MMA2

Traveler Corporate
Traveler Corporate
Traveler Corporate
Menu

Privacy Policy & Cookie Policy

Privacy Policy for Bi-Courtney Aviation Services Limited
Who We Are 

Bi-Courtney Aviation Services Limited (“BCASL”, “We” or “Us”) is the operator and management of the Murtala Mohammed Airport Terminal 2 Lagos (MMA2). In connection with our operations, we process the personal data of visitors, passengers, tenants and other users of MMA2. 

This Privacy Notice explains how we collect, use, disclose, and protect personal data in compliance with applicable data protection laws, including the Nigeria Data Protection Act 2023 (“NDPA”) and its General Application and Implementation Directive 2025 (GAID). 

Personal Data We Collect

We only collect data necessary for the provision of our services to you, or to meet legal obligations.

If you are a passenger or visitor of MMA2, who parks within the MMA2 premises, we process the following information:

  • Your name
  • Your vehicle numbers
  • Your email address 

 

If you are a tenant of the MMA2, we process the following information:

  • Your name
  • Your business address
  • Your email address

 

If you are a site visitor, we collect information about your device, including your IP address. We may also place cookies on your device. To learn more about how we use cookies, please see below.

Purpose Of Processing Personal Data
  • We may process your data to fulfil our contractual obligations to you or to meet specific legal requirements.
  • For passengers and visitors of the MMA2, we process your data to provide you with a parking space, to identify your car and to fulfil legal requirements relating to invoicing and tax obligations.
  • For tenants of the MMA2, we process your data to fulfil our tenancy agreements with you, as well as to fulfil legal obligations relating to the payment of taxes and other financial obligations.
  • For site visitors, we process your information to provide the information on our website to you. We may also process your information for some of our legitimate interests – including to ensure the security of our platforms, and to monitor the location of our users.
Legal Basis For Processing

Our processing of personal data is based on one or more of the following legal grounds:

  1. Performance of a contract with the data subject. This
  2. Compliance with legal and regulatory obligations.
  3. Legitimate interests of BCASL.
  4. Consent of the data subjects.
Disclosure Of Personal Data

We may share your personal data with:

  1. Service providers assisting with IT, administration and compliance
  2. Financial institutions where necessary for transactions
  3. Affiliates of professional partners where required
  4. Regulatory authorities, including the Nigerian Data Protection Commission (NDPC), where required.

 

We comply with the NDPA for all third-party disclosures. Specifically, we perform due diligence exercises, and document the transfer instructions in compliant data protection agreements. 

International Data Transfers

Where necessary, personal data may be transferred outside Nigeria for the purpose of providing our services to you or in compliance with legal obligations. In such cases, we ensure appropriate safeguards are implemented in accordance with the NDPA.

 

Data Retention

We retain personal data only for as long as necessary to:

  1. Fulfil the purpose for which it was collected.
  2. Comply with legal and regulatory requirements.
  3. Resolve disputes and enforce agreements.

 

Financial information and other tenant information may be retained for periods consistent with professional and regulatory requirements.

Data Security

We implement appropriate technical and organizational measures to safeguard personal data against:

  1. Unauthorized access.
  2. Loss or destruction.
  3. Alteration or misuse.

 

These measures include secure data storage, restricted access, and confidentiality obligations for personnel.

Rights Of Data Subject

Under the NDPA, individuals may have the right to:

  1. Access their personal data.
  2. Request correction of inaccurate data.
  3. Request deletion of personal data.
  4. Restrict or object to processing.
  5. Withdraw consent where processing is based on consent.
  6. Lodge complaints with the Nigeria Data Protection Commission (“NDPC”).

To enforce any of these rights, please write to us through the contact information in 12.1 below.

Cookies & Website Data

We use cookies and similar technologies to measure, analyse, and improve the use of our website. In addition to this Privacy Statement, our Cookie Statement applies and provides detailed information on the types of cookies we use, their purposes, and how you can manage your preferences. You can access our Cookie Statement here: cookie policy

You may adjust your browser settings to disable cookies. However, this may affect website functionality.