Privacy Policy
Last updated: January 15, 2025
Privacy Policy
Your privacy is important to us. This Privacy Policy explains how Estada Property Services collects, uses, and protects your personal information when you use our real estate platform and services.
Our Commitment: We are committed to protecting your privacy and handling your personal information responsibly and in compliance with Nigerian data protection laws.
Table of Contents
1. Introduction
Estada Services ("Estada," "we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate platform and related services. This policy applies to all users of our website, mobile applications, and services.
2. Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when you register for an account, create a profile, post property listings, or contact us.
- Name, email address, and phone number
- Physical address and location data
- Date of birth and government-issued ID information
- Professional credentials (for real estate agents)
- Bank account and payment information
- Profile photos and property images
Usage Information
We automatically collect certain information when you access and use our services.
- IP address and device information
- Browser type and version
- Operating system and device identifiers
- Pages visited and time spent on our platform
- Search queries and property preferences
- Location data (with your permission)
Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to enhance your experience and collect usage information.
- Session cookies for authentication
- Preference cookies for user settings
- Analytics cookies for website optimization
- Marketing cookies for personalized advertising
- Third-party cookies from integrated services
Information from Third Parties
We may receive information about you from third-party sources to enhance our services.
- Social media platforms (when you connect accounts)
- Identity verification services
- Payment processors and financial institutions
- Public records and property databases
- Marketing partners and referral sources
3. How We Use Your Information
We use your personal information for the following purposes:
Service Provision
- Create and manage your user account
- Process property listings and transactions
- Facilitate communication between users
- Provide customer support and assistance
- Verify identity and prevent fraud
Platform Improvement
- Analyze usage patterns and preferences
- Develop new features and services
- Optimize platform performance
- Conduct research and analytics
- Test new functionalities
Communication
- Send service-related notifications
- Provide property alerts and recommendations
- Share market insights and updates
- Send promotional materials (with consent)
- Respond to inquiries and support requests
Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and court orders
- Enforce our terms of service
- Protect against fraud and abuse
- Maintain records as required by law
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
With Other Users
When you create property listings or contact other users, certain information becomes visible to facilitate transactions.
This includes your name, profile photo, contact preferences, and any information you choose to include in listings or messages.
With Service Providers
We share information with trusted third-party service providers who assist in operating our platform.
These providers are contractually bound to protect your information and may only use it to provide services to us.
For Legal Reasons
We may disclose information when required by law or to protect our rights and safety.
This includes compliance with court orders, government investigations, or when we believe disclosure is necessary to prevent harm.
Business Transfers
Information may be transferred in connection with business transactions such as mergers or acquisitions.
In such cases, we will notify you and ensure continued protection of your personal information.
With Your Consent
We may share information with third parties when you provide explicit consent for specific purposes.
You can withdraw consent at any time through your account settings or by contacting us.
5. Data Security
We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
- SSL/TLS encryption for data transmission
- AES-256 encryption for stored data
- Secure database configurations
- Regular security vulnerability assessments
- Multi-factor authentication for sensitive operations
Administrative Safeguards
- Employee access controls and training
- Background checks for personnel with data access
- Regular security policy updates
- Incident response procedures
- Data breach notification protocols
Physical Safeguards
- Secure data center facilities
- Restricted physical access controls
- Surveillance and monitoring systems
- Environmental controls and backup systems
- Secure disposal of physical media
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account plus 7 years after closure | Legal and regulatory compliance requirements |
| Transaction Records | 7 years from transaction completion | Financial recordkeeping and dispute resolution |
| Communication Records | 3 years from last communication | Customer service and legal protection |
| Marketing Data | Until consent is withdrawn or 2 years of inactivity | Marketing effectiveness and compliance |
| Usage Analytics | 2 years in identifiable form, indefinitely if anonymized | Platform improvement and business analytics |
7. Your Privacy Rights
You have several rights regarding your personal information. These rights may vary based on your location and applicable laws.
Access Right
Request a copy of the personal information we hold about you
Submit a request through your account settings or contact our privacy team
Correction Right
Request correction of inaccurate or incomplete personal information
Update your profile directly or contact us for assistance
Deletion Right
Request deletion of your personal information in certain circumstances
Use account deletion features or submit a deletion request
Portability Right
Request a copy of your data in a structured, machine-readable format
Contact our privacy team with a data portability request
Objection Right
Object to certain types of data processing, including marketing
Opt out through account settings or unsubscribe from communications
Restriction Right
Request limitation of processing in specific circumstances
Contact our privacy team to discuss restriction options
9. Third-Party Services
Our platform integrates with various third-party services to enhance functionality. These integrations may involve sharing certain information with these providers.
Payment Processing
Paystack, Flutterwave, and other payment gateways
Secure payment processing and fraud prevention
Transaction details, payment information, and user identifiers
Communication Services
SMS gateways, email service providers, and notification services
Deliver notifications, alerts, and communications
Contact information and message content
Analytics and Performance
Google Analytics, performance monitoring tools
Website analytics and performance optimization
Usage data, device information, and anonymized user behavior
Identity Verification
KYC and identity verification services
User verification and fraud prevention
Government-issued IDs, biometric data, and verification results
Social Media Integration
Facebook, Twitter, LinkedIn, and other social platforms
Social login and content sharing functionality
Profile information and user preferences
10. International Data Transfers
We primarily store and process data within Nigeria. However, some of our service providers may be located in other countries, which may involve transferring your personal information internationally.
- We ensure adequate protection through contractual safeguards
- We work only with providers that maintain appropriate security standards
- We implement technical measures to protect data during transfer
- We comply with applicable international data transfer regulations
- We provide notice when data is transferred outside Nigeria
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take immediate steps to delete such information.
- Parents can request information about data we may have collected from their child
- Parents can request deletion of their child's personal information
- Parents can object to further collection or use of their child's information
- We will verify parental identity before responding to such requests
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes through:
- Email notification to registered users
- Prominent notice on our website and mobile app
- In-app notifications for mobile users
- Updates to the 'last modified' date at the top of this policy
Material changes will take effect 30 days after notification, unless immediate implementation is required by law. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
13. Compliance with Nigerian Law
We comply with applicable Nigerian data protection laws, including the Nigeria Data Protection Regulation (NDPR) 2019 and other relevant legislation.
Nigeria Data Protection Regulation (NDPR) 2019
- Lawful basis for data processing
- Data subject consent requirements
- Data breach notification procedures
- Data Protection Officer appointment
- Regular compliance audits and assessments
Nigerian Constitution and Privacy Rights
- Respect for fundamental privacy rights
- Protection against unlawful intrusion
- Compliance with constitutional privacy provisions
14. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:
General Privacy Inquiries
Data Protection Officer
Postal Address
Estada Services Privacy DepartmentSuite 27, Amanda Plaza Jikwoyi, FCT 900001 Nigeria
Response Time
We will respond to privacy-related inquiries within 30 days of receipt, or sooner if required by applicable law.
Your Privacy Matters
We are committed to protecting your privacy and ensuring transparency in how we handle your personal information.