
Legal
Privacy Policy
How we handle personal data submitted through this website, under the Nigeria Data Protection Act 2023.
This policy explains what personal data B-CIJVAL collects through this website, why we collect it, how long we keep it, who else sees it, and what you can require us to do about it. It is written to be read, not to be survived.
1. Who we are and how to reach us
B-CIJVAL Engineering Services Ltd ("we", "us", "our") is the data controller responsible for personal data collected through this website. We are a company incorporated in Nigeria, registered under RC 1758452, with a Tax Identification Number of 23822565 - 0001.
Our head office is at No 7 Bwari Close, Garki Area 7, Abuja, Nigeria. For any question about this policy, about personal data we hold, or to exercise any of the rights set out in section 7, write to info@bcijvalengineering.com or call 08096704519.
If we appoint a Data Protection Officer, their contact details will be published in this section.
2. What we collect
When you use the project enquiry form we collect the information you enter: your name, your company, your email address, your phone number, the project location, the project type, your description of the project, the estimated value, the expected start date, and the name, size and file type of any document you attach.
When you email or telephone the office we hold that correspondence and the contact details in it.
When you simply browse, our hosting provider records standard server information such as the pages requested, the time of the request, the browser and device type, and the IP address the request came from. This is used to keep the site available and secure.
We do not ask for, and do not want, sensitive personal data through this website. Please do not submit health, biometric, genetic, religious, political or trade union information in an enquiry.
3. Why we use it, and on what lawful basis
Enquiry information is used to respond to your enquiry, to prepare a quotation or proposal, and to keep a record of the correspondence relating to a potential or actual project. The lawful basis is that the processing is necessary to take steps at your request before entering into a contract, and, once a contract exists, to perform it.
Server logs are processed on the basis of our legitimate interest in keeping this website available, secure and working correctly.
Where we are required to keep records for tax, statutory or audit purposes, the lawful basis is compliance with a legal obligation.
We do not sell personal data. We do not use enquiry data for unrelated marketing, and we do not add enquirers to a mailing list without asking.
4. Automated decision-making
We do not make decisions about you by automated means. Every enquiry is read and answered by a person.
5. How long we keep it
Where an enquiry does not lead to an engagement, we keep the enquiry and the correspondence for no longer than we need it to answer you and to pick the conversation up again if you come back to us, and then delete it.
Where an enquiry leads to a project, the records form part of the project file, and we keep those for as long as our statutory accounting, tax and professional record-keeping obligations require.
Server logs are retained for a short operational period and then overwritten.
6. Who we share it with, and where it goes
We share personal data only with the service providers who make this website and our correspondence work, and only as far as each needs it to do that job. Those are our website hosting provider, our email provider, and, where it is configured, the service that delivers enquiry submissions to our office mailbox.
We do not share enquiry data with other clients, contractors or third parties for their own purposes.
Our website hosting and email services run on infrastructure located outside Nigeria. That means personal data you submit is transferred out of Nigeria. Under the Nigeria Data Protection Act 2023 we make such a transfer only where the recipient is subject to a law, binding corporate rules, contractual clauses, a code of conduct or a certification that affords an adequate level of protection, and we keep a record of the basis relied on. We may also transfer data where it is necessary to perform a contract with you, or where you have consented after being informed of the risk.
We may disclose personal data where we are legally required to, for example to a court, a regulator, or the Nigeria Data Protection Commission.
7. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to ask us to confirm whether we are processing your personal data; to be given a copy of it in a commonly used electronic format; to have inaccurate or incomplete data corrected; to have data erased where we no longer have a reason to keep it; to restrict how we process it while a question about it is resolved; to object to processing we carry out on the basis of legitimate interest; to receive the data you gave us in a structured, machine-readable form and have it sent to another controller; and, where processing is based on consent, to withdraw that consent at any time. Withdrawing consent is as easy as giving it, and does not affect processing already carried out.
You also have the right not to be subject to a decision based solely on automated processing that produces a legal effect concerning you. As stated in section 4, we do not make such decisions.
To exercise any of these rights, write to info@bcijvalengineering.com. We will respond within one month. There is no charge, unless a request is manifestly unfounded or excessive.
8. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at info@bcijvalengineering.com so that we have the chance to put it right.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission, which is the supervisory authority for data protection in Nigeria.
9. Security
This website is served over an encrypted connection, so information you submit is protected in transit. Access to enquiry correspondence is restricted to the staff who need it to respond to you.
No system is perfectly secure, and we do not claim otherwise. What we commit to is proportionate technical and organisational measures, and honesty if something goes wrong.
10. If there is a data breach
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it.
Where the breach is likely to result in a high risk to you, we will also tell you directly, in plain language, what happened and what you should do.
11. Cookies
This website does not set advertising, analytics or tracking cookies, and does not profile visitors. Nothing on this site follows you to another website.
Because we set no non-essential cookies, there is no cookie consent banner. If that ever changes, we will add a consent mechanism that asks before any such cookie is set, and this section will be updated first.
12. Changes to this policy
We may update this policy as the site or the law changes. The revision date below tells you which version you are reading. Where a change materially affects how we handle your personal data, we will make that clear rather than quietly amending the text.
Last revised: August 2026
