Data Privacy Statement

This statement sets out key information about our processing of personal data collected via this website.

Forvis Mazars in Nigeria is committed to protecting your privacy and handling your personal data in a transparent, lawful manner. This Privacy Policy explains how and why we collect, use, disclose, store, and protect personal data when you visit our website or otherwise interact with us online. It applies to our website and its associated subdomains (collectively, the "Website"). By accessing or using this website, you acknowledge that you have read and understood this Privacy Policy and agree to our handling of your personal information as described herein.

Personal data we process

The personal data we process as a result of your visiting our website depends on the data you provide to us. If you access our site but do not interact further with us, we will only process data contained in cookies which are necessary to be able to run our site (see ‘Cookies’ for more info) and any additional cookie you authorise. Should you decide to interact with us by, for example, submitting a request form, we will process the personal data you provide for the purposes stated on the form. Some fields are mandatory, as without them, we will be unable to make further contact with or identify you to process your request.

We process personal data collected via our website and other sources for the purposes set out in this statement.

Legal basis for processing

We collect and process Personal Data only where we have a lawful basis to do so under the NDPA 2023, and based on the following:

Consent - you have granted us consent to do so.
Contractual necessity - we require it to perform our obligations under our terms and conditions and other contractual obligations.
Legal obligation - to comply with legislative and regulatory requirements, especially as it relates to taxation and social security contributions.
Legitimate interest - for our legitimate business interests.
Vital interests - to protect your vital interests.

Use of personal data

We may process your personal data collected through our website for the purposes outlined below:

Responding to enquiries: When you raise an enquiry with us, we will use your information to process and respond to your request.
Understanding our audience: We collect certain data to enable us to understand the scope, reach and effectiveness of our brand and business activities, including our website and publications made available through it.
Recruitment and personnel administration: If you apply for a job through our website, we collect your personal data to consider your application and assess your suitability for employment.
Security, quality and risk management: Personal data may be processed in the context of maintaining security and within the scope of internal quality and risk analysis.
Direct marketing: We may process personal data for direct marketing purposes to promote and develop our services and to provide you with information we think will be of interest to you. In all cases, we will give you the opportunity to opt out of our direct marketing activities. Opt-out can be achieved by responding using the unsubscribe options contained within the information you have received or by contacting us.

All personal data submitted through this site may be used by us in an anonymised form to assess and improve the services delivered herein and as part of our wider business development activities.

Disclosures of personal data

We may engage trusted third-party service providers to perform functions and provide services to us, such as hosting and maintaining our servers and the website, database storage and management, e-mail management and customer service. We may share your personal information, and possibly some non-personal information, with these third parties to enable them to perform these services for us and for you.

We may share portions of our log file data, including IP addresses, for analytics purposes with third parties such as web analytics partners. If your IP address is shared, it may be used to estimate general location and other technographics such as connection speed, whether you have visited the website in a shared location, and the type of device used to visit the website. They may aggregate information about our advertising and what you see on the website and then provide auditing, research, and reporting for us.

We may also disclose your personal data to third parties where we are required to do so by law, to our regulators, in response to claims or legal process (including subpoenas), to protect our rights and interests or those of a third party, to ensure the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules, and regulations.

When we disclose your personal data to third parties who perform services on our behalf, we ensure that such service providers process your personal data only in accordance with our instructions and applicable data protection laws.

Affiliates

We share personal data with our Corporate Affiliates (any person or entity which directly or indirectly controls, is controlled by, or is under common control with us) where we have collected it on their behalf, where you have sent us a request concerning them, where to do so is necessary for administrative or security-related purposes, or to enable them to provide professional services to their clients or prospective clients. Any information relating to you that we provide to our Corporate Affiliates will be treated in accordance with the terms of this Privacy Policy.

Use of email address

By submitting your email address on this website, you agree to receive email communications from us. You can cancel your participation in any of our email lists at any time by clicking on the opt-out link or other unsubscribe option that is included in the respective email list. We only send emails to people who have authorized us to contact them, either directly, or through a third party. We do not send unsolicited commercial emails, because we hate spam as much as you do.

By submitting your email address, you also agree to allow us to use your email address for customer audience targeting on sites like Facebook, where we display custom advertising to specific people who have opted-in to receive communications from us. Email addresses submitted only through the contact page will be used for the sole purpose of sending you information and updates pertaining to your request. If, however, you have provided the same email address to us through another method, we may use it for any of the purposes stated in this Policy. Note: If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

Data retention period

We keep your information only so long as we need it to provide services to you and fulfil the purposes described in this policy. This is also the case for anyone that we share your information with and who carries out services on our behalf. When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we either remove it from our systems or depersonalize it so that we cannot identify you.

