Privacy Policy
Effective 1 August 2026
1. Introduction
Ephrata Consultancy Ltd (“Ephrata”, “we”, “us”, or “our”) is committed to protecting the privacy of clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in connection with our immigration and global mobility, international education, recruitment, business and international expansion, and travel services, and describes your rights under the Nigeria Data Protection Act 2023 (“NDPA”) and its General Application and Implementation Directive.
This Policy covers personal data we process about you as a website visitor, as an enquirer, and as a client during a service engagement. It does not cover data held by the third parties to whom an application is submitted, such as immigration authorities, embassies, or educational institutions, which handle that data under their own policies.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
Ephrata Consultancy Ltd is the data controller responsible for personal data processed through this website and our service engagements. You can reach us at info@ephrataconsultancy.com for any privacy-related queries.
3. Personal Data We Collect
Depending on how you interact with us, we may collect:
- Identity and contact data: full name, email address, phone number, and mailing address.
- Engagement data: the service you’re interested in and the content of any message or inquiry you send us.
- Case-related documents: where you engage us for immigration, education, recruitment, or relocation services, we may collect identification and travel documents (such as passport data), academic records, employment and financial history, family and relationship details, and other supporting documentation necessary to that engagement.
- Sensitive data: some applications require information the NDPA treats as sensitive personal data — for example data revealing health, or biometric and immigration-history details. We collect this only where it is required for the specific application you have engaged us to prepare, and we handle it with additional restrictions on access and retention (see section 9).
- Technical data: IP address, browser type, and usage data collected automatically when you visit our website.
4. How We Use Personal Data
We process personal data to:
- Respond to inquiries and provide requested services.
- Prepare and submit applications on your behalf (visa, admission, sponsorship, or employment applications), where you have engaged us to do so.
- Communicate with you about the status of your engagement.
- Comply with legal and regulatory obligations.
- Improve our website and services.
5. Legal Basis for Processing
We process personal data on the basis of your consent, the necessity of processing to perform a contract with you (such as a service engagement), and our legitimate interests in operating and improving our consultancy, in each case consistent with the NDPA.
6. Sharing and International Transfer of Data
Where necessary to carry out your instructions, we may share personal data with relevant embassies, consulates, immigration authorities, educational institutions, employers, or other third parties involved in your application or placement. We also use service providers (such as email delivery providers) to operate our website and communications.
Some of these recipients may be located outside Nigeria. Where we transfer personal data outside Nigeria, we do so only where permitted under the NDPA, including where the transfer is necessary for the performance of a contract with you or the destination provides an adequate level of data protection.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including any legal, accounting, or reporting requirements, after which it is securely deleted or anonymized.
8. Your Rights
Under the NDPA, you have the right to:
- Be informed about how your personal data is processed.
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data, subject to legal exceptions.
- Object to or restrict certain processing of your data.
- Request data portability, where applicable.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.
To exercise any of these rights, contact us at info@ephrataconsultancy.com.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, or alteration.
Access to your case documents is limited to the personnel working on your engagement. Sensitive documents (identification, financial, health, and biometric-related records) are stored with restricted access, are not used for any purpose beyond your engagement, and are securely deleted or returned once the engagement has concluded and any legal retention period has passed.
10. Testimonials, Photographs, and Marketing
We do not use your name, photograph, likeness, story, or any quote from you in marketing, on our website, or in any other public material without your specific, informed, written consent for that use.
Any such consent is voluntary, is limited to the use described when it is given, and can be withdrawn at any time by contacting us — after which we will stop using the material in new material and remove it from channels we control. We never disclose the details of your application or case as part of marketing.
11. Cookies
Our website may use cookies and similar technologies to support core functionality and understand how the site is used. You can control cookies through your browser settings.
12. Children's Privacy
Our services are not directed at children under the age of 18 acting without parental or guardian involvement. Where a minor’s data is processed in connection with a student visa, admission, or family sponsorship application, it is processed with the involvement and consent of a parent or legal guardian.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this page.
14. Contact Us
For questions about this Privacy Policy or our data practices, contact us at info@ephrataconsultancy.com.
15. Recruitment and Employment Information
By submitting your CV/resume and personal information, you acknowledge that Ephrata Consultancy may collect, use, and retain this information for the purpose of assessing your qualifications for current or future employment opportunities.
Your information will be treated confidentially and used only for legitimate recruitment and employment-related purposes, except where otherwise permitted or required by law. We will take reasonable measures to protect your information and retain it only for as long as reasonably necessary for these purposes.
If you have questions about how your personal information is collected, used, or retained, please contact Ephrata Consultancy through the contact information provided on our website.
By submitting your CV/resume, you acknowledge this Privacy Notice and consent to the collection, use, and retention of your information for recruitment purposes.