Claudenia Chartered Accountants & Tax Advisors Ltd ("Claudenia", "we", "our", "us") is committed to safeguarding the privacy of every visitor to claudenigeria.info and every client we work with. This policy explains what personal data we collect, why we collect it, how we keep it secure, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA).
1. Who we are
Claudenia is a Nigerian limited company registered with the Corporate Affairs Commission under Reg. No: 47382916. Our registered office is 14 Adeola Odeku Street, Victoria Island, Lagos 101241. We act as a data controller for the personal information of visitors to this website and clients of the firm.
2. What personal data we collect
- Identification details you submit through our contact form: name, work email, telephone number, company name and the message you send.
- Technical information: IP address, browser type, device type, referring URL, pages visited, time on page. We rely on aggregate technical logs to improve site reliability.
- Cookie identifiers when you grant consent through our cookie banner.
- Engagement data: information you share during paid client work, including financial records, tax documents and identity documents required for KYC.
3. Why we process your data
We process personal data for the following purposes and on the following legal bases:
- Consent — for non-essential cookies and the marketing emails you opt into.
- Contract — to deliver the professional services described in our engagement letter.
- Legitimate interest — to keep the website secure, prevent fraud and respond to enquiries.
- Legal obligation — to comply with the FIRS, FRC of Nigeria, NDPA 2023, AML Act 2022 and any court order.
4. How long we keep your data
Enquiry data submitted through the website is kept for 24 months unless you become a client, in which case it is moved to your engagement file. Client engagement files are retained for seven years after the engagement ends, as required by Nigerian tax and AML legislation. Aggregated technical logs are kept for 13 months.
5. Who we share data with
We never sell personal data. We share it only with: (a) the regulators we are legally required to report to; (b) our infrastructure providers (Microsoft 365, Xero, AWS Lagos region) under written data-processing agreements; and (c) professional sub-contractors under confidentiality agreements when required for a specific engagement.
6. International transfers
Some of the cloud services we use process data outside Nigeria. In every case the provider has either binding corporate rules, standard contractual clauses or an adequacy decision approved by the Nigeria Data Protection Commission (NDPC).
7. Cookies
We use a small set of cookies. Strictly necessary cookies enable the site to function. Preference cookies remember your cookie choices. We do not use third-party advertising or tracking cookies. You can change your preference at any time via the cookie banner.
8. Your rights under the NDPA 2023
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. You may also lodge a complaint with the NDPC. To exercise any of these rights, write to info@claudenigeria.info with the subject line "Data Subject Request" and we will respond within 30 days.
9. Security
Claudenia is ISO/IEC 27001 certified. Personal data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is granted on a strict need-to-know basis with mandatory multi-factor authentication.
10. Updates to this policy
We update this policy whenever we introduce a new processing activity or whenever regulation changes. The "last updated" date at the top of the page always reflects the latest revision. Material changes will be highlighted on this page for 30 days.
11. Contact
Questions or complaints about this policy can be sent to our Data Protection Officer: info@claudenigeria.info · +1 (555) 789-0142 · 14 Adeola Odeku Street, Victoria Island, Lagos 101241.