Privacy Policy

1. About this policy

This policy explains how Lodgespot LTD ("Lodgespot", "we", "us") handles personal information when you use our website at www.lodgespot.com.ng, our mobile app, and our WhatsApp assistant (together, the "Platform").

Lodgespot helps students find lodges and rooms, buy and sell items in our marketplace, and find roommates. We are the controller of the personal information described here, and we handle it in line with the Nigeria Data Protection Act 2023.

By using the Platform you confirm you have read this policy. Where the law requires your consent, we ask for it separately.

2. Information we collect

When you browse without an account

You don't need to give us your name, phone number or email to look at lodges, rooms, marketplace items or prices. We do collect a small amount of technical information automatically:

• An anonymous visitor identifier, stored in your browser, that lets us count a like once and remember that you already liked something.
• Standard technical data such as your IP address, device and browser type, and the pages you open. Our servers record this when they deliver pages to you, and we use it for security and to keep the Platform working.
• Counts of views, clicks and shares on listings.

When you create an account

• Username, email address, phone number and password. We store your password only in scrambled (hashed) form, so we can't read it.
• If you use Google to sign up, Google confirms your email address to us. We don't receive your Google password.
• A profile photo. New accounts start with a default image.
• Optional profile details you choose to add, such as your full name, gender, age and location (state, local government area, town and street).
• Bank account details, only if you choose to provide them, for example for payouts or refunds.
• The referral link you signed up through, if any, so we can credit the person who referred you.

When you list a lodge or item as an agent or seller

• Your account details above, and the contact number you put on the listing.
• Listing content: photos, videos, audio, descriptions, prices, room details, and map locations for lodges.
• We keep this on record to check that listings are genuine and to protect users from fraud.

When you use the roommate finder

• Full name, phone number, age, gender, department, level, budget or rent, interests, priorities, skills, a short description and a profile photo.
• This is only collected when you choose to create a roommate profile.

When you book, tour or pay

• Card and online payments are processed by Paystack. We receive your name, email, phone number and the transaction details (amount, date, time, reference and status). We never see or store your full card number.
• Bank transfers that you make to us directly: your bank name, account name, account number, the amount, and the receipt image you upload as proof of payment.
• Booking and tour details: your university, district, preferred check-in date, tour date and time, number of visitors, and any special requests you write.
• Marketplace orders: the items you buy and the details needed to complete the order.

When you communicate on the Platform

• Comments and likes you post, together with your username and profile photo.
• Enquiries and requests you send us, including requests for a design, a fix, or a particular lodge or item.
• WhatsApp messages: if you message our WhatsApp assistant, we receive your phone number and what you write. We keep your requests and a short record of your recent conversation so the assistant can continue a search where you left off.
• Notification tokens: if you allow notifications, we store the token your browser or phone gives us so we can send them.

3. Who can see your information

Some things are shown publicly because that is how the Platform works. This table shows which is which.

4. How we use your information

• To run the Platform: create and secure your account, show your listings and profile, and let you like, comment, book and buy.
• To process payments and bookings: confirm that a payment was made, tell transactions apart (for example when several people try to secure the same room), issue confirmations and keep accurate financial records.
• To keep people safe: verify that listings are genuine, prevent fraud and scams, and trace the responsible party if something goes wrong.
• To help you find what you need: answer WhatsApp requests, match roommates and show you relevant lodges and items.
• To communicate with you: send booking updates, account messages, notifications you have allowed, and replies to your enquiries.
• To improve the Platform: understand which pages and features are used, using counts of views, clicks and shares.
• To meet legal duties and resolve disputes: keep records that protect users, agents and Lodgespot if a disagreement arises, and respond to lawful requests from authorities.

We don't sell your personal information, and we don't use it to show third-party advertising.

5. Our legal basis

Under the Nigeria Data Protection Act 2023 we need a lawful basis for using your information. We rely on:

• Your consent, for example when you create a roommate profile, allow notifications, or message our WhatsApp assistant. You can withdraw consent at any time.
• Contract, when we need your information to provide something you asked for, such as an account, a booking or an order.
• Legal obligation, for example keeping financial records.
• Legitimate interests, such as preventing fraud, keeping the Platform secure and resolving disputes, where these do not override your rights.

