Privacy Policy

Will & Ash (“we”, “us”) is the data controller for personal data collected through this website. Our offices are in Lagos and Abuja, Nigeria.

For any privacy question, contact our Data Protection Officer at willandash@outlook.com.

• Enquiries: your name, email address, phone number (optional), the practice area and the details you provide in your message.
• Consultation bookings: the details you enter when booking, such as name, email, preferred time and a short description of your matter.
• Technical data: limited information needed to run the site securely, such as server logs. With your consent, anonymous, cookie-free usage statistics.

• To respond to your enquiry and arrange a consultation, based on your consent and steps taken at your request before entering into an engagement.
• To check for conflicts of interest before accepting instructions, based on our legal and professional obligations.
• To keep the website secure and working properly, based on our legitimate interests.
• To understand how the site is used (only if you accept analytics), based on your consent.

We do not sell your personal data. We share it only with service providers who help us run this website and our communications, under written agreements that require them to protect it:

• Website hosting (e.g. Vercel)
• Email delivery for enquiries (e.g. Resend)
• Consultation scheduling (e.g. Cal.com)

Some of these providers store data outside Nigeria. Where this happens, we rely on the safeguards permitted under the NDPA to ensure your data remains adequately protected.

We keep enquiry and booking data only for as long as needed to respond and, if you become a client, in line with our professional record-keeping obligations. Enquiries that do not lead to an engagement are deleted after [12 months].

Under the NDPA you have the right to:

• be informed about how your data is used;
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased or its use restricted, in certain circumstances;
• receive your data in a portable format;
• object to processing, and withdraw consent at any time.

To exercise any of these rights, email willandash@outlook.com. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access. Please avoid sending highly sensitive information through the website form; we will arrange a secure channel once we are engaged.

For details of the cookies and similar technologies we use, see our Cookie Notice.

We may update this policy from time to time. The latest version will always be published on this page.