Privacy Policy

How oilandgaspermit.ng collects, uses and protects your information, including our Google API Services disclosure for transactional email delivery.

Last updated: 13 August 2026

This Privacy Policy explains how oilandgaspermit.ng collects, uses, stores and protects your information. oilandgaspermit.ng is owned and operated by TCorporate Legal Advisory. In this policy, “we”, “us” and “our” refer to oilandgaspermit.ng.

We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

Information we collect

We collect information you give us directly when you complete an enquiry or application form, message us on WhatsApp, email us, or engage us to process a permit. This typically includes your name, company name, email address, phone number, the permits or registrations you need, and details about your company’s operations.

Where you engage us to process a permit, licence or registration, we also collect the documents required by the relevant authority. These may include your Certificate of Incorporation, status report, MEMART, Tax Clearance Certificate, VAT registration evidence, PENCOM, ITF and NSITF records, audited financial statements or statement of affairs, staff and manpower details, company profile, HSE policy, equipment records, and evidence of previous work such as invoices or purchase orders.

We also collect limited technical information automatically, including your IP address, browser type, device type, pages visited and time spent on the site. This is collected through cookies and standard web analytics.

How we use your information

We use your information to respond to your enquiry, advise you on which permits apply to your company, prepare and file applications with the relevant authorities, communicate with you about the progress of your application, send you transactional emails such as confirmations and status updates, issue invoices and receipts, comply with our legal and regulatory obligations, and improve our website and services.

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

Lawful basis for processing

We process your personal data on the basis of your consent, where you submit an enquiry or subscribe to updates; the performance of a contract, where you engage us to process a permit or registration; our legal obligations, including record keeping and anti money laundering requirements; and our legitimate interests in operating and improving our services, provided those interests do not override your rights.

Who we share your information with

To deliver the service you engage us for, we submit your documents and information to the relevant regulators, agencies and operators. Depending on your instructions, these may include the Nigerian Upstream Petroleum Regulatory Commission (NUPRC), the Nigerian Midstream and Downstream Petroleum Regulatory Authority (NMDPRA), the Nigerian Content Development and Monitoring Board (NCDMB), the Nigerian Ports Authority (NPA), the Nigerian Maritime Administration and Safety Agency (NIMASA), the Nigerian Petroleum Exchange (NIPEX), the Corporate Affairs Commission (CAC), tax and statutory bodies, certification bodies, and operators whose vendor portals you ask us to register you on.

We also use service providers who process data on our behalf, including our web hosting provider, our email delivery provider, and analytics providers. These providers are only permitted to process your data for the purposes we specify.

We may disclose information where required by law, court order or a competent regulatory authority.

Google API Services and email delivery

oilandgaspermit.ng uses Google OAuth authentication to connect to a Google account for the sole purpose of sending outgoing transactional email through Gmail SMTP or the Gmail API.

What we access. We request only the minimum permission needed to send email on behalf of our own account. We use this connection exclusively to deliver outgoing messages such as enquiry confirmations, application status updates, document requests, invoices and receipts.

What we do not do. We do not read, collect, store, index or analyse the contents of any Gmail mailbox. We do not access your Gmail account. We do not use Google user data for advertising. We do not sell or transfer Google user data to third parties, except as necessary to provide or improve this email delivery function, to comply with applicable law, or as part of a merger or acquisition. We do not allow humans to read Google user data unless we have your explicit consent for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymised.

Limited Use commitment. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access. The Google account connected to this service belongs to us, not to you. If you are an administrator of that account, you may revoke access at any time through the Google Account permissions page at myaccount.google.com/permissions. Revoking access stops outgoing transactional email from being delivered through that connection.

Cookies

Our website uses cookies to keep the site functioning, remember your preferences, and understand how visitors use the site. You can control or delete cookies through your browser settings. Disabling some cookies may affect how parts of the site work.

How long we keep your information

We keep your information for as long as needed to provide the service you engaged us for, and afterwards for as long as required to meet our legal, tax, regulatory and professional record keeping obligations. Enquiry data from people who do not go on to engage us is kept for a reasonable period and then deleted.

How we protect your information

We apply reasonable technical and organisational measures to protect your data, including encrypted connections, access controls, and restricting access to staff who need it to do their work. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

Your rights

Under the Nigeria Data Protection Act 2023 you have the right to request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your data where we are not required to keep it, object to or restrict certain processing, withdraw consent where processing is based on consent, request a copy of your data in a portable format, and lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

Third party links

Our site links to external websites, including regulator portals and reference documents. We are not responsible for the privacy practices or content of those websites.

Children

Our services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after a change means you accept the updated policy.

Contact us

For any question about this policy or about how we handle your data:

oilandgaspermit.ng, operated by TCorporate Legal Advisory
Email: info@tcorporatelegaladvisory.com
Phone: +234 908 011 9980
Lagos: Workbay, Lagos City Mall, Onikan, Lagos Island, Lagos
Abuja: 9 Victor L. Masi Close, Jabi, AMAC 900108, Federal Capital Territory