Privacy Policy

Official language: This policy is published only in English (Nigeria), which is the sole authoritative legal text.

Lodgee
Operated by YYBC PROPERTIES NIG LTD

1. Introduction

Welcome to Lodgee.

Lodgee is a real estate and property marketplace operated by YYBC PROPERTIES NIG LTD (“the Company”, “we”, “us”, or “our”), a company duly registered in the Federal Republic of Nigeria.

We are committed to protecting the privacy, confidentiality, and security of personal information collected through Lodgee, including our website, applications, digital platforms, and property-related services.

This Privacy Policy explains how we collect, use, process, store, disclose, transfer, retain, and protect personal information when individuals access or interact with our services.

We aim to process personal information in accordance with applicable Nigerian data protection legislation, including the Nigeria Data Protection Act 2023 (NDPA) and relevant regulations issued by the Nigeria Data Protection Commission (NDPC).

This Privacy Policy applies to individuals who interact with Lodgee, including:

Property buyers and prospective buyers
Short-term accommodation guests
Property owners and landlords
Property developers
Real estate agents and listing partners
Registered platform users
Website visitors
Other individuals who communicate or conduct transactions with us

By using Lodgee, you acknowledge that you have been provided with this Privacy Policy. Where consent is required under applicable law, we will obtain such consent separately.

2. Company Information

Service Name: Lodgee
Legal Entity: YYBC PROPERTIES NIG LTD
CAC Registration Number: RC 7032346

Registered Office Address:
11 Abba Street, Greenfield Estate, Ago, Lagos, Nigeria

Official Email:
support@lodgee.app

Telephone:
+234 08131861176

YYBC PROPERTIES NIG LTD generally acts as the Data Controller for personal information processed through Lodgee, as it determines the purposes and means of processing such information.

Certain third-party service providers may act as Data Processors on our behalf or as independent Data Controllers, depending on the nature of their services.

3. Our Services

Lodgee operates as a digital real estate marketplace offering property-related services. Our activities include the following:

3.1 Property Sales

Lodgee facilitates the marketing, discovery, and sale of residential and commercial properties, including:

Residential houses
Apartments
Commercial buildings
Land
Real estate developments
Other property categories

Users may browse available properties, submit enquiries, communicate with authorised representatives, and receive assistance with property-related transactions.

3.2 Short-Term Accommodation

Lodgee enables customers to discover, enquire about, and book short-term accommodation. These services may involve:

Accommodation searches
Property availability enquiries
Reservation management
Guest communication
Payment processing
Booking confirmations
Customer support

3.3 Property Listing Services

Lodgee provides opportunities for property owners, landlords, developers, and authorised real estate partners to advertise properties.

Listing services may involve collecting property descriptions, ownership information, photographs, videos, prices, and availability details.

3.4 Real Estate Marketplace

Lodgee connects property buyers, property owners, developers, shortlet providers, and prospective customers. The platform may facilitate property discovery, communication, verification, bookings, and transaction support.

4. Personal Information We Collect

We collect personal information that is reasonably necessary to provide our services, fulfil contractual obligations, maintain platform security, comply with applicable laws, and support legitimate business operations. The categories of information collected depend on how individuals interact with Lodgee.

4.1 Personal Identification Information

We may collect:

Full name
Telephone number
Email address
Residential address
Business address
Account registration information
Government-issued identification documents, where necessary
Passport information, where legally required or otherwise justified

We seek to collect identification information only where reasonably necessary for legitimate business purposes or compliance with applicable legal requirements.

4.2 Account Registration and Authentication Information

When users create an account or sign in to Lodgee, we may collect information required to authenticate and manage their accounts.

Where available, Lodgee may support authentication through third-party providers, including Google and Apple.

Depending on the authentication provider and permissions granted, we may receive:

Name
Email address
Unique authentication identifier
Other account information authorised by the user

We do not receive or store users’ Google or Apple account passwords.

4.3 Property Search and Preference Information

We may collect information relating to users’ property interests, including:

Preferred property locations
Property types
Budget ranges
Property search history
Interactions with listings
Booking preferences
Property enquiries

This information may be used to provide relevant property services and improve the functionality of Lodgee.

4.4 Booking and Accommodation Information

When users make accommodation reservations, we may collect:

Guest name
Contact information
Check-in and check-out dates
Reservation details
Accommodation preferences
Booking confirmations
Payment status
Information reasonably necessary for guest management

Additional information may be requested where required by applicable law or justified by legitimate verification and security requirements.

