Privacy Policy
Last updated: 21 September 2026
JMG Limited (“JMG”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share and protect personal data when you visit https://www.jmglimited.com/, submit an enquiry or communicate with us.
JMG Limited is responsible for the personal data described in this policy. We process personal data in accordance with the Nigeria Data Protection Act 2023 and other applicable data protection requirements.
1. Personal data we collect
Depending on how you interact with us, we may collect:
- Your name or company name, email address, telephone number and location or address.
- Information you provide in enquiries, including the division, products or services selected, quantities and your message.
- Your communication preferences, including whether you subscribe to marketing updates.
- Records of our communications with you.
- Technical information such as your IP address, browser and device information, and security logs.
- Where you accept optional tracking, information about website visits and interactions, including page views, successful enquiry submissions and clicks on telephone, email or WhatsApp links.
Please avoid including sensitive personal information in general enquiry forms unless it is necessary for your request.
2. How and why we use personal data
We use personal data for the following purposes:
- Responding to enquiries, preparing quotations and taking steps towards providing requested products or services: steps taken at your request before entering a contract, performance of a contract, or legitimate interests, as applicable.
- Providing customer support and managing business communications: performance of a contract or legitimate interests.
- Operating, maintaining and securing our website and forms, including preventing spam and fraud: legitimate interests and applicable legal obligations.
- Measuring website use and enquiries through optional analytics and advertising technologies: consent.
- Sending newsletters and promotional communications: consent.
- Meeting legal obligations and establishing, exercising or defending legal claims: legal obligations or legitimate interests, as applicable.
Where we rely on legitimate interests, we consider the impact on your rights and interests.
3. Cookies and your choices
We use essential technologies to operate the website, remember your privacy choices, secure our services and protect forms against spam.
Optional technologies include Google Analytics, Google Ads features, Meta Pixel (Facebook/Instagram) and Statcounter. These help us understand website use, measure enquiries and support advertising.
On the new website, optional tracking is enabled when you select Accept optional. You can select Reject optional to continue without enabling it.
You can review or change your choice at any time using Cookie settings. Withdrawing consent stops future optional tracking through our website. The page may reload to apply your choice.
You can submit an enquiry and use our contact options without accepting optional tracking.
Your cookie choice is separate from your newsletter preference. Accepting optional cookies does not subscribe you to marketing messages.
Browser settings can also control cookies. Blocking essential technologies may affect some website functions.
4. Marketing communications
We send newsletters and promotional communications when you have opted in.
You may withdraw your marketing consent using the unsubscribe option in our messages or by contacting us. This does not prevent us from sending communications needed to respond to your enquiry or provide a requested service.
We may retain a limited record of your unsubscribe request so that we can respect your preference.
5. Who may receive your personal data
We may share relevant personal data with:
- Authorised JMG employees and relevant group companies involved in responding to your request or providing services.
- Cloudflare, which provides website hosting, delivery and security services, including protection against automated form submissions.
- Providers supporting enquiry storage, email delivery and business communications.
- Google, Meta and Statcounter when you permit the relevant optional tracking.
- Professional advisers, regulators, courts or public authorities where disclosure is required by law or necessary to protect legal rights.
Service providers receive access appropriate to the services they perform and are subject to applicable data protection obligations.
When you follow a link to WhatsApp or another external service, that service’s own privacy policy applies to information you provide there.
6. International transfers
Some service providers may process personal data outside Nigeria.
Where personal data is transferred internationally, we use an appropriate transfer mechanism under applicable law, such as an adequacy assessment, suitable contractual safeguards or another permitted basis.
You can contact us for information about the safeguards relevant to your personal data.
7. How long we retain personal data
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including responding to enquiries, providing services and meeting legal obligations.
Retention depends on the nature of the information, our relationship with you, applicable recordkeeping requirements and any need to resolve disputes or protect legal rights.
Marketing information is retained while needed for the consented purpose. Following withdrawal, we stop the relevant marketing and may retain limited records to respect your preference or meet legal requirements.
When personal data is no longer needed, we delete it or anonymise it, subject to applicable backup and retention procedures.
8. How we protect personal data
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include access restrictions and security controls appropriate to the systems we use.
No website or transmission method is completely secure. If a personal data breach occurs, we assess it and notify the relevant authority and affected individuals where required by applicable law.
9. Your rights
Subject to applicable law and any relevant exceptions, you may:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion or restriction of processing.
- Object to processing, including direct marketing.
- Request a portable copy of your data where applicable.
- Withdraw consent where processing is based on consent.
- Exercise applicable rights relating to decisions based solely on automated processing.
- Lodge a complaint with the relevant data protection authority.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, email a.ololade@jmglimited.com. We may request information reasonably necessary to verify your identity and will respond within the applicable legal timeframe.
10. Complaints
If you have concerns about how we handle personal data, contact our Data Protection Officer at a.ololade@jmglimited.com.
You also have the right to complain directly to the Nigeria Data Protection Commission (NDPC). You do not need to complete our internal complaints process before contacting the Commission.
Website: https://ndpc.gov.ng/
11. Changes to this policy
We may update this policy to reflect changes to our services, technology or legal obligations. The latest version will be published on this page with its last-updated date.
Where required, we will provide additional notice or request renewed consent.
12. Contact us
JMG Limited
Data Protection Officer: a.ololade@jmglimited.com
Website: https://www.jmglimited.com/
