CICL — Privacy Policy

1. Who this Policy covers

This Policy applies to:

Visitors to our website;
Individuals who submit forms (such as contact, booking, proposal, or subscription forms);
Employees, trainees, or representatives of organizations we work with;
Training participants and programme applicants; and
Job applicants and candidates whose details we process as part of talent or HR services.

By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Personal data we collect

2.1 Information you provide directly

We may collect personal data you provide when you interact with us, including when you:

Fill in a contact, booking, or proposal form;
Register for a training, workshop, or event;
Subscribe to our newsletter or mailing list;
Share your CV or professional profile for recruitment or advisory services; or
Communicate with us via email, phone, or other channels.

This may include:

Full name and contact details (email, phone number, address);
Job title, company name, and professional information;
CVs, academic history, work experience, and skills (for recruitment or career-related services);
Information about your organization, team, or project (for consulting engagements);
Payment or billing information (processed via secure third-party providers); and
Any other information you choose to provide in free-text fields or communications.

2.2 Information we receive from clients

In the course of HR, talent, or training engagements, client organizations may share personal data about their employees, trainees, or candidates with us. This may include:

Names and contact details;
Job roles, departments, and reporting lines;
Performance or assessment data relevant to talent management and training; and
Attendance records or feedback data from training or consulting sessions.

Clients are responsible for ensuring they have the right to share such data with us and for informing their people that their data may be processed by CICL.

2.3 Information collected automatically

When you visit our website, we may automatically collect certain information through cookies and similar technologies, such as:

IP address and approximate location;
Browser type, device type, and operating system;
Pages visited and time spent on our site; and
Referral sources (how you arrived on our website).

This information helps us improve our website, understand usage patterns, and enhance user experience.

3. Legal basis for processing

We process personal data in accordance with applicable data protection laws (for example, the Nigerian Data Protection Regulation (NDPR) and any other relevant laws where our clients or users are located). Our legal bases may include:

Consent: Where you have given us explicit consent (for example, subscribing to newsletters or marketing updates).
Contract: Where processing is necessary to enter into or perform a contract with you or your organization.
Legal obligation: Where we need to comply with legal or regulatory requirements.
Legitimate interests: Where processing is necessary for our legitimate business interests (such as improving our services or securing our systems) and these are not overridden by your rights and interests.

4. How we use personal data

We may use personal data for the following purposes:

To respond to enquiries and communicate with you regarding our services;
To plan, deliver, and evaluate consulting projects and training programmes;
To manage registrations, attendance, and certification for courses and events;
To provide career or HR-related services, such as CV review, recruitment support, or talent assessments;
To send you updates, insights, or marketing communications (where permitted);
To maintain the security and integrity of our website and systems;
To comply with legal, regulatory, or accounting obligations; and
To improve our services, content, and user experience.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to remember your preferences, analyse traffic, and improve performance. Some cookies are essential for the website to function properly, while others help us understand how visitors use our site.

You can usually control or disable cookies in your browser settings. However, turning off certain cookies may affect the functionality of the website.

Where required by law, we will ask for your consent before using non-essential cookies.

6. How we share personal data

We do not sell your personal data. We may share personal data with:

Service providers: Third-party vendors who support our operations (for example, cloud hosting, email delivery, video conferencing, payment processing, analytics, or learning platforms). These providers are required to handle data securely and only in accordance with our instructions.
Client organizations: Where we provide services to your employer or organization (for example, training or consulting), we may share relevant information such as attendance records, feedback, or assessment outcomes with them.
Professional advisers: Such as auditors, lawyers, or consultants, where necessary for our business or legal protection.
Legal and regulatory authorities: Where required by law, regulation, or court order.
Business transfers: In the event of a merger, acquisition, or other business restructuring, personal data may be transferred as part of the transaction, subject to appropriate safeguards.

7. International data transfers

Some of our service providers or partners may be located in countries outside your own. Where this results in the transfer of personal data across borders, we take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your data remains protected (for example, through contractual safeguards).

8. Data security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or destruction. These may include:

Access controls and role-based permissions;
Use of secure, reputable cloud and IT providers;
Regular updates and monitoring of our systems; and
Confidentiality obligations for our staff and partners handling personal data.

However, no system is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk.

9. Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law, regulation, or professional obligations. Retention periods may vary depending on:

The nature of the data;
The purpose of processing; and
Legal, tax, or regulatory requirements.

When personal data is no longer needed, we will take reasonable steps to delete, anonymise, or securely destroy it.

10. Your rights

Depending on applicable law, you may have rights in relation to your personal data, including:

The right to request access to the personal data we hold about you;
The right to request correction of inaccurate or incomplete data;
The right to request deletion of your data in certain circumstances (for example, where it is no longer necessary for the purposes collected);
The right to object to or request restriction of processing in certain situations;
The right to withdraw consent where processing is based on your consent (without affecting processing that has already occurred);
The right to opt out of marketing communications at any time; and
The right to lodge a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us using the details in the Contact us section below. We may need to verify your identity before responding to your request.

11. Children's data

Our website and services are primarily aimed at organizations and adult professionals. We do not knowingly collect personal data from children below the age of 18 without appropriate consent or authorization.

If you believe that we have collected personal data from a child without lawful basis, please contact us so that we can take appropriate steps.

12. Third-party websites

Our website may contain links to third-party websites or services that are not operated by CICL. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any external sites you visit.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. When we do, we will update the “Last updated” date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of our website or services after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle personal data, please contact us:

Conceptual Integrated Consulting Limited (CICL)
Email: info@ciconsult.com.ng
Phone: +234 0802 857 7534
Address: [Insert registered office address here]