Privacy Policy

1. Who we are

EstateMarketNG operates this property marketplace and is the data controller for the personal data described here. Our company registration in Nigeria is in progress; this page will be updated with the registered company details and our data protection contact once it completes.

You can reach us about anything on this page at hello@estatemarket.ng.

2. What we collect

Account data: your name, email address, phone number, password (stored only as a cryptographic hash — we never see or store your actual password), and your role on the platform.

Listing data: everything a lister submits about a property, including its address and location, price, description, photographs, and any title or survey documents uploaded for review.

Identity verification data: where a lister chooses to verify their identity, this includes government identifiers (NIN and/or BVN) and a liveness photograph used to match against them.

Inquiry and report data: the messages you send to a lister, and the content of any concern you report about a listing.

Payment data: records of listing and verification fees, including amount, status, and the reference issued by our payment provider. We do not receive or store your card number, CVV, or bank credentials — those are entered directly with the payment provider and never reach our systems.

Technical data: IP address, browser and device information, and logs of actions taken on the platform, kept for security and fraud prevention.

3. Identity verification, NIN and BVN

Verifying your identity is optional. You can browse, list, and use the platform without it — you simply will not carry an identity-verified tier.

Where you do verify, your NIN or BVN is submitted to a licensed identity verification provider for the sole purpose of confirming that you are who you say you are. We use it for that check and for meeting our own anti-fraud obligations. We never use it for any other purpose, and we never sell, rent, or disclose it for marketing.

Your full NIN or BVN is not displayed anywhere on the platform, is not visible to other users, and is not shown on your listings. Buyers see only the resulting tier — that a check was passed, never the underlying number.

Access to verification records inside our team is restricted to the specific staff roles that need it, and every access is logged.

4. Why we may use your data

To perform our contract with you: creating and running your account, publishing your listings, passing your inquiries to listers, and processing fees you owe us.

To meet legal obligations: keeping financial records, and responding to lawful requests from a competent authority.

For our legitimate interests: preventing fraud and abuse, moderating listings and reports, keeping the service secure, and improving how it works — balanced against your rights and freedoms.

With your consent: for anything outside the above, including marketing email. Where we rely on consent you may withdraw it at any time, and withdrawing it will not affect processing that already happened.

5. Who your data is shared with

Other users, but only deliberately: your listings and the display name attached to them are public. An inquiry you send is shared with that lister. A report you make is shared with our moderators, not with the lister you reported.

Service providers who process data on our instructions: our hosting provider, our identity verification provider, our payment provider, and our email delivery provider. They are permitted to use your data only to provide that service to us.

Authorities, where we are legally required to disclose, or where disclosure is necessary to investigate suspected fraud.

We do not sell your personal data, and we do not share it with data brokers or advertising networks.

6. Where your data is stored

Our servers are located in Europe, so your personal data is transferred outside Nigeria. The NDPA permits this where the destination provides adequate protection or appropriate safeguards are in place, and we rely on contractual safeguards with our providers.

If you would like more detail on the safeguards applying to a specific provider, ask us.

7. How long we keep it

Account data: for as long as your account is open, and for a limited period afterwards to handle disputes and meet record-keeping obligations.

Listing data: while the listing is live, and in archived form afterwards so that a transaction history remains auditable.

Identity verification data: retained only as long as needed to evidence that a check was carried out, then deleted.

Financial records: retained for the period Nigerian law requires.

8. Your rights

Under the Nigeria Data Protection Act 2023 you may ask us to give you a copy of the personal data we hold about you; correct it if it is wrong; delete it, where we have no overriding obligation to keep it; restrict or object to how we use it; and provide it in a portable form.

You may also withdraw consent where consent is what we relied on, and object to any decision made about you purely by automated means.

To exercise any of these, email hello@estatemarket.ng. We will respond within the time the NDPA allows. We will not charge you for a reasonable request.

If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission (NDPC).

9. Security

Traffic to this platform is encrypted in transit. Access to production data is limited to the staff roles that require it and is enforced by the database itself, not only by the application. Staff accounts handling sensitive data require two-factor authentication, and changes to who holds a staff role are recorded in an audit log.

No system is perfectly secure. If a breach occurs that is likely to affect your rights, we will notify you and the NDPC as the NDPA requires.

10. Cookies

We use cookies that are strictly necessary to run the service — principally to keep you signed in. We do not use advertising or third-party tracking cookies. If that changes we will ask for your consent before setting them, not afterwards.

11. Children

This service is not directed at children, and accounts are for adults aged 18 and over. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We will update this page when our practices change, and will bring material changes to your attention rather than relying on a silent update.