Last updated: October 6, 2026

Iwelabi Consulting Limited (“ICL”, “Iwelabi Consulting”, “we”, “our”, or “us”) is committed to protecting the confidentiality, integrity, and privacy of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, retain, transfer, and protect personal information in connection with our website, enquiries, client services, programmes, products, events, communities, and business operations.

1. Who we are

Iwelabi Consulting Limited provides CFO advisory, management consulting, finance and accounting transformation, tax and regulatory support, financial reporting, accounting automation, business advisory, training, and related professional services. We also provide or promote products and programmes such as ICL Reconciliator, ICL Double-Entry Masterclass, and CFO Launchpad.

2. Who this policy applies to

This Privacy Policy applies to website visitors, prospective clients, clients, client personnel, programme participants, trainees, community members, vendors, suppliers, partners, event attendees, job or contractor applicants, social media users, newsletter or communication recipients, and other individuals who interact with us.

3. Personal information we collect

The personal information we collect depends on your relationship with us and how you interact with our website or services. It may include:

  • contact details such as name, email address, phone number, organisation, job title, country, and location;
  • professional details such as role, industry, employer, qualifications, work history, service interest, and training needs;
  • client and engagement information such as project requirements, financial or operational information, business documents, reports, transaction records, accounting data, reconciliation files, tax or regulatory information, and correspondence;
  • programme and product information such as registration details, cohort preferences, payment confirmation, attendance, certificates, learning progress, support requests, community participation, and feedback;
  • vendor or partner information such as contact details, bank or payment information, tax details, contracts, due diligence information, and performance records;
  • technical information such as IP address, browser type, device type, operating system, referral URL, page visits, date and time of access, cookies, analytics identifiers, and general usage information;
  • communications data such as enquiries, emails, form submissions, WhatsApp messages, social media interactions, and call notes;
  • where necessary and lawful, identification, compliance, due diligence, risk management, or verification information.

4. How we collect information

We collect information directly when you complete a form, send an email, call us, book a consultation, register for a programme, join a community, make payment, attend training, submit documents, use our products, or otherwise communicate with us.

We may collect information indirectly from clients, employers, public registers, professional networks, referrals, event organisers, payment processors, technology platforms, social media platforms, analytics providers, and publicly available sources where lawful and relevant to our services or operations.

5. Why we use personal information

We use personal information for purposes including:

  • responding to enquiries and consultation requests;
  • providing CFO advisory, finance transformation, management consulting, accounting, tax, training, automation, and related services;
  • managing client relationships, proposals, contracts, billing, and project delivery;
  • operating ICL Reconciliator, training programmes, webinars, communities, and learning experiences;
  • processing registrations, payments, confirmations, certificates, and support requests;
  • conducting risk checks, conflict checks, due diligence, compliance reviews, and quality assurance;
  • improving our website, products, content, communications, and user experience;
  • sending service updates, event invitations, insights, newsletters, or marketing communications where permitted;
  • maintaining information security, preventing fraud, protecting our rights, and enforcing policies;
  • complying with accounting, tax, legal, regulatory, audit, recordkeeping, and professional obligations.

6. Lawful bases for processing

Depending on the context, we may process personal information on one or more lawful bases, including consent, performance of a contract, steps taken before entering a contract, legal obligation, legitimate interests, vital interests, public interest where applicable, or another lawful basis recognised under the Nigeria Data Protection Act 2023 and related regulations.

Examples of legitimate interests include running a lawful professional services business, responding to enquiries, improving services, securing systems, managing client relationships, preventing fraud, developing professional content, and communicating relevant services to existing or prospective clients, provided those interests do not override your rights.

7. Sensitive personal information

We do not intentionally collect sensitive personal information unless it is necessary for a lawful purpose, provided by you or a client in connection with a service, or required by law. Sensitive information may include financial account data, identity documents, health information, or other protected categories. Where sensitive information is processed, we apply additional care and limit access to those who need it.

8. Client-controlled information

In some engagements, clients may provide information about their employees, customers, suppliers, investors, or other individuals. In such cases, the client may be the primary controller of that information, and ICL may process it to deliver agreed services. Clients are responsible for ensuring they have the right to share such information with us.

9. Cookies and automatic collection

Our website may use cookies, analytics tools, log files, web beacons, pixels, or similar technologies to support functionality, remember preferences, analyse performance, improve content, secure the website, and understand how visitors use our pages.

Cookies may include strictly necessary cookies, performance cookies, functionality cookies, analytics cookies, and, where used, marketing or social media cookies. You may manage or block cookies through your browser settings. Some website features may not work properly if cookies are disabled.

10. Analytics and similar tools

We may use analytics tools to understand aggregate website behaviour, such as page views, visit duration, traffic sources, and device types. Where possible, analytics information is used in aggregated or statistical form. Third-party analytics providers may process information under their own policies.

11. Social media, WhatsApp, and community platforms

Our website links to social media pages and WhatsApp communities. If you interact with us through those platforms, your information may also be processed by the platform provider and other users according to the platform’s own terms and privacy policies. Please avoid sharing sensitive or confidential information in public or group spaces.

12. Payments and third-party processors

Where payment links are used, payments may be processed by third-party payment processors. We may receive transaction confirmations or limited payment-related details necessary for registration, accounting, reconciliation, or support. We do not control the processor’s systems and encourage you to review their privacy and payment terms.

