Environmental Consulting Associates (ECA)
Effective date: 25 September 2026
Environmental Consulting Associates (“ECA”, “we”, “us” or “our”) respects your privacy. This policy explains how we handle personal information when you visit ecassociatesng.com, contact us, or engage with us about environmental consultancy services.
ECA’s full registered legal name is Environmental Consulting Associates Ltd. You can contact us about this policy or your personal information at info@ecassociatesng.com.
1. Information we collect
Depending on how you interact with us, we may receive:
- Enquiry details: your name, email address, organisation, phone number, project location, service requested, project description, and any information you include in an email or attachment.
- Project information: contact and professional details supplied during proposals and consultancy work, and information contained in project correspondence or documents. [ECA TO CONFIRM: the categories of personal information collected during fieldwork, stakeholder engagement, recruitment, and other offline activities, if this policy is intended to cover them.]
- Website information: technical information that may be recorded when the website is accessed, such as an IP address, browser information, and request logs. [ECA TO CONFIRM: what the hosting provider records, which cookies are set, and whether any analytics tools are active.]
Please avoid sending sensitive personal information in an enquiry or attachment unless it is necessary and ECA has asked you to provide it.
2. How we use information
We use personal information where necessary to respond to enquiries, discuss and provide our services, administer client relationships, maintain the website, protect its security, and meet applicable legal obligations.
The appropriate legal basis depends on the activity. It may include taking steps at your request before entering a contract, performing a contract, complying with a legal obligation, pursuing a legitimate interest that is appropriately balanced against your rights, or your consent where consent is required. [ECA TO CONFIRM: map each actual processing activity to its documented lawful basis before publication.]
We do not treat an enquiry as permission to add you to a marketing list. [ECA TO CONFIRM: whether ECA sends newsletters or promotional email and, if so, how people subscribe and unsubscribe.]
3. Website enquiries
The Contact page displays an enquiry form requesting a name, email address, service required, and project description, with optional fields for organisation, phone number, location, and an attachment. It also displays a checkbox about using the information to respond.
At the time this policy was prepared, the form’s visible code displayed a success message without sending the entered information to ECA. Until ECA fixes and verifies the submission process, please send enquiries directly to info@ecassociatesng.com. [ECA TO CONFIRM: update this paragraph after the form is connected and tested; identify where submissions and attachments are delivered and stored.]
4. Cookies, external content and links
The website uses WordPress and website components that may rely on cookies or similar browser storage for their operation. [ECA TO CONFIRM: complete a cookie and script inventory, including the name, purpose, provider, and duration of each non-essential cookie; confirm whether analytics or advertising tools are active.] You can manage cookies through your browser settings. Where applicable law requires consent for a particular technology, ECA should provide that choice before using it.
The Contact page embeds Google Maps and links to WhatsApp. Opening or interacting with these services may allow their providers to process information under their own privacy policies. Other external websites linked from ECA’s site are governed by their respective operators.
5. Sharing information
We may share information with people working on an ECA enquiry or project and with service providers needed to operate our website, email, and business systems. We may also disclose information where required by law or where appropriately necessary for a project. [ECA TO CONFIRM: actual recipients and categories of service providers, project partners, professional advisers, and authorities; the purposes and safeguards for each disclosure.]
We do not sell personal information. [ECA TO CONFIRM: verify this statement against ECA’s actual practices.]
6. International transfers
Some website, email, cloud, or other service providers may process information outside Nigeria. [ECA TO CONFIRM: provider locations, whether transfers occur, and the applicable legal safeguards.] Where an international transfer takes place, ECA will assess and apply the protections required by Nigerian data protection law.
7. How long we keep information
We keep personal information only as long as needed for its purpose, subject to applicable legal, contractual, and recordkeeping requirements. We then delete it or otherwise handle it securely. [ECA TO CONFIRM: specific retention periods or documented criteria for enquiries, client and project files, email, website logs, and any recruitment records.]
8. Security
ECA takes appropriate steps to protect personal information against unauthorised access, loss, misuse, and disclosure. [ECA TO CONFIRM: the organisational and technical measures actually in place, including access controls, backups, staff procedures, and arrangements with service providers.] No internet transmission or storage method can be guaranteed to be completely secure.
9. Your privacy rights
Subject to the conditions and exceptions in the Nigeria Data Protection Act 2023, you may have rights to receive information about our processing, access your personal information, correct inaccurate information, request deletion, restrict or object to certain processing, withdraw consent where consent is the basis, and request data portability where applicable. You may also challenge certain solely automated decisions where the law applies. Nigeria Data Protection Commission
To make a request, email info@ecassociatesng.com. We may need to verify your identity before responding. If you are dissatisfied with our response, you may raise a complaint with the Nigeria Data Protection Commission. Nigeria Data Protection Commission
10. Children
ECA’s website and consultancy enquiries are intended for professional and organisational use. [ECA TO CONFIRM: whether any ECA activity collects children’s personal information, including during community or social impact studies, and document the applicable notice and safeguards.]
11. Changes to this policy
We may update this policy when our services, website practices, or legal obligations change. We will publish the revised version here with a new effective date.
Pre-publication checklist — remove before publishing
- Fix the contact form. Its current submit handler prevents submission and shows a success message without sending the enquiry or attachment. Test the complete delivery and storage process before changing Section 3.
- Confirm ECA’s registered legal name and whether this policy also covers offline consultancy, recruitment, fieldwork, and stakeholder engagement.
- Audit cookies, analytics, server logs, embedded services, and any newsletter or job application features. None should be claimed as active solely because they are common on WordPress sites.
- Confirm the lawful basis, recipients, storage location, international transfers, safeguards, and retention period for each actual processing activity.
- Verify the security measures and the statement that ECA does not sell personal information.
- Review the final policy with ECA’s privacy lead or legal adviser before publishing it. The Nigeria Data Protection Commission identifies the Nigeria Data Protection Act 2023 and its 2025 General Application and Implementation Directive as the relevant framework. Nigeria Data Protection Commission