Privacy Policy

Carthena Advisory Limited (“Carthena Advisory”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (carthenaadvisory.com), engage with our services, or communicate with us.

By accessing our website or providing your personal information to us, you agree to the practices described in this policy.

1. Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly: When you complete our contact form, subscribe to our newsletter, register for a training programme, or engage our advisory services, we may collect your full name, email address, phone number, company or organisation name, job title, and the content of your enquiry or message.

Information Collected Automatically: When you visit our website, we may automatically collect technical data including your IP address, browser type and version, operating system, referring website, pages visited and duration of visit, and approximate geographic location derived from your IP address.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand how visitors interact with our site. You can manage your cookie preferences through the consent banner displayed when you first visit our website.

2. How We Use Your Information

We use the personal information we collect for the following purposes: to respond to your enquiries and provide the information or services you have requested; to deliver advisory, consulting, and training services; to send you our newsletter and thought leadership content where you have opted in to receive these; to improve our website, services, and user experience; to comply with applicable legal and regulatory obligations; and to protect our legitimate business interests, including fraud prevention and security.

3. Legal Basis for Processing

We process your personal information on the following legal grounds: your consent, where you have provided it (for example, subscribing to our newsletter); the performance of a contract, where processing is necessary to deliver services you have engaged us for; our legitimate interests, including improving our services, marketing our capabilities, and ensuring the security of our website; and compliance with legal obligations applicable to our business.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in limited circumstances with trusted service providers who assist us in operating our website, conducting our business, or delivering services to you, provided they agree to keep your information confidential; with professional advisers including lawyers, auditors, and insurers where necessary; and with regulatory authorities or law enforcement agencies where we are required to do so by law or to protect our legal rights.

5. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions and newsletter subscriber data are retained for a maximum of three years from your last interaction with us, unless you request earlier deletion.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit using SSL/TLS, secure hosting infrastructure, and restricted access to personal data on a need-to-know basis. While we take reasonable steps to protect your information, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information: the right to access the personal information we hold about you; the right to request correction of any inaccurate or incomplete data; the right to request deletion of your personal information; the right to restrict or object to processing of your data; the right to data portability; and the right to withdraw consent at any time where processing is based on your consent.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

8. Cookies

Our website uses cookies to distinguish you from other users and to provide a better browsing experience. We use strictly necessary cookies required for the website to function properly, and analytics cookies that help us understand how visitors use our website so we can improve it.

You can manage your cookie preferences through the consent banner displayed on your first visit, or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

10. International Data Transfers

Where we transfer your personal information outside Nigeria, we ensure that appropriate safeguards are in place to protect your data in accordance with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws.

11. Children’s Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us at:

14. Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.