1. Introduction
   Gray & Silicon Legal Advisors (“we,” “us,” or “our”) is committed to protecting the privacy and security of personal information in compliance with the Nigerian Data Protection Act. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our legal services and website.
2. Data Controller
   Gray & Silicon is the data controller responsible for processing personal data under this Privacy Policy. If you have any questions regarding the processing of your personal data, you may contact us at: admin@graysilicon.com
3. Information We Collect
   We may collect the following types of personal data:

• Contact information (name, email address, phone number, mailing address)
• Identification details (passport, national ID, or business registration information)
• Financial information for payment processing
• Case-related information provided by clients
• Technical information (IP address, browser type, device information, and website usage data)

4. How We Use Your Information
   We process personal data for the following purposes:

• Providing legal services and advice
• Communicating with clients and responding to inquiries
• Complying with legal and regulatory requirements
• Improving our website and client experience
• Processing payments and managing billing

5. Legal Basis for Processing
   Under the Nigerian Data Protection Act, we process personal data based on the following legal bases:

• Contractual necessity – To perform our obligations under legal service agreements.
• Legal obligations – To comply with applicable laws and regulations.
• Legitimate interests – To enhance our services, ensure security, and prevent fraud.
• Consent – Where required, we will obtain explicit consent before processing data.

6. Information Sharing and Disclosure
   We do not sell or rent personal data. However, we may share personal data with:

• Courts, regulators, and law enforcement agencies when required by law.
• Third-party service providers assisting in legal, IT, or payment services under NDPA-compliant agreements.
• Affiliated firms or consultants assisting in legal matters.
• Business partners, only with client consent.

7. Data Security
   We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse, in compliance with NDPA security principles.
8. Data Retention
   We retain personal data only for as long as necessary to fulfill legal obligations, provide services, and resolve disputes, in accordance with NDPA principles. When data is no longer needed, we securely delete or anonymize it.
9. Your Rights Under GDPR
   Under the NDPA, you have the following rights:

• Right of access – Request a copy of your personal data.
• Right to rectification – Correct inaccurate or incomplete data.
• Right to erasure – Request deletion of your data under certain conditions.
• Right to restriction of processing – Request limited processing of your data.
• Right to data portability – Receive your data in a structured, commonly used format.
• Right to object – Object to processing based on legitimate interests.
• Right to withdraw consent – Withdraw consent at any time, where applicable.
• Right to lodge a complaint – File a complaint with a data protection authority.

To exercise these rights, please contact us at admin@graysilicon.com

11. Cookies and Tracking Technologies
    We use cookies and similar tracking technologies to enhance user experience and analyse website performance. For more information, please refer to our Cookie Policy.
12. Third-Party Links
    Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
13. Changes to This Policy
    We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated effective date.
14. Contact Us
    For privacy-related inquiries or to exercise your NDPA rights, please contact us at: admin@graysilicon.com