Privacy Notice

1. Who we are

Farald Consultancy Services Limited (“Farald”, “we”, “us”) is the data controller for the personal data described in this notice. We are incorporated in the Federal Republic of Nigeria under the Companies and Allied Matters Act, registration number RC 940623, with a registered office in Abuja.

We operate across Nigeria and the United Kingdom. Depending on where you are and what we are doing with your data, this notice is given under the UK General Data Protection Regulation and the Data Protection Act 2018, the Nigeria Data Protection Act 2023, or both.

We have not appointed a Data Protection Officer, as we are not required to do so. Data protection questions are handled by our Director. Contact us at info@faraldconsultancy.com, or by telephone on +44 7424 450823 (United Kingdom) or +234 806 069 3098 (Nigeria).

2. What this notice covers

This notice covers personal data we collect through this website. It does not cover personal data we process on behalf of a client under an engagement — in those cases the client is the controller, we act as processor, and the terms are set out in the engagement contract and its data processing agreement.

3. What we collect, and why

3.1 Enquiries you send us

If you complete the contact form or email us, we collect your name, organisation, email address, the subject you select and the content of your message. If you telephone us, we may keep a note of the call.

We use this solely to respond to your enquiry and, where it leads to one, to manage the resulting engagement. We do not add enquirers to a marketing list, and we do not send unsolicited marketing.

Lawful basis. Where you are enquiring about our services, we rely on steps taken at your request prior to entering into a contract (UK GDPR Article 6(1)(b)). For general enquiries we rely on our legitimate interests (Article 6(1)(f)) in responding to people who contact us — an interest we consider proportionate, because you have chosen to contact us and we use the data for nothing else. Under the Nigeria Data Protection Act the corresponding bases are contract and legitimate interest under section 25.

3.2 Technical data from your visit

Our hosting provider records standard server log data when you load a page, including your IP address, the pages requested, timestamps, and your browser and device type. This happens automatically and is used to deliver the site, keep it available, and protect it against attack and abuse.

Lawful basis. Legitimate interests (Article 6(1)(f)) in operating and securing our own website. We do not use this data to identify or profile individual visitors.

3.3 What we do not collect

This website sets no cookies and runs no analytics, advertising or tracking of any kind. Our fonts are served from our own domain rather than a third-party font service, so no data about your visit is passed to one. See our cookie notice.

We do not ask for, and this site is not designed to collect, special category data (such as data about health, race, religion or political opinions) or criminal offence data. Please do not include such information in a contact form message.

4. Who we share it with

We use a small number of service providers, each acting as our processor:

• Cloudflare, Inc. — website hosting, DNS and security. Processes the technical data at 3.2. Global infrastructure, including servers outside the United Kingdom and Nigeria.
• Formspree, Inc. — receives and forwards contact form submissions. United States.
• Our email provider — stores and delivers our correspondence.

We do not sell personal data, and we do not share it with anyone for their own marketing. We may disclose data where we are legally required to do so, or to establish or defend legal claims.

5. International transfers

Because we operate in two countries and use providers with global infrastructure, your data may be transferred outside the United Kingdom or outside Nigeria.

Where personal data leaves the UK, we rely on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as incorporated into our providers' terms. Where personal data leaves Nigeria, we rely on the transfer conditions in section 41 of the Nigeria Data Protection Act and the cross-border provisions of the General Application and Implementation Directive.

You may ask us for details of the safeguards applying to a specific transfer.

6. How long we keep it

• Enquiries that do not lead to an engagement — deleted 12 months after our last correspondence with you.
• Enquiries that lead to an engagement — retained for the life of the engagement and then for six years from its end, to meet contractual, tax and professional record-keeping obligations.
• Server logs — retained by our hosting provider on their standard retention cycle, which is a matter of days to weeks rather than months.

7. Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

• Access the personal data we hold about you
• Rectify data that is inaccurate or incomplete
• Erase your data where there is no continuing reason for us to hold it
• Restrict our processing in certain circumstances
• Object to processing carried out on the basis of legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where we have relied on consent

Data subjects in Nigeria hold equivalent rights under Part VI of the Nigeria Data Protection Act 2023, including access, rectification, erasure, restriction, portability and objection.

To exercise any right, email info@faraldconsultancy.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive. We may ask you to verify your identity before we act.

8. Complaints

If you are unhappy with how we have handled your personal data, please tell us first — we would rather put it right. You also have the right to complain to a supervisory authority:

• United Kingdom — Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk
• Nigeria — Nigeria Data Protection Commission, Abuja. ndpc.gov.ng

9. Automated decision-making

We do not make decisions about you by automated means, and we do not carry out profiling.

10. Security

The site is served over HTTPS. We apply access controls, multi-factor authentication and least-privilege principles to the systems that hold enquiry data, and we review our providers' security posture as part of our own supplier assurance process. No transmission over the internet is completely secure, and we would ask you not to send confidential material through the contact form — tell us it exists and we will arrange a secure route.

11. Changes

We may update this notice to reflect changes in what we do or in the law. The current version is always the one published here, and the date below tells you when it last changed. Material changes affecting people whose data we already hold will be notified directly.

Last updated: 20 September 2026