Privacy Policy

This Privacy Policy explains how GBAAC Construction Company Ltd ("GBAAC", "we", "us") collects, uses and protects personal data when you visit gbaac.com.ng or contact us. We process personal data in accordance with the Nigeria Data Protection Act 2023 and related regulations.

1. Who we are

The data controller is GBAAC Construction Company Ltd (CAC RC 1969346), Pension Board, FO1, Kubwa, Abuja, Federal Capital Territory, Nigeria. You can contact us about privacy at info@gbaac.com.ng or on +234 813 390 2525.

2. Personal data we collect

Information you give us. When you complete our quotation, contact or property enquiry forms, or contact us by phone, WhatsApp or email, we collect the details you choose to provide. These typically include your name, email address, phone or WhatsApp number, project or property location, project details, budget range, preferred dates and any files you attach, such as drawings or photographs.

Technical information. Our web server records standard technical logs (such as IP address, browser type, pages requested and time of request) for security and to keep the site running. To protect our forms from abuse, we store a one-way, irreversible code derived from your IP address for a short period to limit repeated submissions.

Analytics. We do not use analytics or advertising cookies unless you accept them through our cookie banner. If analytics are enabled and you accept, we use Google Analytics to understand, in aggregate, how visitors use the site.

3. How we use your personal data

To respond to your enquiry and provide quotations, advice or information you request (based on your consent and on steps taken at your request before entering into a contract)
To deliver and manage services you engage us for (performance of a contract)
To keep records of enquiries and correspondence (our legitimate interests in running our business)
To protect our website and forms from fraud, spam and abuse (legitimate interests)
To comply with legal and regulatory obligations, including anti-money-laundering obligations where they apply (legal obligation)

We do not sell your personal data, and we do not use it for unsolicited marketing.

We share personal data only where necessary:

With our website hosting and email service providers, who process data on our behalf to deliver the website and our email
With professionals we engage on your project (for example, engineers or surveyors), where you have asked us to proceed
With authorities where required by law

Messages you send us on WhatsApp are also subject to WhatsApp's own privacy terms. If you choose to view the map on our Contact page, Google Maps loads from Google and is subject to Google's privacy policy.

5. How long we keep data

Copies of form submissions and attachments stored on our web server are deleted automatically after 12 months. Enquiry emails are kept for as long as needed to respond to you and, where you become a client, for the duration of the project and any period required for legal, tax or warranty purposes. Server logs are kept for a limited period for security.

6. Security

Our website uses encrypted HTTPS connections. Form submissions are validated and processed on our server; attachments are checked, renamed and stored outside the public website. Access to enquiries is limited to staff who need it. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.

7. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

Be informed about how your data is used
Access the personal data we hold about you
Have inaccurate data corrected
Have your data deleted where there is no reason for us to keep it
Restrict or object to certain processing
Receive your data in a portable format where applicable
Withdraw consent at any time, without affecting processing already carried out

To exercise these rights, email info@gbaac.com.ng. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).

8. Cookies

By default, this website does not set analytics or advertising cookies. If analytics are enabled, a banner asks for your choice and analytics remain off unless you accept. Your choice is stored in your browser so we do not ask again; you can clear it at any time through your browser settings.

9. Children

Our services are intended for adults. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with its effective date.