How Black Oak Legal collects, uses, stores and protects personal data in connection with this website and legal services.
Applies to:
https://www.theblackoaklegal.com
Last reviewed:
24 July 2026
Contact:
info@theblackoaklegal.com
Black Oak Legal is a Nigerian legal practice based in Ibadan, Oyo State. For the personal data described in this notice, Black Oak Legal generally acts as the data controller.
This notice applies to website visitors, prospective clients, clients, counterparties, professional contacts, suppliers, job applicants and other people whose personal data we process. A matter-specific notice or engagement term may provide additional information.
Depending on your relationship with us, we may collect identity and contact details; enquiry and consultation information; client and matter records; identification and verification information; payment and billing records; professional and employment information; communication records; technical and website-use data; and sensitive or special-category information where it is relevant and lawful to process.
Please do not submit highly sensitive documents through the initial website form. We will confirm an appropriate secure channel where documents are needed.
We may receive personal data directly from you; from a client, representative, employer or family member; from counterparties and professional advisers; from courts, registries, regulators and public records; from service providers; and through lawful website and communication technologies.
We use personal data to respond to enquiries; complete conflict and identity checks; decide whether to accept an instruction; provide legal services; communicate and manage matters; comply with professional, legal and regulatory duties; manage billing and administration; protect the firm, clients and others; improve website security and performance; manage recruitment and suppliers; and send permitted professional updates.
Our lawful basis may be consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task in the public interest where applicable, or legitimate interests that are not overridden by the rights of the data subject. Where sensitive personal data is processed, an additional lawful condition must apply.
We may share personal data where necessary with courts, regulators and public authorities; counsel, experts and other professional advisers; counterparties and their advisers; identity, payment, hosting, email, document, security, analytics and technology providers; and other recipients authorised by the client or required by law. We require appropriate confidentiality and data-protection safeguards.
Some providers or recipients may process data outside Nigeria. Where a transfer is restricted, we use an available legal mechanism and proportionate safeguards, taking account of the destination, recipient, purpose and sensitivity of the data.
We retain personal data only for as long as reasonably necessary for the purpose collected, professional and legal obligations, conflict management, limitation periods, security and record integrity. Retention periods vary by record type and matter. Data is securely deleted, destroyed or anonymised when no longer required.
We use organisational and technical measures proportionate to the data and risk. No internet transmission or storage system is completely secure, so prospective clients should use the channels and instructions we provide.
Subject to applicable law and lawful limitations, you may have rights to be informed; request access; correct inaccurate data; request deletion; restrict or object to processing; withdraw consent; request data portability; object to certain automated decisions; and complain to the Nigeria Data Protection Commission.
To exercise a right, email us and provide enough information to identify the relevant data. We may need to verify identity and may decline or limit a request where professional confidentiality, privilege, another person’s rights or a lawful exemption applies.
Our use of cookies and similar technologies is explained in the Cookie Notice. Non-essential analytics or marketing technology should not load before valid consent where consent is required.
Privacy questions and requests may be sent to info@theblackoaklegal.com. You may also complain to the Nigeria Data Protection Commission. Where the EU GDPR or UK GDPR applies to a particular processing activity, the relevant rights and complaint route may apply in addition to Nigerian law.
This Privacy Policy is effective as of 1st August 2026. We may update this policy periodically to reflect legal, regulatory, or operational changes. Any updates will be posted on our website with the revised effective date