Privacy policy.

Last updated: June 22, 2026

This policy explains how Old Stone Legal (“we”, “us”, “our”) handles personal information when you visit our website, make an enquiry, or instruct us. We are committed to protecting your privacy and to handling your information lawfully and transparently in each jurisdiction in which we operate, including Nigeria, the United Kingdom and Canada.

Who we are

Old Stone Legal is a law firm operating from offices in Lagos and Abuja (Nigeria), London (United Kingdom) and Winnipeg (Canada). For the purpose of data protection law, the relevant Old Stone Legal entity in the jurisdiction handling your matter is responsible for your personal information. Our contact details are set out at the end of this policy.

Information we collect

We may collect and process the following categories of information:

• Identity and contact details, such as your name, email address, telephone number and postal address.
• Information you provide when making an enquiry or instructing us, including details of your matter.
• Information necessary to meet our legal and regulatory obligations, such as identity verification for anti-money-laundering checks.
• Technical information about your visit to our website, such as your device, browser and how you use the site, collected through cookies and similar technologies.

How we use your information

We use personal information to respond to enquiries, to provide legal services, to carry out the checks the law requires of us, to manage our relationship with you, to operate and improve our website, and to comply with our legal and regulatory obligations.

Our lawful basis

Where data protection law requires a lawful basis for processing, we rely as appropriate on your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate interests in operating and promoting our practice in a way that does not override your rights. The applicable basis depends on the jurisdiction and the circumstances.

Sharing your information

We do not sell your personal information. We may share it with trusted service providers who support our practice, with other Old Stone Legal offices or members of our global network where your matter requires cross-border coordination, and with courts, regulators or authorities where we are required or permitted to do so by law.

International transfers

Because we operate across more than one country, your information may be transferred between our offices and to our network. Where information is transferred across borders, we take steps to ensure it remains protected to the standard required by the applicable law.

How long we keep it

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory and professional retention requirements, after which it is securely deleted or anonymised.

Your rights

Depending on your jurisdiction, you may have rights to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us using the details below. We will respond in accordance with the law that applies to you.

Cookies

Our website uses cookies and similar technologies. Please see our cookie policy for details of the cookies we use and how to manage them.

Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the relevant supervisory authority: the Nigeria Data Protection Commission (NDPC) in Nigeria, the Information Commissioner’s Office (ICO) in the United Kingdom, or the Office of the Privacy Commissioner of Canada (OPC) in Canada.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Please check back periodically for the current version.

Contact us

For any question about this policy or your personal information, contact us at [privacy@oldstonelegal.com] or write to us at [registered office address]. [Where a Data Protection Officer is appointed, insert contact details here.]

This policy is a draft for review and should be confirmed by the firm and its data protection adviser before publication.