6. Who we share it with

We never sell, rent or trade your personal information. We share it only in these situations:

• Other users. The public information listed in section 3 is visible to people using the Platform.
• Payment processing. Paystack handles card and online payments under its own privacy policy.
• Sign-in. Google, if you choose to sign up or sign in with Google.
• Messaging. WhatsApp (Meta) delivers messages between you and our assistant, under Meta's terms and privacy policy.
• Notifications. If you allow notifications, the push services of your browser or device provider (such as Google, Apple or Microsoft) deliver them.
• Hosting and technical providers. Companies that host our servers and files, and content delivery networks that supply page resources such as fonts, icons and code libraries. When your browser loads those resources, the provider can see your IP address.
• Authorities. Law enforcement or other authorities, only where the law requires it or where we need to investigate and resolve confirmed fraud or scams.
• Business changes. A successor, if Lodgespot is ever merged with or acquired by another business. We would tell you first, and this policy would continue to apply to your information.

These providers may only use your information to provide their service to us or to you.

7. Cookies and similar technologies

We use a small number of cookies and browser storage items, all needed for the Platform to work:

• Session cookie, which keeps you signed in while you use the Platform.
• "Remember me" cookie, which keeps you signed in on your device for up to 365 days. It holds a random token, not your password. Signing out ends it.
• Visitor identifier, an anonymous value that lets us record a like once per visitor.
• Notification token, if you allow notifications.

You can delete cookies and site data in your browser settings. If you do, you will be signed out and some features, such as remembering your likes, will reset. We don't use cookies for third-party advertising.

8. How long we keep information

• Account information is kept while your account is active. If you ask us to delete your account, we delete or anonymise it, except for the records described below.
• Agent and payment records are kept for as long as needed to prevent fraud, resolve disputes, keep accounts and meet legal requirements. This can continue after an account or listing is removed.
• Payment receipts you upload are kept only as long as needed to verify the payment and handle any dispute about it.
• Roommate profiles are kept until you delete them or ask us to.
• WhatsApp conversation records are kept only as long as needed to run the assistant and follow up on your requests.
• Notification tokens are removed when you turn notifications off or they stop working.

9. Keeping your information safe

• Passwords and sign-in tokens are stored in hashed form, so we can't read them.
• Information travels between your device and the Platform over an encrypted connection (HTTPS).
• Access to personal information is limited to people who need it to run the Platform.
• Payment receipts and other sensitive uploads are handled as private records.

No system on the internet is completely secure. Please choose a strong, unique password and don't share it. If you think your account has been accessed without your permission, contact us straight away.

10. Your rights and choices

Under the Nigeria Data Protection Act 2023 you have the right to:

• Know what personal information we hold about you and how we use it.
• Get a copy of it, and where possible in a format you can move elsewhere.
• Correct information that is wrong or out of date.
• Ask us to delete it, or to limit how we use it.
• Object to uses that rely on our legitimate interests.
• Withdraw consent you have given, without affecting anything done before you withdrew it.

You can change most of your details yourself from your account. For anything else, email support@lodgespot.com.ng from the email address on your account so we can confirm it's you. We will reply within a reasonable time, and within any period the law sets.

To delete a roommate profile or listing, use the delete option on it, or ask us to remove it.

If you are not happy with how we handle your information, please contact us first. You also have the right to complain to the Nigeria Data Protection Commission.

11. Children

Lodgespot is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.

12. Transfers outside Nigeria

Some of the providers we use, such as Google, Meta and our hosting and content delivery providers, may process information on servers outside Nigeria. When this happens, we rely on providers that protect personal information to a standard that meets or is comparable to Nigerian law.

13. Changes to this policy

We may update this policy when our Platform or the law changes. We will post the new version here with a new "Last updated" date. For significant changes we will also tell you on the Platform or by email. Please check back from time to time.

14. Contact us