PRIVACY POLICY

This Privacy and Data Protection Policy (hereinafter the Policy) defines the regulation of the relationship between CrestHall Attorneys, (hereinafter the Firm) and YOU (hereinafter the Data Subject) regarding the use of your personal data.

All data subjects are required to read this policy to understand how the Firm collects and processes personal data and what security measures are being applied.

While conducting its activities, the Firm adheres to all conditions and requirements stipulated by the current legislation in force in Nigeria including but not limited to the Nigeria Data Protection Regulation (NDPR) as well as by other international legislative acts concerning data protection, applicable in Nigeria.

In collecting and using of the personal data, the Firm is subject to a variety of the legislation controlling how such activities may be carried out and the safeguards that must be put in place to data protect.

This Policy applies to all Firm’s employees, independent contractors, stakeholders and all other subjects that directly or indirectly participate in the personal data processing, including Data Subjects who visit the website https://www.cresthall.legal/.

This Policy sets out how the Firm uses, processes and stores the Data Subjects’ personal information. The Firm will obtain that information from User with his/her permission and consent, or may receive personal data from Social media to whom Use rhas given consent to pass this information on to the Firm according to this Policy.

The Data Subjects have a right to apply to the Firm about his/her personal data breach if he/she becomes aware of it earlier than the Firm.

PERSONAL INFORMATION

Personal information means information that would allow a third party to identify or locate a particular person. It includes, without limitation, your full name, email address, address, telephone number. CrestHall only collects personal information if that information is voluntarily provided by you.

In order to access and utilize certain products or services provided by CrestHall, you may be required to create a user account or to have our customer service personnel create one on your behalf and to provide certain Personal Information, such as your full name, an email address, telephone number, a user name and/or a password, etc. You are under no obligation to provide this information to CrestHall. However, if you decide not to share this information, you may be unable to create an account on the Site and/or you may be unable to fully utilize all or some of the Services.

USER AGE

The Site and Services are general audience services, and are not directed to individuals under 18 years of age. If you know that the Firm processes data of person under 18 years old, please inform us about this by sending an email to: support@cresthall.legal.

INFORMATION IS SUBJECT TO ATTORNEY-CLIENT PRIVILEGE

By using the Site and/or Services, an attorney-client relationship will be created with the Firm. Accordingly, communications between you and CrestHall are protected by this Privacy Policy and are protected by attorney-client privilege and an attorney’s duty of confidentiality.

WITHDRAWAL OF CONSENT

The User is entitled to withdraw the consent at any time he/she wishes. The withdrawal of the consent is considered to be properly made after the User has sent appropriate letter of withdrawal to support@cresthall.legal.

The appropriate request for withdrawing of the consent shall be examined within 72 hours since a moment the respective form of withdrawal is received, and the adequate decision will be made by the Firm.

SECURITY

The Firm is responsible for ensuring that any personal data that Firm holds and for which they are responsible, is kept securely and is not under any conditions disclosed to any persons unless that persons has been specifically authorized by Firm to receive that information and has entered into a confidentiality agreement.

All personal data should be accessible only to those who need to use it under internal documentation of the Firm. The personal data shall be treated with the highest security and must be kept encrypted.

The User Information we collect is stored on a secure, password-protected server and only authorized personnel have access to your information. We use commercially reasonable encryption technologies with respect to the receipt and transfer of User Information you submit to us via the Site and Services, including using SSL technology for certain sensitive information. CrestHall does not guarantee that its security measures will not be circumvented or breached or that your User Information will not be accessed by, used by, modified by or disclosed to a third party. CrestHall is not responsible for any such circumvention or breach by any third party. Additionally, it is solely your responsibility, and not the responsibility of the Firm to protect the confidentiality of your password and login credentials.

DATA BREACH NOTIFICATION

The Firm takes all reasonable steps to minimize the risk of the personal data breach while processing the personal data.

In the case of a personal data breach, the Firm shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of the Data Subjects.

The risk assessment the Firm has to carry out will have determined whether the risk to the rights and freedoms of the data subjects affected is judged to be sufficiently high to justify notification to them.

Also, in the case of a personal data breach, which is likely to result in a high risk to the rights and freedoms of the Data Subjects, the Firm shall without undue delay notify the appropriate User that the personal data of which were breached.

If measures have subsequently been taken to mitigate the high risk to the Data Subjects, so that it is no longer likely to happen, then communication to the User is not required by the NDPR.

The Firm documents all personal data breaches, comprising the facts relating to the personal data breach, its effects and the remedial action taken.

The respective processor is obligated without undue delay to notify the Firm about the breach of the personal data while processing such personal data under the Firm’s instructions.

The Firm does not sell, trade or transfer personal data to any legal persons or individuals.

THIRD PARTY WEBSITES

The Site may contain links to third party websites. By accessing and/or using a linked third party website, you may be disclosing your personal information to such linked website. Therefore, you should carefully review the privacy policies of these other websites. If you are not comfortable with the policies of a linked website, you should not access and/or use that website. The Firm is not responsible for the policies (privacy or otherwise) or the content, services or products offered by or through any third party website. It is solely your responsibility to review the privacy policy and other policies of third party websites to confirm that you understand and agree with their policies.

The Firm uses third parties to provide card and other payment processing services, for the Site and/or Services. When you make any payment on or through the Site, you will be required to provide the Firm and/or its authorized third party agents with financial information and related payment information. The Firm and its third party agents may retain the details of financial transactions or payments you make on or through the Site.

UPDATING YOUR INFORMATION AND DELETING YOUR ACCOUNT

Once you have set up your account or a customer service representative has set up an account for you at your request, you can at any time access your account to add, delete or modify any information which you have provided. Should you ever decide to delete your account, you may do so by emailing us at support@cresthall.legal. Please note that even after you terminate your account or delete or modify information from your profile, copies of the original information may remain viewable on the Site and/or elsewhere to the extent that your information was publicly posted by you or with your authorization, previously shared with others, or otherwise distributed pursuant to your privacy settings. Additionally, even if you have requested that your User Information be deleted, CrestHall may retain a record of certain Personal Information.

CHANGES TO THIS PRIVACY POLICY

The Firm may revise this Policy from time to time. If the Firm makes material changes to this Policy, it will notify the Data Subjects by posting a notice on the Website. By continuing to access or use the Website, Visitors agree to the revised Policy.

CONTACT US

If you have any questions about this Privacy Policy or to report any privacy concerns, please email us at support@cresthall.legal