How we collect, use, and protect your personal data on House Padi
We care about your privacy
This policy explains how we handle your personal information in compliance with the Nigeria Data Protection Regulation (NDPR).
We collect
Identity, contact, verification docs
We protect
256-bit encryption, access controls
We never sell
Your data is never sold to third parties
Device Information
Usage Information
We use your personal information for the following purposes:
Create and manage your account, process property listings, facilitate communication between users, verify identities, process payments
Analyze usage patterns, develop new features, personalize your experience, conduct research and surveys
Detect and prevent fraud, enforce our Terms of Service, investigate suspicious activities, maintain platform integrity
Service notifications, respond to inquiries, send updates about your listings or saved properties, marketing communications (with consent)
Comply with applicable laws and regulations, respond to lawful requests from authorities, enforce legal claims
Legal Basis (NDPR): We process your personal information based on consent, contract performance, legal obligation, and legitimate interests. You may withdraw consent at any time.
All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data is encrypted at rest using AES-256.
Strict role-based access controls. Employees access user data only when necessary for support or development.
All access to personal data is logged and regularly audited for unauthorized activity.
We comply with ISO 27001 standards and undergo annual third-party security audits.
No method of transmission is 100% secure. While we implement industry-leading security measures, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.
Under the Nigeria Data Protection Regulation (NDPR) and other applicable laws, you have the following rights:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your personal data, subject to legal retention requirements.
Limit how we use your data in certain circumstances.
Receive your data in a structured, commonly used format.
Opt-out of marketing communications and withdraw consent for non-essential processing.
Submit a request through any of these channels:
We will respond within 7 working days. If you are unsatisfied with our response, you may lodge a complaint with NITDA (www.nitda.gov.ng).
We retain your personal information for as long as your account is active or as needed to provide you services.
Data retained until account deletion or 24 months of inactivity.
Anonymized data retained for 90 days, then permanently deleted. Legal/financial records retained for 6 years (CAMA requirement).
We may retain anonymized, aggregated data indefinitely for analytics and product improvement.
House Padi is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us at privacy@myhousepadi.com.
Our servers are located in Nigeria (AWS Africa - Cape Town) and the European Union. For users in Nigeria, your data is primarily processed within Nigeria. When we transfer data outside Nigeria, we ensure adequate protection through:
We may update this Privacy Policy periodically. Material changes will be communicated via email and platform notification at least 14 days before becoming effective.
Version: 2.0 (February 11, 2026) | Previous version: 1.5 (October 1, 2025)
Our DPO oversees compliance with data protection laws and handles privacy inquiries: