Privacy Policy
Last updated: 1 November 2024
1. Who We Are
GECA Advisory Limited ("GECA", "we", "us", "our") is a financial and legal advisory firm with offices in London and Lagos. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with us — including through our website, in connection with our advisory engagements, and in any other context where we process personal data.
2. Information We Collect
We may collect and process the following categories of personal information: contact and identity information (name, email address, telephone number, postal address); professional and business information (company name, job title, industry); financial and transactional information collected in connection with advisory mandates, subject to separate engagement-specific data processing agreements; website usage data including IP address, browser type, pages visited, and session duration, collected through cookies and similar technologies; and correspondence and communications you send to us.
3. How We Use Your Information
We use your personal information to respond to enquiries and provide the advisory services you have requested; to manage our client relationships and the administration of engagement mandates; to send you our insights, publications, and event invitations where you have consented or where we have a legitimate interest in doing so; to comply with our legal and regulatory obligations, including anti-money laundering and know-your-client requirements; to improve our website and communications; and to protect our legal rights and interests.
4. Legal Basis for Processing
We process your personal information on the following legal bases: performance of a contract (where processing is necessary to provide advisory services under an engagement); compliance with legal obligations (for example, regulatory compliance requirements applicable to professional advisory firms); legitimate interests (for example, sending relevant professional communications to existing contacts, improving our services, and protecting our business); and consent (where you have expressly agreed to receive marketing communications or where we otherwise rely on consent as our legal basis).
5. How We Share Your Information
We do not sell your personal information. We may share your information with trusted third-party service providers who assist us in operating our business (including IT and cloud service providers, legal counsel, and accountants), subject to appropriate data processing agreements. We may also share information with regulatory and law enforcement authorities where required by law, and with professional advisors and counterparties in connection with transactions on which we are engaged, subject to appropriate confidentiality obligations.
6. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. For client engagement data, our standard retention period is seven years from the end of the relevant engagement. Website contact form data is retained for two years unless a client relationship is established.
7. Your Rights
Where applicable data protection law grants you rights in respect of your personal information, you may have the right to access the personal information we hold about you; request correction of inaccurate data; request deletion of your personal information (subject to our legal and regulatory obligations); object to or restrict our processing of your information; and withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at privacy@geca.com. We will respond within the timeframes required by applicable law.
8. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. Essential cookies are necessary for the website to function and cannot be disabled. Analytics cookies help us understand how visitors interact with our site; these are only placed with your consent. You can manage your cookie preferences through your browser settings or through our cookie consent tool when you first visit the site.
9. International Transfers
GECA operates across jurisdictions including the United Kingdom and Nigeria. Where we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection law — including standard contractual clauses approved by the relevant supervisory authority, or reliance on adequacy decisions where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent revision will be shown at the top of the page. We encourage you to review this policy periodically. Where changes are material, we will take steps to notify you directly.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Lead at privacy@geca.com, or write to us at GECA Advisory Limited, Mayfair, London.