Privacy and Cookies Policy
Last Updated: 4 June 2026
U. Mbadiwe & Co. ("we", "us", "our", "the Firm") is committed to protecting and respecting your privacy. This Privacy and Cookies Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, engage our services, or interact with us.
We process personal data in accordance with the Nigeria Data Protection Act, 2023 (NDPA), the Nigeria Data Protection Commission (NDPC) General Application and Implementation Directive (GAID) 2025, and other applicable laws and professional obligations of legal practitioners in Nigeria.
By using this website, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the website or provide us with your personal data.
What we Collect
We may collect and process the following categories of personal data:
- Identity Data: full name, title, date of birth, identity documents (where required for Know Your Client checks).
- Contact Data: phone number, email address, postal address, and office address.
- Professional Data: employer, job title, professional affiliations.
- Mandate Data: information you provide when instructing us, including facts of your case, documents, and correspondence.
- Technical Data: IP address, browser type, device information, time zone, and usage data collected via cookies.
- Financial Data: billing information where necessary for fees and compliance with anti-money laundering regulations.
We do not knowingly collect special category personal data unless it is strictly necessary for the establishment, exercise or defence of legal claims, with your explicit consent, or as permitted by law.
What we do with the information we gather
We use your personal data for the following lawful purposes:
- To provide legal advice, representation, and related professional services.
- To conduct client due diligence, conflict checks, and comply with anti-money laundering and counter-terrorism financing obligations.
- To communicate with you about your matter, respond to enquiries, and send service updates.
- To manage our client relationship, invoicing, and firm administration.
- To improve our website, services, and client experience through analytics.
- To comply with legal and regulatory obligations, including requests from courts and regulators.
- To protect the rights, property, and safety of the Firm, our clients, and others.
Our lawful bases under the NDPA 2023 include: consent, contractual necessity, legal obligation, vital interests, public interest, and legitimate interests (provided these do not override your rights).
Security and Retention of Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration, in line with NDPC guidance. Access to client files is restricted to authorised personnel bound by confidentiality.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements and professional rules of conduct. Typically, client files are retained for a minimum of 6 years after conclusion of a matter, unless a longer period is required by law.
When data is no longer required, it will be securely deleted or anonymised.
Measuring Website Usage (Google Analytics)
With your consent, we use Google Analytics 4 to understand how visitors use our website. Google Analytics sets cookies to collect aggregated, anonymised data about pages visited, time spent, and approximate location.
We have configured Google Analytics to:
- Anonymise IP addresses;
- Disable data sharing with Google for advertising purposes;
- Respect Do Not Track signals where feasible.
Google acts as an independent data controller. Data may be transferred outside Nigeria. We rely on your consent as the lawful basis.
Essential Cookies
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| umbadiwe_cookie_consent | U. Mbadiwe & Co. | Stores your cookie consent preferences | 12 months |
| __cf_bm | Cloudflare | Bot management and security | 30 minutes |
Analytics Cookies (only set with consent)
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes users | 2 years |
| _ga_* | Google Analytics | Maintains session state | 2 years |
| _gid | Google Analytics | Distinguishes users | 24 hours |
Call Tracking and Recording
Telephone calls to our offices may be recorded for training, quality assurance, and to maintain accurate records of instructions, where permitted by law. We will inform you at the start of a call if recording will occur. Recordings are stored securely and retained in accordance with our retention policy.
Downloads & Media Files
Any downloadable documents, forms, or publications on this website are provided for general information only and do not constitute legal advice. Downloading files is logged for security purposes (IP address, time, and file name). We scan all files for malware but cannot guarantee that downloads are error-free.
External Website Links & Third Parties
Our website may contain links to third-party websites, including the Corporate Affairs Commission, courts, and regulatory bodies. We are not responsible for the privacy practices or content of external sites. We encourage you to read their privacy policies.
We do not sell or trade your personal data to third parties. We only share data with trusted processors (e.g., IT providers, cloud storage) under written data processing agreements that comply with the NDPA 2023.
Social Media Usage
If you interact with our official social media pages, your personal data will be processed according to the relevant platform's privacy policy. We may collect publicly available information to respond to enquiries. We do not use social media plugins that automatically track you across our website without consent.
Contact
"If you have any queries in relation to the above please do not hesitate to contact us through any of the contact methods on our site"
Resources & Further Information
You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe our processing infringes your rights.
Nigeria Data Protection Commission (NDPC)
Website: www.ndpc.gov.ng
Email: info@ndpc.gov.ng
For further guidance on your data protection rights in Nigeria, please refer to the NDPA 2023 and the NDPC General Application and Implementation Directive (GAID) 2025. This Policy may be updated periodically to reflect legal or operational changes. The "Last Updated" date at the top indicates the most recent revision.