Nigeria's #1 Mayonnaise Brand • Discover Delicious Recipes & Meal Inspirations
At Bama, we attach a great deal of importance to the rules and regulations in force on privacy and personal data protection. To this regard, the protection of the security, integrity, and confidentiality of our users’ personal data is very important to us and, therefore, we wish to act responsibly in all matters related to this requirement.
This policy (hereinafter, the “Privacy Policy”) describes the type of personal data that we receive, how we obtain them, how we share them and the purposes for which we process them, in addition to the means you have as a user to control their use and to exercise your rights.
You are hereby informed that the terms “our”, Bama, “GBfoods Africa”, “GBfoods Nigeria”, and “GBfoods” refer to AFRICA CONTINENTAL GBF TRADING NIG. LIMITED. By “User” and “users” we refer to any person who accesses and/or uses this website.
1. Scope of the Privacy Policy
This Privacy Policy applies to all personal data obtained by Bama from our customers, suppliers, persons who request information, job candidates and, whenever applicable, the users of our website and third parties with whom we may have a relationship.
This includes information collected online and offline, from direct marketing campaigns, conferences and online events run from our websites.
Should you have any enquiries or questions about the processing and protection of your personal data, you can contact us via email at: dataprivacy@thegbfoods.com
2. Who is the Data Controller?
The Controller of your personal data is AFRICA CONTINENTAL GBF TRADING NIG. LIMITED. Our contact details are given below.
Company name: AFRICA CONTINENTAL GBF TRADING NIG. LIMITED
Registered address: 5th Floor, Addas Mall, 8 Hakeem Balogun Street, Agidingbi, Ikeja, Lagos, NIGERIA.
Registration No: RC 1361432
Contact email: dataprivacy@thegbfoods.com
3. What information do we collect and how do we collect it?
In this Privacy Policy, your “personal details” refers to information or fragments of information that enable you to be identified. As a general rule, no personal details need to be provided to visit our website. However, we collect personal details whenever:
- You provide them to us through the email addresses provided and the contact forms on our website. In these cases, identification and contact data may be requested.
- You provide them to us through the complaint forms published on the websites of the brands of our products, intended to receive questions, complaints, and comments related to our products. At that time, we will request the personal data necessary to process each specific question, complaint, and/or comment. In these cases, identification and contact data are requested.
- You provide them to us when sending job applications. In these cases, in addition to your contact and identification data, we will collect personal characteristics such as age, academic and professional data in order to properly process the application.
- We also collect information that your web browser sends us when you visit our website, for the purpose of analyzing your browsing behavior and improving your experience. This may include, but is not limited to, your IP address, consumption habits, and information about your preferences, such as hobbies and interests.
- You provide us with corporate contact details related to the company, entity, or organization you work for or collaborate with. The data we hold has been obtained through commercial or contractual relationships that the company, entity, or organization you work for or collaborate with has maintained with GBfoods.
All personal information provided on the website’s forms must be true, authentic and up to date, whereby the user is solely liable for any false or inaccurate information provided and for any damages GBfoods may incur as a result. The fields marked with an asterisk are required fields, so if not filled in GBfoods may deny a request that has been made.
4. Why do we process your data?
At GBfoods, we process your personal data for as long as necessary to fulfill the following purposes. Afterwards, we block your personal data in order to respond to any liability arising from the processing during the applicable limitation periods. Once these periods have passed, we proceed with the definitive deletion of the data.
