Legal
Privacy Policy
Draft template. To be replaced by text written by counsel before launch.
Who we are
Casafrique is the data controller. Our Data Protection Officer: dpo@casafrique.com.
Data we collect
Identity details, contact details, identity numbers (encrypted), property and title details (title numbers encrypted), transaction and payment records, and device information.
Lawful bases
Contract, legal obligation, consent and legitimate interests under the Nigeria Data Protection Act 2023.
Processors
Cloudinary (media and documents), Brevo (email and SMS), our bank partner for payments and escrow, identity verification providers, Termii (SMS), hosting and database providers.
Retention
Transaction records, receipts, signed agreements, the audit log and Deal Room archives are kept for the statutory retention period. Profiles are deleted 14 days after a confirmed deletion request.
Your rights
Access, correction, deletion (subject to legal retention), objection and complaint to the Nigeria Data Protection Commission.