GOVERNANCE_PROTOCOL

PRIVACY
BY DESIGN.

Privacy at OMI is not an afterthought or a compliance exercise. It is part of how we design and operate our systems.

We collect and process personal information only where there is a legitimate operational, contractual, legal or otherwise lawful reason to do so. We aim to make that processing understandable, proportionate and accountable.

SECTION_01 | POSITION

TRUST IS
PART OF
THE SYSTEM.

OMI operates across data, media, technology and growth systems. That creates a responsibility to handle information with care.

01

Necessity

We seek to collect information that is relevant to a defined purpose.

02

Transparency

We aim to explain what we collect, why we collect it and how it is used.

03

Security

We apply appropriate safeguards to protect information against misuse and unauthorised access.

04

Accountability

Privacy is an operational responsibility, not simply a document.

We do not sell personal information.

SECTION_02 | COLLECTION

INFORMATION
HAS A
PURPOSE.

The information we collect depends on how you interact with OMI.

Information you provide

  • your name
  • email address
  • telephone number
  • organisation and professional role
  • information contained in enquiries, applications or submissions
  • information you voluntarily provide when communicating with us

Information collected through use

  • IP address
  • browser and device information
  • operating system
  • pages visited
  • referring pages or sources
  • interaction and usage signals
  • security and diagnostic information

We do not intentionally seek sensitive personal data through ordinary website interactions. Where sensitive information is necessary for a particular engagement, we will seek to handle it in accordance with applicable law.

SECTION_03 | INTENT

PURPOSE
BEFORE
PROCESSING.

We use personal information only for defined purposes, which may include:

  • responding to enquiries and requests
  • communicating with people who contact or engage with OMI
  • considering career applications and talent enquiries
  • providing and improving our services
  • maintaining the performance, reliability and security of our digital systems
  • understanding how our website and digital properties are used
  • preventing fraud, abuse or unauthorised activity
  • complying with applicable legal and regulatory obligations
  • establishing, exercising or defending legal rights where necessary

Where required by applicable law, we rely on an appropriate lawful basis for processing, which may include consent, performance of a contract, compliance with a legal obligation, or another lawful basis recognised under applicable data-protection law.

SECTION_04 | SIGNALS

LIMITED
BY DESIGN.

Our website may use cookies and similar technologies for essential functionality, preferences, security, analytics and system performance.

Where applicable, these technologies help us understand how our digital properties are being used and where they need to improve.

You can control cookies through your browser or through available website privacy controls. Restricting certain cookies may affect some website functionality.

Third-party services integrated into our website may process information according to their own privacy policies and terms.

SECTION_05 | HANDLING

CONTROLLED
INFRASTRUCTURE.

OMI may use trusted technology, hosting, analytics, communications and other infrastructure providers to operate its systems.

Where a third party processes personal information on our behalf, we expect appropriate confidentiality, security and data-protection safeguards to apply.

We may also disclose information where required by law, legal process, regulatory authority, or where disclosure is necessary to protect the rights, security or integrity of OMI, our users or others.

We do not permit third parties to use personal information entrusted to OMI for purposes incompatible with the purpose for which it was collected, subject to applicable contractual and legal requirements.

SECTION_06 | RETENTION

RETAINED
FOR A
REASON.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain legitimate business records, to meet legal or regulatory requirements, or to establish, exercise or defend legal claims.

When information is no longer required, we take reasonable steps to securely delete, anonymise or otherwise dispose of it.

Retention periods may vary according to the type of information and the nature of the relationship or transaction involved.

SECTION_07 | SECURITY

SECURITY IS
OPERATIONAL.

No digital system is completely immune from risk.

OMI applies appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Our safeguards may include access controls, secure infrastructure, authentication, monitoring and other measures appropriate to the nature and risk of the information being processed.

Where a personal-data incident occurs, OMI will respond in accordance with applicable law and its internal incident-management procedures.

SYSTEM_NOTE

NO SYSTEM IS INFALLIBLE.
RESPONSIBILITY DOES NOT END WITH DESIGN.

SECTION_08 | RIGHTS

YOUR DATA.
YOUR RIGHTS.

Depending on applicable law and the circumstances of processing, you may have rights concerning your personal information, including the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion or erasure in appropriate circumstances.
Object to or request restriction of certain processing.
Withdraw consent where processing is based on consent.
Request portability of personal information where applicable.

These rights are subject to applicable legal limitations and exemptions.

SECTION_09 | PRIVACY REQUESTS

NEED
CLARITY?

If you have a question about how OMI handles personal information, want to exercise an applicable data-protection right, or believe your information has been handled improperly, contact us.

PRIVACY_CHANNEL

growth@weareomi.com

Please include enough information for us to understand your request and, where necessary, verify your identity before responding.

We will handle legitimate privacy requests in accordance with applicable law.

SECTION_10 | GOVERNANCE

THIS DOCUMENT
EVOLVES WITH
THE SYSTEM.

Our privacy practices may change as our services, technology, legal obligations and operating environment evolve.

We may update this notice from time to time. The effective date below indicates when this version was last reviewed.

LAST UPDATED

March 2026

GOVERNING FRAMEWORK

Nigeria Data Protection Act 2023 and other applicable data-protection and privacy laws.