you occasional regulatory updates: only with your consent, which you can withdraw at any time.

We do not sell personal data, use it for automated decision-making, or use client identities in marketing without consent.

Who we share it with

We share personal data only with service providers that support our work, such as email, form handling, document storage and website hosting providers, under contract. Associates engaged on an engagement are named to you before they join and are bound by confidentiality. We may disclose data where the law requires it.

International transfers

Because we operate in Nigeria and the United Kingdom, and some service providers hold data elsewhere, your data may be transferred between countries. Where it is, we rely on the transfer bases the NDPA 2023 and UK GDPR allow, such as adequacy decisions or contractual safeguards.

How long we keep it

We keep data under our documented retention and deletion policy. Enquiries that do not lead to an engagement are deleted within 12 months of our last contact. Engagement and training records are kept for the period our contracts, accounting obligations and professional requirements need, then deleted.

Your rights

You can ask us to give you access to your personal data, correct it, delete it, restrict or object to its use, or transfer it to you or another organisation. You can withdraw consent at any time. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or, in the UK, the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve it with you first.

Security

We protect personal data with access controls, encrypted storage and transmission, and confidentiality agreements. If a breach is likely to put your rights at risk, we will notify the regulator within 72 hours and tell you without undue delay.

Changes

We will update this notice when our practices change and show the date of the latest version above.