A Practice Built on Discretion
The Iroko Group works with private clients on projects that are deeply personal — homes, offices, spaces that shape daily life. We have always operated with discretion. The same principle guides how we handle digital information. We collect only what is necessary, hold it only as long as it serves a purpose, and never treat your details as something to be traded or monetised.
This policy is issued in compliance with Nigeria's Data Protection Act 2023 and other applicable law. It applies to information collected through this website only. Our engagement with clients on live projects is governed by separate agreements.
What We Collect
We collect only the information you choose to share when you submit an enquiry, and a limited set of anonymous technical signals that help us understand how the website performs.
- Full name
- Email address
- Phone number, if provided
- Project type or service interest
- Budget range, if provided
- Project message or enquiry details
- Technical information such as device, browser, pages visited, and approximate location — collected anonymously through analytics
We do not collect payment information, identity documents, or sensitive personal data through this website. We do not knowingly collect information from visitors under 18.
Why We Use It
Every piece of information you share serves a specific, honest purpose. We use enquiry details to respond to your request, to understand the scope and nature of your project, to arrange consultations, and to maintain a record of our communications. Where you have accepted analytics cookies, anonymous usage data helps us improve the structure and speed of the website.
We do not use your information to build profiles for advertising, to make automated decisions about you, or to infer anything beyond what you have directly shared with us.
Our Legal Basis
We process personal information because you asked us to respond to your enquiry, because we have a legitimate business interest in operating a secure and responsive website, because we may need to process information as a step before entering a project agreement, or because applicable law requires it.
How We Protect It
Website enquiries are received over an encrypted HTTPS connection, routed through server-side validation, and stored in our internal CRM — a system accessible only to authorised team members and hosted on a secure server in France. We apply rate limits, access controls, and regular security reviews as standard practice.
No digital system is invulnerable. We therefore encourage visitors not to submit sensitive financial documents, passwords, or highly confidential project materials through the public enquiry form. Formal project documentation should be exchanged through agreed channels after engagement has begun.
Who We Share It With
We do not sell your information. We do not share it for advertising. Where necessary to operate the website and respond to enquiries, we may share information with hosting providers, email delivery providers, and analytics providers — all subject to appropriate safeguards. Team members who may contact you in response to an enquiry are bound by professional obligations of confidentiality.
International Transfers
Our server is located in France, which provides data protection standards equivalent to the EU General Data Protection Regulation. Analytics and email delivery involve service providers based in the United States operating under recognised contractual safeguards. By submitting an enquiry, you acknowledge that your information may be processed in these jurisdictions.
How Long We Keep It
We retain enquiry records for as long as reasonably necessary to manage the relationship and follow up appropriately. Enquiries that do not result in a project are typically removed within three years. Records associated with active or completed client engagements are retained for seven years in line with Nigerian commercial record-keeping practice, or longer if required by law.
Your Rights
Access
Request a copy of the personal information we hold about you.
Correction
Ask us to correct incomplete or inaccurate information.
Erasure
Ask us to delete your information, subject to lawful retention requirements.
Restriction
Ask us to limit how we use your information in certain circumstances.
Portability
Request your information in a structured, readable format.
Objection
Object to our use of your information where we rely on legitimate interests.
To exercise any of these rights, contact us at info@theirokogroup.com. We will respond within 30 days.
For details on how we use cookies and analytics, read our Cookie Policy. For the terms that govern use of this website, read our Terms of Service.