Data security measures

We implement appropriate technical and organizational measures to protect your personal information when you enter, submit, or disclose your personal information on our website. We offer the use of a secure server. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our database only to be accessible by those authorised with special access rights to such systems and are required to keep the information confidential. While we use reasonable efforts to safeguard your personal information, no security system is completely secure or foolproof, and we cannot guarantee absolute security. If any applicable law imposes any non-disclaimable duty to protect your personal information, you agree that intentional misconduct will be the standard used to measure our compliance with that duty.

Cross-border data transfer

Information collected via our website, through direct interactions with you, or from the use of our services may be transferred from time to time to our offices or personnel, or to third parties, located throughout the world, and may be viewed and hosted anywhere in the world, including countries that may not have laws of general applicability regulating the use and transfer of such data. Where we transfer your data to a country which has not been recognized by the NDPC as providing adequate protection, we ensure that appropriate safeguards are in place, including:

Contractual safeguards
Intra-group data protection agreements
Transfers necessary for legal claims, public interest, or vital interest.

We rely on consent for cross-border transfers only where required and permitted by law.

Updating or correcting personal data

You have the right to request the restriction of certain uses and disclosures of personally identifiable information. You can contact us to (1) update or correct your personally identifiable information, and (2) change your preferences with respect to communications you receive from us. Such updates, corrections, changes, and deletions will have no effect on other information that we maintain or information that we have provided to third parties in accordance with this Privacy Policy prior to receiving your request, To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you profile access or making corrections. You are responsible for always maintaining the secrecy of your unique password and account information.

You should be aware that it is not technologically possible to remove every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your information may exist in a non-erasable form that will be difficult or impossible for us to locate. After receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be promptly updated, corrected, changed, or deleted as appropriate to the extent reasonably and technically practicable.

Data subject rights

 Under the Nigerian Data Protection Act 2023, you have the right to:

Request access to your Personal Data (commonly known as a “Data Subject Access Request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate Personal Data we hold about you corrected, though we may need to verify the accuracy of the new Personal Data you provide to us.
Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with applicable laws. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate basis to process your information which override your rights and freedoms.
Request restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios:

If you want us to establish the data’s accuracy.
Where our use of the Personal Data is unlawful, but you do not want us to erase it.
Where you need us to hold the Personal Data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your Personal Data, but we need to verify whether we have overriding legitimate basis to use it.

Request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Exercising data privacy rights

If you wish to exercise any of the rights set out above, please contact us via our DPO – esther.ajogi@forvismazars.com

If you are an end-user and wish to update, delete, or receive any information we have about you, you may do so by contacting communication.ng@forvismazars.com

Governing law

This Privacy Policy is governed by the Nigerian Data Protection Act 2023, and the General Application and Implementation Directive 2025. You consent to the exclusive jurisdiction of the Nigerian courts in connection with any action or dispute arising between the parties under or in connection with this Privacy Policy.

The laws of Nigeria, excluding its conflicts of law rules, shall govern this Agreement and your use of the website. Your use of the website may also be subject to other local, state, national, or international laws.

By using our website or contacting us directly, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you should not engage with our website or use our services. Continued use of the website, direct engagement with us, or following the posting of changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept those changes.

Consent

We have updated our Privacy Policy to provide you with complete transparency into what is being collected when you visit our website and how it is being used. By using our website, or registering an account, you hereby consent to our Privacy Policy and agree to its terms.

Third-party services

We may display, include or make available third-party content (including data, information, applications, and other product services) or provide links to third-party websites or services (“Third-Party Services”).

You acknowledge and agree that we shall not be responsible for any Third-Party Services, including their accuracy, completeness, timeliness, validity, copyright compliance, legality, decency, quality, or any other aspect thereof. We do not assume and shall not have any liability or responsibility to you or any other person or entity for any Third-Party Services.

Third-Party Services and links thereto are provided solely as a convenience to you, and you access and use them entirely at your own risk and subject to such third parties’ terms and conditions.

Cookies

Forvis Mazars in Nigeria uses “Cookies” to identify the areas of our website that you have visited. We use cookies to enhance the performance and functionality of our website.

For further information, please consult our Cookies page.

Changes to this privacy statement

This privacy statement was last updated in January 2026. We may amend it from time to time. Any changes will be published on this page and we recommend you check here regularly to ensure you remain in agreement with our data processing activities.