Onojah John Consulting Ltd.
PRIVACY POLICY / 2026
Good business.
Built on trust.
Your information is part of that trust. Here’s how we handle it, why we need it, and the choices that stay with you.
Clear purposes
Understand how information supports enquiries, consulting and our business operations.
Choices that matter
Learn about marketing preferences, cookies and your privacy rights.
A direct point of contact
Questions or requests? Reach us at john@enemaoj.com.
THE DETAILS, MADE CLEAR
A little clarity.
A lot of confidence.
Everything you need to know about your information, in one place.
01Who we are
Onojah John Consulting Ltd. ("we", "us" and "our") provides fractional CMO services, marketing consulting, coaching and training. This policy explains how personal information is handled when you visit enemaoj.com, contact us, or engage with our services.
Data controller: Onojah John Consulting Ltd., registered in Nigeria.
Business address: No. 1 Ikot Ndem Road, Uyo, Nigeria.
Privacy contact: john@enemaoj.com.
Telephone: +2348105580698.
We process personal information in accordance with the Nigeria Data Protection Act 2023 and other applicable data-protection requirements. We are the controller where we decide why and how your personal information is used. When we handle personal information on a client's instructions, that client is generally the controller and our role is explained in section 5.
02Information we collect
The information involved depends on how you interact with us:
- Enquiries and bookings: first and last name, email address, telephone number, company name, website address, reason for contacting us, message contents and appointment details.
- Consulting and training: professional role, business goals, project briefs, communications, meeting notes, work we produce together and information you authorise us to access in your business systems.
- Contracts and billing: contracting and billing details, invoices, payment status and transaction references.
- Website use: IP address, browser and device information, referring pages, pages requested, timestamps and security or error logs, as collected by the website.
- Preferences: marketing choices, consent records and requests concerning your information.
We receive information directly from you, automatically through website technology, and, where relevant, from your organisation, authorised colleagues, referrals or publicly available professional sources. Where required, we will tell you about information obtained from another source.
Please do not send passwords, payment-card details, health records or other sensitive personal information through the general contact form. If a project needs sensitive information, we will agree an appropriate secure process and legal basis separately.
03How and why we use information
Where applicable law requires a lawful basis, the purposes and bases for our usual activities are set out below. We use consent where required; visiting this website alone is not consent to optional processing.
Responding to enquiries and arranging consultations
We use contact details and enquiry information to reply, assess your needs and organise discussions. The basis is steps you request before a contract, or our legitimate interest in answering business enquiries where you contact us on behalf of an organisation.
Delivering services and managing relationships
We use project information and correspondence to deliver consulting, coaching or training, coordinate work and support clients. The basis is performance of our contract with you, or our legitimate interest in delivering services to the organisation you represent.
Billing, recordkeeping and legal matters
We use relevant contract and transaction records to issue invoices, administer payments and meet accounting or tax obligations. The basis is contract, applicable legal obligations, or our legitimate interest in establishing and defending legal claims.
Security and reliable operation
We use technical logs to maintain the website, investigate faults, prevent misuse and protect information. The basis is our legitimate interest in operating a secure, reliable business and, where applicable, legal obligations.
Marketing and optional measurement
If we offer newsletters or promotional communications, we use contact details and preferences with consent where required, or another legally permitted basis for relevant business communications. Optional tracking requires the basis and choices described in section 6.
When relying on legitimate interests, we consider the impact on your rights and reasonable expectations. You may object as described in section 10. If you choose not to provide information needed to answer an enquiry or perform a contract, we may be unable to provide the requested response or service. Optional marketing is not a condition of receiving consulting services.
04Marketing and communications
Service messages, such as appointment confirmations, project updates and invoices, are separate from promotional messages. If you receive marketing from us, you can opt out using the unsubscribe link provided or by emailing john@enemaoj.com.
Withdrawing marketing consent does not affect the lawfulness of earlier processing or necessary service communications. We may retain a limited suppression record so that we continue to respect your opt-out. We will obtain appropriate permission before publishing an identifiable testimonial or case study.
05Information handled for clients
Our work may involve access to a client's CRM, advertising accounts, analytics, customer lists or other business systems. Where we process personal information solely on a client's instructions, the client's privacy notice governs that processing and our written agreement sets out instructions, confidentiality, security and return or deletion requirements.
Clients are responsible for having the authority and lawful basis to provide information and access. If your information is held by one of our clients, please direct requests to that organisation. We will assist the client with requests where our agreement and applicable law require it.
