Abuja · Federal Capital Territory · Nigeria
This privacy policy governs the relationship between the firm and visitors to ojrichards.com. Last updated 24 May 2026.
O.J | Richards + Co. ("the firm," "we," "us," "our") is committed to protecting the privacy of visitors to our website and individuals who interact with us through the website or through related communications channels.
This Privacy Policy explains how we collect, use, store, share, and protect personal data, in accordance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019, and applicable international data protection standards.
We collect personal data that you provide directly to us, including: full name; email address; telephone number; jurisdiction of residence or operation; description of the matter on which you seek counsel; and any other information you choose to include in correspondence with the firm.
We also collect technical data automatically when you visit the website, including: IP address; browser type and version; device type; pages visited; time and date of visit; and referring website addresses.
We process personal data on the following lawful bases: consent (where you have given explicit consent for a specific purpose); contract (where processing is necessary to take steps to enter into a contract with you); legal obligation (where processing is required to comply with applicable law); and legitimate interest (where processing is necessary for the firm's legitimate interests and not overridden by your rights).
We use personal data to: respond to enquiries submitted through the contact form or by other means; conduct conflict of interest checks before accepting engagement; deliver legal services where you have engaged the firm; communicate with you about your matter; comply with our professional, legal, and regulatory obligations; improve the website and the firm's services; and send publications and updates where you have opted to receive them.
We do not sell personal data. We share personal data only in the following circumstances: with other professionals (such as counsel, accountants, or experts) where necessary for the conduct of your matter and with your knowledge; with service providers who assist the firm in operating the website and delivering services (under appropriate confidentiality obligations); with regulators, courts, or other authorities where required by law or professional obligation; and with successors in the event of a reorganisation, merger, or sale of the firm.
Where personal data is transferred outside Nigeria, we ensure appropriate safeguards are in place consistent with the NDPA and applicable cross-border transfer requirements.
Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate personal data; request erasure of personal data in certain circumstances; restrict processing in certain circumstances; data portability; object to processing in certain circumstances; and withdraw consent where processing is based on consent.
To exercise any of these rights, contact the firm at the email address provided on the Contact page.
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of any legal or professional obligation to do so. Engagement records are retained in accordance with the firm's record retention policy and applicable Nigerian Bar Association rules.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and regular security reviews.
We may update this Privacy Policy from time to time. The current version is identified by the date at the top of the page. Material changes will be brought to the attention of users where appropriate.
Questions about this Privacy Policy or the firm's data protection practices should be directed to: privacy@ojrichards.law