4.5 Property Owner and Listing Information

Property owners, landlords, developers, and listing partners may be required to provide:

Full name or registered business name
Contact information
Residential or business address
Company registration details, where applicable
Property location
Property descriptions
Property categories
Pricing information
Availability details
Property photographs and videos
Development information
Ownership documents
Property title documents
Proof of authority to list or market a property

Supporting documentation may be requested to verify property authenticity and reduce fraudulent listings.

4.6 Financial and Transaction Information

Where necessary, we may collect or process:

Bank account information
Payment references
Transaction amounts
Payment status
Refund details
Commission records
Transaction histories
Payment-related communications

Payments may be processed through authorised third-party financial service providers.

Lodgee does not intentionally store complete payment card credentials, including card security codes, where such information is securely handled by payment service providers.

4.7 Communication Information

We may collect information provided through communications with Lodgee, including:

Property enquiries
Customer support requests
Booking communications
Complaints
Feedback
Messages submitted through our platform
Communications with authorised representatives

4.8 Technical and Website Usage Information

When users access Lodgee, certain technical information may be collected automatically. This may include:

IP address
Browser type
Device information
Operating system
Website activity
Login activity
Security logs
Cookies and similar technologies

Such information may be used to maintain website functionality, monitor security, prevent misuse, and improve our services.

5. Purposes of Processing Personal Information

Lodgee processes personal information for specified, explicit, and legitimate purposes.

5.1 Service Delivery

To provide property search, listing, booking, enquiry, and transaction-related services.

5.2 Account Management

To create and manage user accounts, authenticate users, and provide customer support.

5.3 Property Verification

To review property listings, verify listing parties, assess supporting documentation, and reduce fraudulent activity.

5.4 Booking Management

To process reservations, communicate with guests, coordinate accommodation services, and manage booking-related matters.

5.5 Payment Processing

To facilitate payments, verify transactions, process refunds, and maintain appropriate financial records.

5.6 Legal and Regulatory Compliance

To comply with applicable legal obligations, maintain legally required records, and respond to lawful requests from competent authorities.

5.7 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent listings, suspicious transactions, unauthorised access, and misuse of Lodgee.

5.8 Platform Improvement

To maintain and improve website functionality, accessibility, performance, and user experience.

5.9 Customer Communication

To respond to enquiries, provide booking confirmations, communicate service updates, and deliver important account-related notifications.

Where we send marketing communications, we will do so in accordance with applicable law and provide appropriate opt-out mechanisms.

6. Legal Bases for Processing Personal Information

We process personal information only where a lawful basis applies under the Nigeria Data Protection Act 2023. Depending on the circumstances, these bases may include:

6.1 Contractual Necessity

Processing necessary to perform a contract with a user or take steps requested by the user before entering into a contract.

Examples include:

Account registration
Accommodation bookings
Property enquiries
Property-related transactions

6.2 Legal Obligations

Processing necessary to comply with applicable laws and regulatory requirements.

6.3 Legitimate Interests

Processing necessary for legitimate business interests, provided those interests are not overridden by the rights and freedoms of affected individuals.

Examples may include:

Platform security
Fraud prevention
Certain operational improvements
Protection of company systems

6.4 Consent

Where required by applicable law, we will obtain valid consent before processing personal information for specified purposes.

Users may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6.5 Other Lawful Bases

We may rely on other lawful bases recognised under applicable Nigerian data protection legislation where the relevant legal conditions are satisfied.

7. Property Verification and Identity Checks

Lodgee may conduct verification procedures to improve the authenticity, reliability, and security of property listings.

Verification activities may include:

Confirming the identity of property owners
Reviewing property ownership documentation
Verifying authority to list properties
Reviewing property descriptions and supporting information
Investigating potentially fraudulent listings
Confirming relevant property-related details

Where appropriate, we may request additional documents or information.

The type and amount of information collected will depend on the nature of the property, transaction risks, and applicable legal requirements.

We seek to minimise the collection of identification information and restrict its use to legitimate purposes.

8. Customer Verification and Regulatory Compliance

Certain property transactions may require additional customer verification.

Depending on the nature and value of a transaction, applicable legal obligations, and identified risks, Lodgee may request:

Identity confirmation
Supporting identification documents
Transaction-related information
Other information required by applicable law

Such verification may support compliance with applicable anti-money laundering and counter-terrorist financing requirements.

We will collect and process verification information only where a lawful basis exists.