13. Our learning portal, website forms and service providers

This section explains, in plain terms, what happens to your information when you use specific features of our website and the ICL learning portal (app.iwelabiconsulting.com).

  • Learner and staff accounts. When you register for a programme we create a portal account with your name, email, phone, organisation, job title and country, so you can see your programmes, class links, recordings, payments and certificates. Staff accounts use two-step sign-in with an authenticator app; learners can turn it on in their profile.
  • Classes and recordings. We record which recordings you open and when, to show your progress and to support you. Class recordings are available to registered participants for 90 days after each class. We email reminders before your live classes.
  • Payments and receipts. Card and bank payments are processed by Paystack; we never see or store your full card details. We keep a record of each payment (amount, date, reference and method) to issue receipts and meet accounting and tax obligations.
  • Certificates. Certificates carry a verification link. Anyone with the link can confirm the certificate holder's name, programme and issue date.
  • Contact enquiries. Messages sent through our contact form are stored in our admin console and handled by our team from contact@iwelabiconsulting.com. You receive a copy for your records.
  • Newsletter. If you subscribe to ICL Insights we store your email (and first name if given) to send articles and programme news. Every email has an unsubscribe link, which takes effect immediately.
  • Waitlists. If you join a waitlist we store your details to tell you when registration opens, and we email you once a cohort opens.
  • Article comments. Your name and comment are shown publicly on the article. Your email address is never shown; we use it only to tell you if we reply. Comments may be reviewed, hidden or removed.
  • Essential cookies. The portal uses strictly necessary cookies to keep you signed in and to complete two-step sign-in. They are not used for advertising. The website uses Google Analytics to understand visits in aggregate.
  • Spam protection. Our forms use invisible checks (such as timing and hidden fields) to block automated spam. These checks do not build a profile of you.

Service providers we rely on, each bound by its own data protection terms: Vercel (portal hosting), Neon (portal database), Resend (sending portal emails), Google Workspace (company email), Google Analytics (website statistics), Paystack (payments) and QServers (website hosting). Some of these providers store or process data outside Nigeria, for example in the United States or the European Union. Where that happens we rely on safeguards permitted under the Nigeria Data Protection Act 2023, such as the provider's contractual commitments and security measures.

How long we keep portal data: learner accounts, registrations and certificates for as long as your account is active and for up to six years after your last programme (for certificate verification and accounting records); payment records for at least six years as required for tax and audit purposes; contact enquiries for up to two years after the conversation ends; newsletter subscriptions until you unsubscribe; waitlist entries until the programme opens or for up to two years. You can ask us to delete your account or information sooner, subject to records we must keep by law.

14. Sharing personal information

We do not sell personal information. We may share information where necessary with employees, consultants, contractors, technology providers, payment processors, professional advisers, auditors, insurers, regulators, law enforcement agencies, service providers, event partners, and other third parties who support our services or where disclosure is required or permitted by law.

Where third parties process information on our behalf, we expect them to apply appropriate confidentiality, security, and data protection safeguards.

15. International transfers

Some service providers, technology platforms, cloud systems, payment processors, or collaboration tools may process or store information outside Nigeria. Where personal information is transferred internationally, we take steps designed to ensure an appropriate level of protection consistent with applicable data protection laws, including contractual safeguards where required.

16. Retention

We retain personal information only for as long as reasonably necessary for the purpose collected and for legitimate business, legal, regulatory, accounting, tax, audit, professional, dispute-resolution, and recordkeeping purposes. Retention periods vary depending on the type of information, the relationship, legal requirements, and the purpose of processing.

17. Security

We use reasonable administrative, technical, and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction. These measures may include access controls, confidentiality obligations, secure storage, staff awareness, restricted access, and review of service provider safeguards. No digital system is completely secure, so absolute security cannot be guaranteed.

18. Your rights

Subject to applicable law, you may have rights to request access to your personal information, correction of inaccurate information, deletion, restriction, objection to processing, withdrawal of consent, data portability, information about processing, and the right not to be subject solely to automated decision-making where applicable.

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission or another competent authority if you believe your data protection rights have been infringed.

19. Marketing choices

If you receive marketing emails or updates from us, you may opt out by using the unsubscribe instructions where provided or by contacting us. We may still send non-marketing communications related to services, registrations, payments, legal notices, or ongoing engagements.

20. Children

Our website and services are not directed at children. We do not knowingly collect personal information from children through the website. If we become aware that a child has provided personal information without appropriate consent, we will take reasonable steps to delete or restrict such information.

21. Links to other websites

Our website may contain links to external websites and platforms. We are not responsible for their privacy practices, content, policies, or security. You should review the privacy policy of each third-party website or platform before providing personal information.

22. Confidentiality in professional engagements

Where we are engaged to provide professional services, confidentiality and data handling may also be governed by the relevant engagement letter, contract, non-disclosure agreement, product terms, or programme terms. If there is a conflict, the specific written agreement may apply to the relevant engagement or service.

23. Changes to this policy

We may update this Privacy Policy from time to time. The current version will be posted on this page with an updated date. We encourage you to review this page periodically.

24. Contact us

For privacy questions, requests, or concerns, contact Iwelabi Consulting Limited at info@iwelabiconsulting.com. You may also contact us through the contact details published on this website.