NDPR Notice

The NDPR (issued by NITDA in 2019) and the NDPA (passed in 2023) require every organisation that processes personal data of Nigerian residents to be transparent about what they do with it and to register their data-protection commitments publicly. This notice is the public expression of those commitments for Realtors' Practice.

Realtors' Practice is the data controller for this platform. We are a NITDA-registered Data Controller and we file the annual NDPR audit returns required by the regulator.

Our registered office is in Lagos, Nigeria. Postal address and registration details are available on request via dpo@realtorspractice.com.

Our DPO oversees all NDPR / NDPA matters and is your first point of contact for any data-subject request. Email dpo@realtorspractice.com. We will acknowledge within 7 days and respond substantively within the 30-day NDPR window.

We process personal data on one of the lawful bases recognised by Article 2.2 of the NDPR:

• Consent — for marketing and any optional categories.
• Performance of a contract — to run accounts, listings, the Hub, paid plans, and engagements.
• Compliance with a legal obligation — tax records, regulator requests, and statutory retention windows.
• Protection of vital interests — in the rare event safety is at risk.
• Public interest — corridor intelligence reports that aggregate already-public market signals.
• Legitimate interest — fraud detection and platform security, balanced against your rights.

You hold all the data-subject rights established by NDPR Article 3.1 and the NDPA:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure where there is no continuing lawful basis.
• Right to restrict or object to processing, including marketing.
• Right to data portability — receive a structured copy in a machine-readable form.
• Right to withdraw consent at any time.
• Right to lodge a complaint with NITDA.

Write to dpo@realtorspractice.com and we will respond within 30 days.

Several vendors that help us run the platform are located outside Nigeria: Vercel and Cloudflare in the United States, Google globally, CockroachDB Cloud (United States / European Union), Resend (United States). NDPR Article 2.11 permits these transfers when the receiving country has an adequate data-protection framework or appropriate contractual safeguards are in place.

We rely on the vendors' data-processing agreements, their commitments to GDPR-grade controls, and the explicit information you provide when you sign up for the platform, which establishes consent for the transfer.

Realtors' Practice is not directed at children. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has provided us with personal data, write to dpo@realtorspractice.com and we will delete it.

If we experience a personal-data breach likely to result in a risk to your rights, we will:

• Notify NITDA within 72 hours of becoming aware, as required by NDPR.
• Notify affected data subjects without undue delay, in clear language, with the steps we are taking and the steps you should consider.
• Maintain a written record of the breach and our response.

If you believe we have not handled your personal data in line with NDPR or NDPA, please raise the issue with us first via dpo@realtorspractice.com. You may also lodge a complaint with the National Information Technology Development Agency (NITDA) at nitda.gov.ng.