NDPA 2023 & NDPR Compliant

Privacy Policy

At Nigeria Listing, we value your trust and are committed to safeguarding your personal and financial information. This Privacy Policy details how we collect, use, store, and protect your data when you use our platform.

Last Updated: August 28, 2026·Effective Date: January 1, 2026·Jurisdiction: Federal Republic of Nigeria

Zero Card Storage

All payments are processed via Paystack (PCI-DSS Level 1 certified). We never store your raw debit card numbers or CVV on our servers.

Strict KYC Confidentiality

Agent NIN slips, government IDs, and CAC corporate documents are securely encrypted and accessed only by vetted compliance officers.

Your Statutory Rights

Under the Nigeria Data Protection Act 2023, you retain the legal right to request access, rectification, or complete deletion of your personal data.

1. Data Controller Identification

Nigeria Listing is operated by Nigeria Listing ("we", "us", or "our"), a registered Nigerian commercial real estate marketplace with its principal office situated in Lekki Phase 1, Lagos State, Nigeria.

For the purposes of the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR), Nigeria Listing is the designated Data Controller responsible for the processing of your personal information gathered through the Nigeria Listing web application and related services.

2. Categories of Information We Collect

We collect information you provide directly to us, as well as data generated automatically during your interactions with our marketplace:

A. Account & Profile Data

When creating an account via Clerk, we collect your full legal name, email address, profile photo, and password hash (managed externally and securely by Clerk Authentication).

B. Realtor & Landlord KYC Verification Data

To prevent fraudulent listings and comply with Lagos State Real Estate Regulatory Authority (LASRERA) standards, agents and property owners submit:

  • National Identification Number (NIN) or Voter's Card / International Passport.
  • Scanned images of government-issued identity documents.
  • Real estate professional registration license (LASRERA, ERCAAN, or NIESV).
  • Verified physical office address and GPS coordinate verifications.
  • Corporate registration credentials (CAC RC number, Tax Identification Number TIN).

C. Property Listing & Title Documentation

Listing details including address, asking price, architectural media, title category (Governor's Consent, Certificate of Occupancy, Gazette, Deed of Assignment), and contact phone numbers.

D. Billing & Transaction Information

When you purchase subscription plans (Agent Pro, Agency Growth) or listing upgrades, payments are securely processed by Paystack Payments Limited. We store only the transaction reference ID, payment timestamp, amount paid in Naira (NGN), and plan activation status.

3. Legal Bases for Data Processing

Under Section 25 of the Nigeria Data Protection Act (NDPA) 2023, we process your personal data under the following legitimate grounds:

  • Performance of Contract: To publish your property advertisements, generate verified digital badges, connect you with prospective buyers, and manage subscriptions.
  • Legal Obligation: To satisfy regulatory compliance obligations mandated by LASRERA, NIMC guidelines, anti-money laundering (AML/CFT) frameworks, and Nigerian consumer protection regulations.
  • Legitimate Interests: To detect, investigate, and prevent fraud, fake property documentation, cyber threats, and unaccredited impersonators on the marketplace.
  • User Consent: For direct marketing communications and optional browser location services to display nearby listings. You may withdraw consent at any time.

4. Data Sharing & Third-Party Disclosures

We do not sell, rent, or trade your personal data to third-party advertisers. We share your information strictly under the following controlled circumstances:

  • Prospective Property Inquirers: When you list a property, your designated contact details (phone, WhatsApp number, agent name) are displayed publicly so prospective tenants or buyers can reach you.
  • Payment Infrastructure: With Paystack for transaction authorization, settlement, and fraud screening.
  • Cloud & Storage Providers: Encrypted databases hosted on Supabase and cache infrastructure on Upstash Redis with strict access control.
  • Law Enforcement & Regulatory Authorities: When required by Nigerian statutory law, court subpoenas, or formal police investigations involving real estate fraudulent representations.

5. Data Security & Encryption Standards

We implement industry-grade technical and organizational safeguards to protect your personal data against unauthorized access, loss, alteration, or disclosure:

AES-256 encryption at rest for sensitive KYC records and ID documents.
TLS 1.3 encryption in transit across all web application and API endpoints.
PostgreSQL Row-Level Security (RLS) ensuring strict multi-tenant data boundaries.
Role-based administrative moderation requiring multi-factor authentication (MFA).

6. Your Statutory Rights Under NDPA 2023

As a data subject in Nigeria, you possess the following rights regarding your personal information:

  • Right to Access: Request a complete digital copy of the personal data we hold about you.
  • Right to Rectification: Update or correct inaccurate or incomplete profile and property information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your account and records, subject to statutory audit obligations.
  • Right to Restrict Processing: Request temporary restriction of data processing while a dispute is being resolved.
  • Right to Object: Object to automated processing or direct marketing outreach.
  • Right to Lodge a Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data rights have been violated.

To exercise any of these rights, email our Data Protection Desk at dpo@nigerialisting.com. We respond to all verified statutory requests within 14 calendar days.

7. Cookies & Local Telemetry

We utilize essential session cookies and local storage tokens to preserve your login session, remember your light/dark theme preference, and protect against Cross-Site Request Forgery (CSRF). You can configure your browser to reject cookies, though certain interactive features of the portal may become unavailable.

8. Contact Our Data Protection Officer (DPO)

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

Helpline: +234 800 000 5297 / +234 802 123 4567
Physical Headquarters: Plot 14, Admiralty Way, Lekki Phase 1, Lagos State, Nigeria