Privacy Policy & Data Protection Charter

1. Information We Collect

In the course of providing corporate advisory, accounting, taxation, auditing, and management consulting services, we may collect and process information provided directly by client representatives, including:

• Corporate identifiers: company name, RC number, registered office address, and statutory leadership details.
• Official contact particulars: names, designations, corporate email addresses, and phone numbers of authorized representatives.
• Financial & operational data: management accounts, trial balances, tax records, employee payroll schedules, and standard operating procedures shared under mandate.
• Electronic correspondence and inquiries submitted through our website portal.

2. Lawful Basis & Purpose of Processing

We process corporate and personal data strictly in alignment with the Nigeria Data Protection Act (NDPA) and applicable professional standards for the following legitimate purposes:

• Executing signed client engagement letters and advisory mandates.
• Preparing statutory financial reports, tax returns, and audit documentation.
• Facilitating administrative filings with statutory authorities such as the Corporate Affairs Commission (CAC) and Federal Inland Revenue Service (FIRS).
• Responding to commercial inquiries and managing client relationship cadences.

3. Information Security & Technical Safeguards

H3 Advisory deploys a secure by design architecture to protect data against unauthorized access, loss, or alteration. Our infrastructure incorporates:

4. Non-Disclosure & Third-Party Transfers

We do not sell, rent, or monetize client data. Information is disclosed externally only under the following explicit conditions:

• When expressly authorized by the client in writing to fulfill a statutory filing (e.g. CAC, FIRS, or relevant State Revenue Services).
• Where compelled by enforceable statutory legislation, court order, or competent regulatory subpoena.

5. Data Retention & Erasure

Client records and working papers are retained in accordance with statutory accounting retention laws in Nigeria (typically 6 years from the relevant fiscal period) or as specified in our formal engagement charter, after which they are securely archived or purged.

6. Inquiries & Data Protection Contact

For questions regarding this charter, or to exercise data rights under the Nigeria Data Protection Act, please contact our administrative secretarial office: