Last updated: 3rd July, 2025
At BLT Enterprise, your privacy and data security are core to our mission of making law simple, accessible, and trustworthy. Whether you contact us for legal advice, upload documents through our client portal, or simply browse our website, we are committed to protecting your personal information.
This policy explains what data we collect, why we collect it, how we use and protect it, your legal rights, and how you can contact us with any privacy concerns.
1. Who We Are
BLT Enterprise (“BLT Enterprise”, “we”, “us”, or “our”) is a digital-first legal consultancy firm providing legal services and tailored business legal consultancy to clients in Nigeria, the UK, and the USA.
We operate primarily online, offering remote consultations, secure document exchange, digital onboarding, and e-signing. For clients who require in-person legal services or meetings, we plan to offer select in-person services at a physical office in the near future. Details will be announced on our website and in our policies as they become available. Whether you interact with us online or offline, your data and privacy are protected to the highest standards.
2. What Data We Collect
Depending on your interaction with us, we may collect the following types of personal data:
- Contact Details: Name, email address, phone number, postal address.
- Identity Data: Date of birth, government-issued ID, passport, NIN, or similar.
- Business/Employment Data: Employer, job title, business address, professional profile.
- Client Matter Data: Information or documents shared for legal advice (contracts, corporate records, evidence, etc.).
- Payment Information: Bank details, transaction records (for billing or payments).
- Usage Data: IP address, device info, browser type, pages visited, time/date of access, cookies and tracking info.
- Communication Data: Emails, chat logs (WhatsApp, website chat), call notes, video call records (where applicable).
- Special Category Data: Sensitive information such as health, race/ethnicity, or criminal allegations, only if relevant to your legal matter and permitted by law.
3. How We Collect Data
We may collect data from you:
- When you complete online forms (contact, booking, onboarding, payment)
- Through emails, WhatsApp, and other messaging apps
- During video/voice consultations (Zoom, Google Meet, Teams, etc.)
- When you upload documents via our secure client portal
- Automatically, through website cookies and analytics tools
- From third parties (referrals, partner law firms, public records, or regulatory checks)
- From payment processors when you make payments online.
4. Why and How We Use Your Data (Lawful Basis)
We use your data only for legitimate reasons, including:
- To provide legal services: Fulfilling our contract with you (advice, representation, document preparation, etc.)
- To onboard and verify you as a client: (identity checks, KYC, conflict checks)
- To manage payments and invoicing
- To respond to your inquiries and keep you informed about your matters
- For compliance with the law: (anti-money laundering, regulatory obligations, court orders)
- For firm operations: (admin, audits, security, training, record-keeping)
- To improve our website and services: (analytics, service feedback)
- With your consent: For marketing (newsletters, legal updates, events); you may unsubscribe at any time
The core lawful bases for processing your data under the Nigeria Data Protection Act (2023), UK GDPR, and other laws are: your consent, performance of a contract, legal obligation, vital interests, public interest and our legitimate interests.
5. Who Has Access to Your Data
- BLT Enterprise staff and lawyers: Only those who need it to serve you, bound by confidentiality and secure access protocols.
- Trusted third parties: IT service providers, payment processors, e-signature services, cloud storage, or referral partner law firms.
We carry out due diligence to ensure they comply with data protection law and confidentiality. - Regulators or courts: Only if required by law or to defend your interests.
- No data sales: We do not sell or rent your information.
6. Where Your Data Is Stored & International Transfers
- All data is stored on secure cloud servers, encrypted and access-controlled.
- Because we serve clients globally, your data may be transferred to or stored in Nigeria, the UK, the USA, or other countries with adequate data protection laws.
- Where data is transferred internationally, we take steps to ensure your data remains protected, including using contracts and safeguards required by the Nigeria Data Protection Act, UK GDPR, and other applicable laws.
7. Data Security
- We use industry-standard security: encrypted cloud storage, secure email, strong passwords, firewalls, and access controls.
- All staff receive data protection and confidentiality training.
- Regular audits are conducted to detect vulnerabilities and ensure compliance.
- Only authorized users can access your data, and only for legitimate purposes.
8. How Long We Keep Your Data
- We keep your data only as long as needed to serve you, comply with the law, resolve disputes, or enforce agreements.
- For most legal matters, this means for as long as you are a client, plus a minimum statutory retention period (typically 5–7 years, unless the law requires otherwise).
- After the retention period, your data will be securely deleted or anonymized.
- You may request deletion of your data at any time, subject to our legal/regulatory obligations.
9. What are Your Rights
You have rights over your personal data, including:
- Right to be informed: About how and why we process your data.
- Right to access: You can request a copy of the data we hold about you.
- Right to correct: Ask us to fix any incorrect or outdated information.
- Right to delete: Request that we delete your data (where possible).
- Right to object: To certain processing (e.g., direct marketing).
- Right to restrict: Ask us to pause processing if you think data is inaccurate or being used unlawfully.
- Right to data portability: Get your data in a structured, machine-readable format.
- Right to withdraw consent: Where you have given consent, you may withdraw it at any time.
- Right to complain: If you’re unhappy, contact us first. If not resolved, you can contact the Nigeria Data Protection Commission (NDPC) or relevant regulator in your country.
To exercise any of these rights, email us at hellobltenterprise@gmail.com
10. Cookies and Website Tracking
- We use cookies and similar tools to make our website work, remember your preferences, and analyze site usage.
- Some cookies are essential for the site’s function; others help us improve your experience.
- You will see a cookie consent banner when you first visit. You can accept, reject, or customize your preferences at any time via the “Cookie Settings” link.
- For details, see our Cookies Policy.
11. Third-Party Links
Our website may contain links to third-party websites or services (e.g., payment platforms, partner law firms, social media). We are not responsible for their privacy practices. Please review their privacy policies when you leave our site.
12. Children’s Data
Our services are not aimed at children under 18. If we discover we have collected data from a child without parental consent, we will delete it immediately.
13. Policy Changes
We may update this Privacy Policy to reflect changes in law or our services. Updates will be posted here, with the new date. We encourage you to review this policy regularly.
14. Contact Us
If you have any questions, concerns, or wish to exercise your rights, please contact our Data Protection Officer at:
Email: hellobltenterprise@gmail.com
15. Definition
Personal data: Any information that identifies you or could be used to identify you.
Sensitive data: Information such as health, ethnicity, religion, or criminal allegations.
NDPA: Nigeria Data Protection Act 2023.
GDPR: General Data Protection Regulation (UK/EU).
FTC Act: Federal Trade Commission Act
At BLT Enterprise, your privacy isn’t just a policy, it’s a promise. We make law simple, and your data secure.