Your information, handled with clarity.

Halisans is responsible for the personal information described in this policy. It applies when you browse the Halisans website, submit a consultation request, correspond about a request or receive mentorship, assessment or consulting services arranged through the website.

Halisans processes personal information in line with applicable privacy requirements, including the Nigeria Data Protection Act 2023 where it applies.

The form detects your browser's timezone to make scheduling easier. It is shown in the form, can be edited before submission and is stored only when you submit the request.

Please do not include passwords, payment-card details, health information or other highly sensitive personal information in the free-text fields.

• Review, scope and respond to consultation requests.
• Send a request confirmation and notify the Halisans team.
• Arrange mentorship, assessment or consulting services and maintain the related record.
• Protect the website and admin area, prevent spam and investigate misuse.
• Meet recordkeeping, legal, regulatory and dispute-resolution obligations.
• Improve service delivery using aggregated or de-identified observations where practical.

Depending on the context, processing may be based on your consent, steps taken at your request before an engagement, Halisans' legitimate interests in responding and operating securely, or a legal obligation. You may withdraw consent, but that does not affect processing already carried out lawfully.

Halisans does not use consultation information for automated decisions that produce legal or similarly significant effects.

Access is limited to Halisans personnel and service providers who need the information for the purposes described above. Current service providers include:

• MongoDB — stores and organizes consultation request records.
• Zoho Mail — sends request confirmations and Halisans team notifications.
• Website hosting and infrastructure providers — deliver the website, support availability and process ordinary security logs.

Information may also be disclosed to professional advisers, authorities or other parties when required by law, needed to protect rights and safety, or necessary in connection with a business reorganization. Halisans does not sell personal information.

The public Halisans website does not currently place advertising or analytics cookies. Authorized administrators use a strictly necessary, secure, HTTP-only session cookie to access consultation records. That cookie expires after eight hours and is not used to track public visitors.

Hosting infrastructure may process ordinary technical logs for reliability, abuse prevention and security. If Halisans later introduces optional analytics or marketing technologies, this policy and any required consent controls will be updated before they are used.

Halisans keeps personal information only for as long as it is reasonably needed for the request, an active engagement, follow-up, recordkeeping, security, dispute resolution and applicable legal obligations.

As an operational guideline, inactive consultation enquiries are normally retained for no longer than 24 months after the last meaningful interaction, unless a longer period is needed for an ongoing service, a legal or accounting requirement, a complaint, or the establishment or defence of a claim. Information is then deleted or de-identified where practical.

Halisans and its service providers may process information in countries other than the country where you live. Where applicable law requires it, Halisans uses appropriate contractual, organizational or legal safeguards and considers the protections available in the destination country.

Halisans uses reasonable technical and organizational safeguards, including access controls, server-side validation, same-origin request checks, anti-spam measures, protected administrator sessions and restricted access to consultation records.

No online system can guarantee absolute security. If you believe information submitted through the website has been exposed or misused, contact Halisans promptly using the method below.

Depending on your location and the circumstances, you may have the right to:

• Be informed about how your personal information is used.
• Request access to the personal information Halisans holds about you.
• Ask for inaccurate or incomplete information to be corrected.
• Request deletion or restriction where the law allows it.
• Object to certain processing or ask for portable information where applicable.
• Withdraw consent for future processing that relies on consent.
• Complain to the Nigeria Data Protection Commission or another competent regulator.

Halisans may ask for enough information to verify your identity and locate the relevant record. Some rights are subject to lawful exceptions, and Halisans will explain any limitation that applies.

Halisans services are intended for adults and professional or organizational audiences. Halisans does not knowingly collect personal information from children through the consultation form. A parent or guardian who believes a child has submitted information should request its removal.

The website includes links to selected partner and third-party websites. Their privacy practices are controlled by those organizations, so you should review their policies when leaving the Halisans website.

Halisans may update this policy when services, technology, providers or legal requirements change. The effective date at the top of this page will be revised when a material update is published.

To exercise a privacy right or raise a concern, use the Halisans consultation form, select Something else, and begin your message with Privacy Request. Include the email address used for the original request and its reference number if available.

If you remain dissatisfied, you may contact the Nigeria Data Protection Commission or another competent data-protection authority in your location.