Privacy Policy

When you register or use the Nestspot app or website, we may collect the following categories of information:

Personal identifiers — your full name, email address, phone number, and profile photo.

Location data — GPS coordinates when you search for listings or verify a property. Location data is used solely to match you with relevant results and to verify listing accuracy.

Device information — device type, operating system version, and unique device identifiers, used for app stability and fraud prevention.

Usage data — pages visited, searches performed, messages sent, and in-app actions, used to improve platform features.

Payment data — escrow transactions are processed through a regulated payment partner. Nestspot does not store raw card or bank account details on our servers.

We use your data to:

— Provide and operate the Nestspot platform, including matching tenants with verified listings.

— Facilitate direct communication between tenants and landlords.

— Process and hold escrow payments securely until key handover.

— Verify property coordinates against GPS data before listings go live.

— Send you transactional notifications (e.g. message alerts, payment confirmations).

— Improve platform features through aggregated, anonymised analytics.

— Comply with applicable Nigerian law, including the Nigeria Data Protection Act 2023 (NDPA).

Under the NDPA 2023, we process your personal data on the following lawful bases:

Contract — processing necessary to fulfil our service agreement with you (e.g. creating your account, processing escrow payments).

Legitimate interests — improving platform safety, preventing fraud, and conducting analytics — balanced against your rights.

Consent — for marketing communications and optional location sharing. You may withdraw consent at any time via app settings.

Legal obligation — where required by Nigerian law or regulatory authority.

We do not sell your personal data. We share data only:

— With landlords/property owners to facilitate viewings and lease discussions — limited to name, phone, and message content.

— With payment processors (regulated under CBN guidelines) solely to execute escrow transactions.

— With cloud service providers (e.g. hosting, email delivery) under strict data processing agreements.

— With regulators or law enforcement where required by Nigerian law or a valid court order.

We retain your personal data only as long as necessary to fulfil the purposes in this policy or as required by law.

Account data is retained for the duration of your active account, plus a maximum of 2 years after account deletion to satisfy statutory obligations.

Escrow and transaction records are retained for 7 years in line with Nigerian financial record-keeping requirements.

You may request deletion of your data at any time (subject to legal retention obligations) via settings or by emailing support@nest-spot.com.

The Nestspot website uses cookies and similar technologies for:

— Essential cookies — required for login sessions and security.

— Analytics cookies — anonymised visitor counts and behaviour patterns (you may opt out via your browser settings).

— Preference cookies — to remember your search filters and display preferences.

We do not use third-party advertising trackers or sell data to ad networks.

Under the NDPA 2023, you have the right to:

— Access — request a copy of the personal data we hold about you.

— Rectification — correct inaccurate or incomplete data.

— Erasure — request deletion of your data where no legal obligation requires us to retain it.

— Portability — receive your data in a structured, machine-readable format.

— Objection — object to processing based on legitimate interests.

— Withdraw consent — at any time, without affecting the lawfulness of prior processing.

You can also request full account deletion at https://nest-spot.com/deleteRequest or request deletion of specific data without deleting your account at https://nest-spot.com/deleteAccount.

To exercise any right, contact us at support@nest-spot.com. We will respond within 30 days.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits.

No system is completely immune to risk. If a data breach occurs that affects your rights, we will notify you and the Nigeria Data Protection Commission (NDPC) in accordance with NDPA requirements.

Nestspot is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us at support@nest-spot.com and we will promptly delete the account.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app or by email at least 14 days before the changes take effect.

Continued use of Nestspot after the effective date constitutes acceptance of the revised policy.

For privacy-related queries, requests, or complaints, please contact:

Nestspot (Data Controller)

Email: support@nest-spot.com

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.