Privacy notice

This notice explains how Dealtran Legal ("we", "us") collects, uses, shares and keeps personal data when you visit this website, send us an enquiry, instruct us or otherwise deal with us. It is given under section 27 of the Nigeria Data Protection Act 2023 (NDPA) and takes account of the Nigeria Data Protection Commission's General Application and Implementation Directive 2025 (GAID), in force since 19 September 2025.

1. Who we are and how to contact us

Dealtran Legal is the data controller for the personal data described in this notice.

• Address: 5 Kwaji Close, Maitama, Abuja, Federal Capital Territory, Nigeria
• Privacy contact: contact@dealtranlaw.com (please put "Privacy" in the subject line)
• Phone: 0904 732 1488 (international +234 904 732 1488)

2. The personal data we collect

• Enquiry details: your name, company or organisation, email address, phone or WhatsApp number, country, what you are asking for (a quote, a scoping call or a Legal Path Review), the sector and type of matter, the project's state and local government area, the project stage, the decision you need and by when, your budget range and the description you give us.
• Names of other parties: the names of counterparties, landholders, communities or other parties you give us so that we can run a conflict check. These may identify individuals who have not contacted us themselves. We use them only to check for conflicts of interest and, if we act, for your matter.
• Client and matter information: information needed to act for you, including identification and due diligence documents, correspondence, instructions, documents relating to your matter and billing details. This may include personal data about other people involved in the matter, such as counterparties, landholders or community representatives.
• Technical data: IP address, browser and device information, pages visited and the date and time of your visit, collected by our website platform through cookies and similar technologies for security, performance and basic analytics.

Please do not send confidential documents, or sensitive personal data such as information about health, religious belief or criminal records, through the contact form. If sensitive personal data is needed for a matter, we will discuss with you how it is provided and protected.

3. Why we use your data and our lawful basis

We only process personal data where one of the lawful bases in section 25 of the NDPA applies.

• Running a conflict check on your name and the names of other parties or counterparties you give us, and keeping the minimal conflict-check record described in section 6. Basis: our legitimate interests and our legal obligation to avoid conflicts of interest (s.25(1)(b)).
• Responding to your enquiry, preparing a quote or arranging a call. Basis: your consent, given when you submit the form (s.25(1)(a)), and steps you ask us to take before entering into an engagement (s.25(1)(b)(i)).
• Providing legal services once you instruct us. Basis: performance of our contract with you (s.25(1)(b)(i)).
• Meeting our legal and professional obligations, including client identification and record keeping, the Rules of Professional Conduct for Legal Practitioners 2023, tax law and responding to lawful requests from authorities. Basis: compliance with a legal obligation (s.25(1)(b)(ii)).
• Running and securing our website and practice, managing our business records and establishing, exercising or defending legal claims. Basis: our legitimate interests (s.25(1)(b)(v)), which we balance against your rights and freedoms.

We handle personal data in line with the principles in section 24 of the NDPA: fairly, lawfully and transparently; for specified purposes; limited to what is necessary; accurately; kept no longer than necessary; and securely. We do not sell personal data, we do not use it for direct marketing without your consent, and we do not make decisions about you based solely on automated processing.

4. Who we share it with

• Service providers who process data on our instructions, including Wix.com (website hosting, contact form and analytics) and our email and document storage providers.
• People involved in your matter where needed to act for you, such as counsel, experts, surveyors, valuers, courts, registries and regulators.
• Professional advisers and insurers, under a duty of confidentiality.
• Authorities where the law requires us to disclose information.

We protect client confidentiality and legal professional privilege in everything we share.

5. Transfers outside Nigeria

Some of our service providers, including our website platform, store or process data outside Nigeria. Under sections 41 to 43 of the NDPA, we transfer personal data outside Nigeria only where the recipient country or arrangement provides an adequate level of protection (s.42), or where another ground in section 43 applies, for example your consent after being told of the risks, a transfer necessary to perform a contract with you or to take steps you requested before one, or a transfer necessary for legal claims. We record the basis for each type of transfer, as section 41 requires.

6. How long we keep it

We keep personal data only for as long as necessary for the purpose it was collected for (NDPA s.24(1)(d)), or for longer only where the law requires it or a claim, complaint or investigation is ongoing. At the end of the period we delete it or securely destroy it.

7. Your rights

Under Part VI of the NDPA (sections 34 to 38) you have the right to:

• be told whether we process your personal data and receive a copy of it, with information about how it is used (s.34);
• have inaccurate, out of date, incomplete or misleading data corrected or deleted (s.34);
• have your data erased without undue delay where there is no longer a lawful reason to keep it (s.34);
• ask us to restrict processing while a request, objection or legal claim is resolved (s.34);
• withdraw your consent at any time, as easily as you gave it, without affecting processing already carried out (s.35);
• object to processing based on our legitimate interests, and to any direct marketing (s.36);
• not be subject to decisions based solely on automated processing with legal or similarly significant effects (s.37); and
• receive your data in a structured, commonly used and machine-readable format and have it sent to another controller, where the right to data portability applies (s.38).

To exercise a right, email contact@dealtranlaw.com. We may ask you to confirm your identity. We will respond without undue delay. Some rights are limited where we must keep information to meet a legal obligation, to protect legal professional privilege or to establish, exercise or defend legal claims; if so, we will explain why.

8. Complaints to the Nigeria Data Protection Commission

If you are unhappy with how we handle your personal data, please contact us first so that we can try to put it right. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) under section 46 of the NDPA, whether or not you have contacted us. Details are on the NDPC website at ndpc.gov.ng.

9. Security and personal data breaches

We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, loss, destruction and damage, including access controls and confidentiality obligations. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the NDPC within 72 hours of becoming aware of it, and where the risk to you is high we will tell you directly and without delay, as section 40 of the NDPA requires.

10. Cookies

Our website platform uses cookies and similar technologies that are needed for the site to work securely, and may use others for performance and basic analytics. You can block or delete cookies in your browser settings; some parts of the site may not work properly if you block essential cookies.

11. Changes to this notice

We review this notice from time to time and will post any update on this page with a new date.