Privacy Policy

Last updated: August 2026

This policy explains how Trellis Ltd (RC 8992584) collects, uses, stores and protects personal data. It is written to meet our obligations under the Nigeria Data Protection Act 2023 (NDPA) and applies to this website and to enquiries made through it.

In this policy, "we", "us" and "Trellis" mean Trellis Ltd. "You" means anyone whose personal data we handle, including visitors to this site, prospective clients and clients.

1. Who we are

Trellis Ltd is a corporate structuring consultancy registered in Nigeria (RC 8992584), based in Lagos. For the purposes of the NDPA, Trellis Ltd is the data controller for personal data collected through this website.

Contact for all privacy matters: info@trelliscorporate.com

2. What we collect, and why

What we collect	When	Why	Lawful basis
Name, email address, company name, funding stage, and the content of your message	When you submit the contact form	To respond to your enquiry and, if you become a client, to deliver the engagement	Consent, and performance of a contract or steps taken at your request
Email address, your answers to the advisor questions, and the memo generated for you	When you request a memo from the structuring advisor	To send you the memo and to follow up on the structuring question you raised	Consent
Name, email address and any information you provide when booking	When you book a consultation	To schedule and prepare for the call	Consent, and steps taken at your request
Aggregated, non-identifying analytics such as pages viewed and country	When you browse the site	To understand which content is useful	Legitimate interest in operating and improving the site

We do not ask for, and you should not send us, sensitive personal data through this website. If your matter involves sensitive information, we will tell you how to send it securely once an engagement begins.

3. What we do not do

We do not sell personal data. Ever.
We do not run advertising on this site or share your data with advertisers.
We do not add you to a marketing list because you submitted a form. If we ever start a mailing list, we will ask you separately and you will have to opt in.
We do not use tracking cookies or advertising cookies.

4. Cookies and analytics

This site does not set advertising or tracking cookies and does not use cookie-based analytics.

If website analytics are enabled, we use a privacy-preserving analytics service that reports aggregated statistics only (such as page views and country of visit) and does not use cookies or build individual visitor profiles.

5. Service providers, and transfers outside Nigeria

We use a small number of third-party services to operate this site. Some of these are based outside Nigeria, which means your personal data may be transferred to and stored in another country.

Provider	What it handles	Where
Formspree	Processes contact form and advisor memo submissions and delivers them to us by email	United States
Calendly	Consultation scheduling, if you book a call	United States
Zoho / email provider	Our business email, where your enquiry is received and stored	Outside Nigeria
Cloudflare	Website hosting, DNS and security	Global content delivery network

On cross-border transfers. Under section 41 of the NDPA, personal data may be transferred outside Nigeria where an adequate level of protection is ensured, or on another lawful basis including your consent. Where we rely on your consent, you are giving it when you tick the consent box on the form. You can withdraw that consent at any time by emailing us, though this will not affect processing already carried out.

6. How long we keep it

Enquiries that do not become engagements: up to 24 months from your last contact with us, then deleted.
Advisor memo requests: up to 24 months, then deleted.
Client engagement records: for the duration of the engagement and afterwards for as long as required by professional, tax and statutory record-keeping obligations.

You can ask us to delete your data sooner. See section 7.

7. Your rights under the NDPA

You have the right to:

Ask what personal data we hold about you, and get a copy of it
Have inaccurate data corrected
Ask us to delete your data, where we have no overriding legal obligation to keep it
Object to processing, or ask us to restrict it
Withdraw consent at any time, where we rely on consent
Receive your data in a portable format
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, email info@trelliscorporate.com. We will respond within 30 days. We may ask you to confirm your identity before acting on a request, to make sure we are not disclosing your data to somebody else.

If you are not satisfied with how we have handled your request, you can complain to the Nigeria Data Protection Commission.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including encrypted transmission (HTTPS) across this site, access controls on our email and systems, and limiting access to those who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we take this seriously and will notify you and the NDPC of any breach affecting your data as required by the NDPA.

9. Children

This site is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.

10. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it was last revised. Material changes will be flagged on this page.

11. Contact

Trellis Ltd (RC 8992584)
Lagos, Nigeria
info@trelliscorporate.com