Below, you can find more information about the purposes for which we process your data, how long we retain it, and what legitimizes us to process it:
| Purpose | Retention period | Legal basis |
| i) To understand your browsing preferences on our Website in order to personalize and improve our products and your experience. To achieve this purpose, we will create a profile based on your browsing habits on the website, but no automated decisions will be made based on the generated profile. For more information, please refer to our Cookie Policy. | As indicated in our Cookie Policy, for a maximum of 2 years. | Your consent given for such purposes. |
| ii) To manage and process the response to your information request sent through the relevant published email addresses and the contact form on our Website. | Until we have resolved your inquiry, as well as the time necessary to comply with the corresponding legal obligations. | Processing is necessary to respond to your enquiries, based on our legitimate interest, in communicating with individuals and responding to enquiries regarding our business, services, and operations which may also form part of compliance with our legal obligations. s. |
| iii) To respond to your job application and manage current and future recruitment processes of the company, as well as those of other GBfoods companies. | During the duration of the selection process you have applied for and/or, if we have your consent, for inclusion in our job pool for a period of 2 years after your last interaction with us. | Execution of pre-contractual measures to manage the candidate selection process, and your express consent to use your application for future recruitment opportunities, as well as to share it with other companies within the GBfoods Group. |
| iv) Manage contractual relationships with suppliers, including order processing, invoicing, compliance with contractual and legal obligations, as well as the management of professional contacts with entities, organizations or companies and with the individuals who work or collaborate with them or with their legal representatives. | As long as a contractual relationship exists, and afterwards, the data will be blocked for up to 6 years to comply with possible legal obligations, and while such professional interest remains and the right to object has not been exercised. | Management of the contractual relationship with existing contacts and legitimate interest in fostering new professional relationships with potential collaborators. |
| v) To manage claims in a centralized manner across the websites of our product brands. | For a maximum of 6 years from the date the claim was processed and resolved in Nigeria | Legitimate interest in managing the centralization of claims. |
5. How do we handle data from minors?
This Website is not intended for children under the age of 18; therefore, they must refrain from providing any personal information. If GBfoods discovers that it has accidentally collected personal data from children under 18, it will proceed to delete it as soon as possible.
However, GBfoods may collect personal data from children under 18 provided that such data is directly submitted by their parents or legal guardians, that is, with their explicit consent.
6. To whom do we disclose your data?
The data will not be transferred or made available in any other way to any third party, unless (i) GBfoods has previously obtained the appropriate consent from users; (ii) it must be disclosed to public authorities due to a legal obligation; (iii) it is necessary in relation to companies responsible for processing your personal data, such as IT service providers, website providers, invoice processing providers (supplier module), job board provider (Talent Clue), IT/CRM support (consumer complaints); or (iv) with other companies within the GBfoods group, based on the legitimate interest of our corporate group for internal administrative purposes.
In this regard, we inform you that where service providers or entities of the GBfoods group are located outside Nigeria, we will ensure that such transfers are carried out in accordance the Nigeria Data Protection Act 2023, the Nigeria Data Protection Act General Application and Implementation Directive (GAID) 2025, and applicable regulations and directives of the Nigeria Data Protection Commission (NDPC). Where required, we will rely on an adequacy decision, a cross-border data transfer instrument approved by the NDPC, or another lawful basis recognised under applicable Nigerian data protection law including standard data protection contractual clauses.
In this sense, we take all reasonable precautions to keep your personal information secure and require third parties who handle or process your personal information to do the same.
7. What rights protect you in relation to the processing of your data?
You have the right to obtain information about how GBfoods processes your personal data. Specifically:
- You have the right to access your personal data to know which data we are processing that concerns you, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- In certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain it for the exercise or defense of legal claims.
- In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. GBfoods will stop processing your data unless there are compelling legitimate grounds or for the exercise or defense of possible claims.
- You also have the right to data portability, as well as not to be subject to a decision based solely on automated processing of your personal data.
You can exercise these rights by sending an email to dataprivacy@thegbfoods.com, with the reference “Data Protection,” indicating the right you wish to exercise and properly identifying yourself.
We will respond to your requests as soon as possible and, in any case, within one (1) month from the receipt of your request. In certain circumstances, this period may be extended by an additional two (2) months, in which case we will inform you accordingly within one (1) month from receiving your request.
If you believe that the processing of your personal data violates data protection regulations, or that we have not fulfilled your rights, you may file a complaint with the NDPC. In any case, we remind you that you can contact our Data Protection Officer at dataprivacy@thegbfoods.com for any questions or concerns regarding the processing of your data.
8. Are you entitled to withdraw your consent?
Yes. You are entitled to withdraw your consent at any time, without this affecting the lawfulness of the processing based on consent given prior to its withdrawal.
9. Does GBfoods have any other information about privacy?
Our Privacy Policy may be subject to periodic changes, with the updated version posted on our Website. Therefore, we encourage you to check this page regularly. In this regard, we will inform you of any particularly significant changes and request your consent for any processing activities that require such legal basis.
Last update: September 2026.