Privacy Policy
Lodgr Housing Ltd operates a campus housing and services marketplace. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the Nigeria Data Protection Act, 2023 (NDPA). If you do not agree, do not use Lodgr.
Data Protection
We handle personal data under the Nigeria Data Protection Act, 2023 (NDPA).
Verified Users
Rent and selling use tenant checks, Didit identity verification, and Paystack bank resolve — not BVN.
Escrow Settlement
Rent is escrowed for about 3 days; marketplace funds release after delivery confirmation in-app.
Your Rights
You may request access, correction, deletion, restriction, objection, or withdrawal of consent.
1Who controls your data
Lodgr Housing Ltd is the Data Controller. If you have questions about this Privacy Policy or how your data is handled, contact us at:
2Data we collect
Account data
Name, email, phone, password (hashed) or Google/Apple login identifiers, profile photo, and campus/academic details you submit.
Tenant verification (for rent)
Passport-style photo, guardian contacts, consent record, and review status.
Vendor KYC (to sell)
Bank account details verified through Paystack; identity verification through Didit; shop profile and products.
Landlord/property data
Listing details, photos, pricing, and payout bank details.
Payments
Amounts, Lodgr payment references, status (including escrow/payout), receipts, and refund records. Card and bank payment data is processed by Paystack; Lodgr does not store full card numbers.
Communications
In-app chat (hostel, order, support), support ticket content, and emails we send you.
Device/ops data
Push tokens, device/app info, IP address, and usage data needed to run and secure the service.
3Why we use your data
- To create and secure your account
- To show campus-relevant hostels and shops
- To verify users before rent or selling
- To process payments, escrow states, refunds, and payouts through Paystack
- To enable messaging and campus support
- To send service notices (receipts, booking, payouts, verification decisions)
- To prevent fraud, abuse, and unauthorized access
- To meet legal and regulatory obligations
4Legal bases
We process data where necessary to perform our contract with you; comply with law; and/or pursue legitimate interests in security and fraud prevention; and, where required, with your consent (for example tenant verification, Didit KYC, and non-essential website cookies).
5Who we share data with
We share data only as needed. We do not sell personal data.
| Recipient | Purpose |
|---|---|
| Paystack | Payment collection, account name resolution, transfer recipients, and payouts |
| Didit | Vendor identity verification |
| Firebase / FCM (Google) | Push notifications |
| Cloud storage/hosting providers | App hosting, databases, media storage |
| Email provider | Transactional email |
| Campus ambassadors / authorised staff | Listing review, tenant verification, support (limited to their role) |
6Retention
We keep data only as long as needed for the purposes above, including dispute handling and legal record-keeping.
Financial and payout records are kept for the period required under applicable Nigerian law and our compliance obligations.
When you delete your account, we close the account and remove or anonymise profile data that is no longer required. We may retain transaction, KYC, and security records where the law or fraud prevention requires it.
7Security
We use HTTPS, access controls, hashed credentials, and role-based permissions. No method of transmission or storage is fully secure; we take reasonable technical and organisational measures appropriate to the risk. If a personal-data breach likely to result in a high risk to you occurs, we will notify you and the relevant authority as required by law.
8Your rights
Subject to NDPA limits, you may request access, correction, deletion, restriction, objection, or withdrawal of consent. Use in-app Delete Account where available, or email privacy@lodgr.homes. You may also complain to the Nigeria Data Protection Commission (NDPC). Account deletion may be refused or delayed while you have an active tenancy, open escrow, pending payout/refund, or wallet balance that must be cleared.
9Children
Lodgr is intended for adult students and campus users. Do not use Lodgr if you are not legally permitted to enter this agreement.
11Changes
We may update this Policy. The "Last Updated" date will change, and we will provide additional notice where required by law.
12Contact
privacy@lodgr.homes · support@lodgr.homes
Related: Delete Account · Trust & Compliance
Your rights are protected.
For privacy requests or questions about our data practices, email privacy@lodgr.homes. You may also complain to the NDPC.