We do not send personal information to external recording, transcription or AI services. Any recording or analysis undertaken within the company for an engagement will be explained in advance, with consent obtained where required.
07No sale or external sharing
We do not sell, rent or share the personal information we hold with anyone outside Onojah John Consulting Ltd. We do not appoint external providers to process that personal information on our behalf. Access within the company is limited to authorised personnel who need it for the purposes described in this policy.
We do not disclose personal information for cross-context behavioural advertising, targeted advertising or another organisation’s independent use. If disclosure is required by applicable law or a binding order, we will comply only to the extent legally required.
Third-party websites and embedded content may collect information directly from your browser. This is separate from our handling of the information you provide to the company; see section 6 for the YouTube embed and related privacy considerations.
08International processing
We do not transfer the personal information we hold to external organisations or appoint overseas providers to process it on our behalf.
If our arrangements change to involve a restricted international transfer, we will update this policy before the new processing begins and put in place the safeguards required by applicable law. Third-party content that you access through the website is described separately in section 6.
09Retention and security
We keep personal information only for as long as necessary for the purpose for which it was collected, including applicable legal, accounting and dispute-resolution requirements. The criteria depend on the record:
- Enquiries: the time needed to answer and complete relevant follow-up, taking account of whether an engagement results.
- Client and project records: the engagement period, agreed handover requirements and any applicable claim or recordkeeping period.
- Invoices and accounting records: the retention period required by the tax and accounting laws that apply to the business.
- Marketing records: the duration of the relevant permission or lawful marketing relationship; limited opt-out records are retained as needed to honour preferences.
- Technical logs and backups: the period needed for security, troubleshooting and recovery, followed by deletion or overwriting under the relevant system's retention cycle.
Legal holds may require particular records to be retained longer. When information is no longer needed, it is deleted or anonymised, subject to controlled backup cycles. You may ask us for details of the retention criteria applicable to your information.
We use technical and organisational measures appropriate to the nature and risks of the processing, including limiting access to those who need it and protecting the systems in which information is held. No online system is completely secure. Where a personal-data breach requires notification, we will notify the relevant authority and affected people as required by law.
10Your privacy rights
Depending on the law that applies and the circumstances, you may have rights to:
- Be informed about the use of your personal information and request access or a copy.
- Correct inaccurate or incomplete information.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests and object to direct marketing.
- Receive eligible information in a portable format.
- Withdraw consent at any time where processing relies on consent.
- Request applicable safeguards, including human review, in relation to qualifying automated decisions.
- Complain to a competent data-protection authority.
Email john@enemaoj.com with the subject “Privacy request” and describe what you need. We may request proportionate information to verify your identity or an authorised representative's authority. Please do not send identity documents unless we request them through an appropriate channel.
We will respond within the period required by applicable law. If a lawful exemption or extension applies, we will explain it. Requests are generally free, subject to any limited exceptions allowed by law. Exercising your rights will not result in unlawful discrimination.
You may raise a complaint under Nigerian data-protection law with the Nigeria Data Protection Commission. If UK data-protection law applies, you may contact the Information Commissioner's Office. In the EEA, you may contact your competent supervisory authority. You do not have to contact us before exercising a right to complain.
Automated decisions and human review: If you believe an automated process has affected your rights or access to our services, contact us to request an explanation, express your view or contest the outcome. Where applicable law provides protection against decisions based solely on automated processing that have legal or similarly significant effects, you may request human intervention and the other safeguards available under that law. Before introducing processing of this kind, we will provide the required information about its purpose, significance and likely consequences and establish an appropriate legal basis.
11Children and external websites
Our website and consulting services are intended for adults acting in a professional or business capacity and are not directed at children under 18. Please contact us if you believe a child has provided personal information so that we can assess and take appropriate action.
Links to social networks, videos and other external websites lead to services with their own privacy practices. Review the relevant provider's notice before sharing information. This policy describes our practices and does not replace those providers' policies.
12Changes and contact
We may update this policy to reflect changes in services, technology or legal requirements. The date at the top identifies the latest version. Where required, we will provide additional notice of material changes or seek fresh consent before a new use that requires it.
For questions about this policy, requests about your information or privacy concerns, contact Onojah John Consulting Ltd. at john@enemaoj.com or use the website contact page. Postal correspondence should be sent to the business address in section 1.