Last updated: February 2026
1. Who we are
The SME CFO Ltd (RC 8307073) is a CFO advisory firm registered in Nigeria, serving businesses across Africa and the diaspora from our base in Lagos. For the purposes of applicable data protection legislation, The SME CFO Ltd is the data controller responsible for your personal data.
If you have questions about this policy or how we handle your data, please contact us at hello@thesmecfo.co.
2. Information we collect
We collect information that you provide directly to us, including:
- Name, email address, phone number, and business name when you complete our contact form or book a consultation
- Business and financial information you share during consultations or engagements
- Payment and billing information when you engage our services
- Communications you send to us, including email correspondence
We also collect certain information automatically when you visit our website:
- Device and browser information
- IP address and approximate location
- Pages viewed and interactions with our website
- Referring website or source
3. How we use your information
We use the information we collect to:
- Respond to your enquiries and provide the services you have requested
- Manage our client relationships and deliver our advisory services
- Send you relevant communications about our services, where you have consented or where we have a legitimate interest to do so
- Improve our website, services, and client experience
- Comply with legal and regulatory obligations in the jurisdictions where we and our clients operate
4. Legal basis for processing
We process your personal data on the following legal bases:
- Contractual necessity: where processing is required to deliver services you have engaged us for
- Legitimate interest: where processing is necessary for our business operations, provided your rights do not override those interests
- Consent: where you have given explicit consent, such as subscribing to our newsletter
- Legal obligation: where we are required to process data to comply with applicable law
5. How we share your information
We do not sell your personal data. We may share your information with:
- Professional advisors and service providers who assist us in delivering our services, subject to appropriate confidentiality obligations
- Regulatory bodies or law enforcement where required by law
- Third-party tools and platforms we use to operate our business (such as email, scheduling, and accounting software), each bound by their own data protection obligations
6. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Client engagement records are typically retained for a minimum of seven years following the end of the engagement, in line with professional standards.
7. Your rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Object to or restrict certain processing activities
- Withdraw consent at any time, where consent is the basis for processing
- Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at hello@thesmecfo.co.
8. International transfers
As we serve clients across multiple jurisdictions, your data may be transferred internationally. We take appropriate measures to ensure your data is protected in accordance with applicable data protection laws when transferred between jurisdictions.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
