Last updated: July 2026. This policy is issued by O. Kayode & Co. (“the Firm”, “we”, “us”), 1st Floor, 22 Oba Akran Avenue, Ikeja, Lagos, Nigeria. The Firm is the data controller for personal data processed through this website.
Scope
This policy explains how we collect, use, and protect personal data when you visit www.okayode.com, contact us, or engage the Firm’s services. It is prepared in accordance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable to visitors from other jurisdictions, with the EU General Data Protection Regulation (GDPR) and UK GDPR.
Personal Data We Collect
- Contact data you provide when you email us or complete a form: name, organisation, email address, telephone number, and the content of your message.
- Engagement data processed in the course of providing legal services, including information necessary for conflict-of-interest checks.
- Technical data collected automatically: IP address, browser type, device information, pages visited, and cookies (see Cookies below).
How and Why We Use Personal Data
- To respond to enquiries and correspond with you (legitimate interest).
- To provide legal services and administer client engagements (performance of a contract).
- To conduct conflict-of-interest checks and comply with professional obligations under the Rules of Professional Conduct for Legal Practitioners 2023 (legal obligation).
- To comply with statutory, regulatory, and anti-money-laundering requirements (legal obligation).
- To send professional updates or publications, only where you have consented (consent, which you may withdraw at any time).
Disclosure of Personal Data
We do not sell personal data. We may share personal data with: service providers who host and maintain this website and our systems, under appropriate safeguards; associate law firms and correspondents where necessary to carry out your instructions, including in other jurisdictions; and courts, regulators, or authorities where disclosure is required by law.
International Transfers
Where personal data is transferred outside Nigeria (for example, to associate firms or service providers abroad), we take steps to ensure an adequate level of protection consistent with the NDPA, including contractual safeguards where appropriate. For visitors in the EU/UK, transfers are made on the basis of appropriate safeguards recognised under the GDPR/UK GDPR.
Retention
We retain personal data only for as long as necessary for the purposes described above, to comply with our professional record-keeping obligations, and to establish or defend legal claims. Enquiry data that does not lead to an engagement is retained for no longer than reasonably necessary.
Your Rights
Subject to applicable law, you have the right to: access your personal data; request correction or erasure; object to or restrict processing; data portability; withdraw consent at any time where processing is based on consent; and lodge a complaint with the Nigeria Data Protection Commission (NDPC) or, for EU/UK residents, with your local supervisory authority. To exercise any of these rights, contact ip@okayode.com.
Cookies
This website uses cookies that are necessary for its operation and, where enabled, analytics cookies that help us understand how the site is used. You can control cookies through your browser settings. Where required by law, we will request your consent before setting non-essential cookies.
Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, consistent with the nature of the data and the risks involved.
Changes and Contact
We may update this policy from time to time; the current version will always be available on this page. Questions about this policy or our data practices should be directed to ip@okayode.com.