March 27, 2026

GDPR Compliant Privacy Policy

Privacy Policy for Bulaba (GDPR Compliant)

At Bulaba, we are committed to protecting your personal information and honouring your right to privacy as detailed in the General Data Protection Regulation (GDPR) and all other applicable data protection regulations. This Privacy Policy describes the ways in which we will collect, use, keep and protect your information when using this website www.bulaba.com.ng.

By accessing this website you are accepting our Privacy Policy.

1. Data Controller

For the purposes of GDPR, Bulaba is the Data Controller responsible for your personal data.

Contact:
admin@bulaba.com.ng

2. Legal Basis for Processing Data

We process your personal data based on the following legal grounds:

  • Consent – when you contact us or submit information voluntarily

  • Legitimate interest – to improve our website and services

  • Legal obligation – where required by law

We only collect and process data when there is a valid legal reason to do so.

3. Personal Data We Collect

We may collect the following personal data:

a) Information you provide

  • Name

  • Email address

  • Any content sent via forms or email

b) Automatically collected data

  • IP address

  • Browser and device information

  • Pages visited and time spent

  • Referring URLs

This data is collected through cookies, analytics tools, and server logs.

4. How We Use Your Data

We use your data to:

  • Respond to messages and inquiries

  • Improve website performance and content

  • Monitor security and prevent abuse

  • Analyze traffic and user behavior

  • Display relevant advertisements (where applicable)

We do not sell or trade your personal data.

5. Cookies and Tracking Technologies

Bulaba uses cookies and similar technologies to:

  • Remember user preferences

  • Analyze website traffic

  • Improve functionality and speed

You can control cookies through your browser settings. You may also refuse cookies, but some features of the site may not function properly.

6. Third-Party Data Processors

We may use trusted third-party services such as:

  • Google Analytics

  • Google AdSense

  • Hosting and security providers

These third parties may process data on our behalf under strict contractual obligations and GDPR-compliant standards.

7. Data Retention

We only keep personal data for as long as necessary for the purposes stated in this policy or as required by law.

When data is no longer needed, it is securely deleted or anonymized.

8. Your Rights Under GDPR

As a user, you have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion of your data (“Right to be Forgotten”)

  • Restrict processing of your data

  • Object to data processing

  • Request data portability

  • Withdraw consent at any time

To exercise these rights, contact us at:
admin@bulaba.com.ng

We will respond within 30 days, as required by GDPR.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

However, no online system is completely secure. We cannot guarantee absolute protection, but we take data security seriously.

10. International Data Transfers

If data is transferred outside your country or the EU (for example, via third-party services), we ensure appropriate safeguards are in place, including GDPR-compliant agreements.

11. Children’s Information

Bulaba does not knowingly collect personal data from children under the age of 13. If such data is discovered, it will be deleted immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date.

Continued use of the website means you accept the updated policy.

13. Contact Information

For any privacy-related questions or GDPR requests:

Email: admin@bulaba.com.ng
Website: bulaba.com.ng

Why this is GDPR-safe

This policy includes:

  • Data controller identification

  • Legal basis for processing

  • User rights under GDPR

  • Data retention rules

  • Third-party processing

  • Security measures

  • International transfers