9. Payment Processing

Payments made through Lodgee may be facilitated by authorised third-party payment providers and banking institutions. These may include:

9.1 Paystack

Paystack may provide payment processing and transaction management services.

9.2 Banking Institutions

Banking institutions, including Zenith Bank, may provide banking and transaction-related services.

Third-party financial service providers may independently collect and process personal information necessary to complete transactions. Their processing activities may be governed by their respective privacy policies and applicable financial regulations.

Lodgee does not operate as a bank, payment institution, or investment management provider. We do not directly provide loans or regulated financial services through the Lodgee platform.

10. Sharing of Personal Information

We do not sell personal information to third parties.

We may disclose personal information where reasonably necessary for service delivery, legitimate business operations, or legal compliance.

10.1 Property Owners and Accommodation Providers

We may share relevant information with property owners or accommodation providers to facilitate enquiries, reservations, and property transactions.

10.2 Payment Service Providers

We may share necessary transaction information with authorised payment processors and banking institutions.

10.3 Technology Service Providers

We may share or permit access to personal information with technology providers responsible for hosting, maintenance, development, database administration, security, and technical support.

10.4 Professional Advisers

We may disclose information to authorised legal advisers, accountants, auditors, and compliance professionals where reasonably necessary.

10.5 Regulatory and Law Enforcement Authorities

We may disclose information where required or permitted by applicable law, including in response to lawful requests from competent authorities.

Where third parties process personal information on our behalf, we seek to ensure that appropriate confidentiality, contractual, and security safeguards are implemented.

11. Technology Infrastructure and Service Providers

Lodgee uses external technology services to support its digital operations.

11.1 Cloudflare

Cloudflare supports website security, traffic management, and related infrastructure functions.

Depending on the services configured, Cloudflare may process technical information such as:

IP addresses
Website request information
Security logs
Network traffic information

11.2 Neon PostgreSQL

Lodgee uses Neon PostgreSQL database infrastructure to support the storage and management of platform information.

The information stored may include account details, property listings, enquiries, reservations, and other information necessary for platform operations. The specific categories of information stored depend on the configuration and functionality of Lodgee.

11.3 YYBC Japan

YYBC Japan is a separate technology service provider responsible for supporting the development and operation of Lodgee.

Its responsibilities may include:

Website development
Platform maintenance
Database administration
System management
Security updates
Technical troubleshooting
Infrastructure support
Platform improvements

Authorised personnel working with YYBC Japan may access personal information where reasonably necessary to perform such services. Such access must be subject to appropriate confidentiality obligations, contractual safeguards, and technical access restrictions.

YYBC PROPERTIES NIG LTD remains responsible for ensuring that personal information processed on its behalf is handled in accordance with applicable data protection requirements.

12. International Data Transfers

Lodgee operates in Nigeria but may use technology providers and support services located in other countries.

Consequently, personal information may be accessed, stored, or otherwise processed outside Nigeria. This may include:

Remote technical support from Japan
International cloud infrastructure
International technology service providers

Where personal information is transferred internationally, we will assess and implement the safeguards required under applicable Nigerian data protection legislation.

Such safeguards may include:

Appropriate contractual protections
Legally recognised international transfer mechanisms
Confidentiality obligations
Access restrictions
Technical and organisational security measures

International transfers will take place only where the applicable legal requirements are satisfied.

13. Data Access and Internal Controls

Access to personal information is restricted to authorised personnel and service providers who require such access for legitimate business purposes.

Access categories may include:

13.1 Development and Technical Personnel

For website maintenance, system administration, security updates, and troubleshooting.

13.2 Executive Management

For business operations, compliance oversight, and transaction supervision.

13.3 Sales and Customer Support Personnel

For property enquiries, customer communication, listing management, and booking support.

13.4 Professional Advisers and Approved Service Providers

For legal, accounting, compliance, and other authorised professional services.

We seek to apply access restrictions based on business necessity and the responsibilities of authorised personnel.

14. Data Security

We are committed to implementing appropriate technical and organisational measures to protect personal information against:

Unauthorised access
Unlawful processing
Accidental loss
Unauthorised disclosure
Alteration
Destruction
Misuse

Depending on the relevant systems and processing risks, security measures may include:

Access restrictions
Authentication controls
Role-based permissions
Secure communication protocols
System monitoring
Security updates
Confidentiality obligations
Secure database management
Incident response procedures

Access to personal information is limited to personnel and service providers with a legitimate business need.

Although we take reasonable measures to protect personal information, no internet-based system can guarantee absolute security.

15. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected or to satisfy applicable legal obligations.

Retention periods may depend on:

The nature of the information
The purpose of processing
Contractual requirements
Legal and regulatory obligations
Transaction record requirements
Security and fraud prevention needs
Applicable limitation periods

When personal information is no longer required, we will take appropriate steps to securely delete, anonymise, or otherwise dispose of it, unless continued retention is legally justified.

Specific retention periods will be established and documented according to the relevant categories of information and applicable legal requirements.

16. Cookies and Similar Technologies

Lodgee may use cookies and similar technologies to support website functionality and security.

These technologies may help us:

Maintain website functionality
Support account authentication
Improve website performance
Detect suspicious activity
Understand how users interact with our services

Where legally required, we will obtain consent before placing non-essential cookies or using similar tracking technologies.

Users may manage certain cookie preferences through their browser settings or any cookie management tools made available on our platform.

Disabling certain cookies may affect website functionality.

17. Your Data Protection Rights

Subject to applicable Nigerian data protection legislation, individuals may have the following rights.

17.1 Right to Information

You may request information about how your personal information is processed.

17.2 Right of Access

You may request access to personal information held about you.

17.3 Right to Rectification

You may request correction of inaccurate or incomplete personal information.

17.4 Right to Erasure

You may request deletion of your personal information where the applicable legal conditions are satisfied.

17.5 Right to Restrict Processing

You may request restrictions on certain processing activities where legally applicable.

17.6 Right to Data Portability

You may request the transfer of your personal information in a legally recognised format where applicable.

17.7 Right to Object

You may object to certain processing activities, including processing based on legitimate interests, where permitted by law.

17.8 Right to Withdraw Consent

You may withdraw previously provided consent where consent is the legal basis for processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

17.9 Rights Relating to Automated Decision-Making

You may exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

17.10 Right to Lodge a Complaint

You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.

To exercise these rights, please contact us using the details provided in this Privacy Policy.

We may request reasonable information to verify the identity of a person submitting a request.

Requests will be handled in accordance with applicable legal requirements and time limits.

18. Personal Data Breach Management

We aim to maintain appropriate procedures for identifying, assessing, investigating, and responding to personal data breaches.

Where a personal data breach occurs, we will assess the nature and potential impact of the incident.

Where required by applicable law, we will notify the Nigeria Data Protection Commission and affected individuals within the applicable legal time limits.

We will also take appropriate steps to:

Contain the incident
Investigate its cause
Reduce potential harm
Implement corrective measures
Prevent recurrence

19. Children’s Privacy

Lodgee is primarily intended for adults seeking property-related services.

We do not knowingly collect personal information from children without an appropriate lawful basis or required parental or guardian authorisation.

Where we become aware that children’s personal information has been collected or processed without the necessary lawful basis, we will take appropriate corrective action.

20. Third-Party Websites and Services

Lodgee may contain links to external websites, payment providers, authentication services, and other third-party platforms.

These third parties may operate independently and maintain their own privacy policies. We are not responsible for the privacy practices of independent third-party websites or services.

Users are encouraged to review the relevant privacy notices before providing personal information to such third parties.

21. Account Information and Deletion Requests

Users may request the correction or deletion of their personal information by contacting Lodgee.

Where account deletion functionality is available, users may also submit requests through the relevant platform features.

Deletion requests will be assessed in accordance with applicable data protection laws.

Certain information may need to be retained where required for:

Legal compliance
Transaction records
Fraud prevention
Regulatory obligations
The establishment, exercise, or defence of legal claims

Where deletion is not legally possible, we will explain the applicable limitations where required by law.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

Changes in applicable laws
Regulatory requirements
Business operations
Platform functionality
Technology providers
Data processing practices
Security and compliance improvements

The updated version will be published on Lodgee with a revised “Last Updated” date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.

23. Contact Information

If you have questions about this Privacy Policy, our processing of your personal information, or your data protection rights, please contact:

YYBC PROPERTIES NIG LTD
Service Name: Lodgee
CAC Registration Number: RC 7032346

Registered Address:
11 Abba Street, Greenfield Estate, Ago, Lagos, Nigeria

Email:
support@lodgee.app

Telephone:
+234 08131861176

Privacy and Data Protection Enquiries:
support@lodgee.app

We will review privacy-related enquiries and respond in accordance with applicable legal requirements.

Individuals who are dissatisfied with our response may contact the Nigeria Data Protection Commission, subject to applicable procedures.