Privacy Policy

Realtors' Practice ("we", "us") operates the platform at realtorspractice.com. Our role is to aggregate, reconcile, and structure property information for the Lekki–Epe corridor, alongside verification, advisory, and analytical services for buyers, owners, investors, developers, and property professionals.

You can reach our team at info@realtorspractice.com and our Data Protection Officer at dpo@realtorspractice.com.

We collect only what we need to operate the platform safely and produce reliable market intelligence:

• Account & authentication data — name, email address, phone number, hashed password, Google account identifier (where you sign in with Google), Firebase phone-OTP identifier, magic-link session tokens.
• Profile data — role (visitor, registered user, agent, agency, developer, service provider), company name, photo, bio, areas of operation.
• Listing submissions — property details, asking price, address, photographs you upload to Cloudflare R2, ownership and documentation attachments where you choose to share them for verification.
• Service requests — Hub category, scope, location, preferred contact method, and the providers you contact.
• Payments — transaction references, plan tier, amounts, billing status (we never store full card details — they are handled by Paystack and Flutterwave).
• Device & usage — IP address, browser and device type, pages visited, referrer, approximate location derived from IP, and interaction telemetry.
• Communications — messages between users on the platform, support tickets, in-app notifications, and the email digests you have opted into.

The Realtors' Practice product is built around reconciliation and interpretation, not surveillance. We use your information to:

• Provide the marketplace — listings, search, Hub provider discovery, and direct in-app messaging.
• Run our intelligence pipeline — aggregating, reconciling, validating, interpreting, and delivering corridor-level market reads. Listings and transaction signals feed this pipeline only after we strip personally-identifying detail.
• Verify listings, ownership, and credentials before publishing.
• Process payments, manage subscriptions, and issue receipts via Paystack and Flutterwave.
• Match seekers with vetted providers in the Hub. We never act as an escrow — funds flow directly between you and the provider, and we keep a record of the introduction for moderation and dispute review.
• Detect fraud, abuse, listing manipulation, and duplicate or stale records.
• Send service emails (sign-in links, transaction receipts, advisory deliverables) and, with your consent, the weekly market briefing.
• Improve product reliability and meet our legal, tax, and regulatory obligations.

Under NDPR Article 2.2 and the NDPA, we rely on one of the following lawful bases:

Consent

For marketing emails, optional analytics, and any sensitive identifiers you choose to share.

Performance of a contract

To operate accounts, listings, the Hub, paid plans, and verification or advisory engagements.

Legitimate interest

To detect fraud, maintain service security, and run the corridor intelligence pipeline at an aggregate level.

Legal obligation

Tax records, anti-money-laundering checks where applicable, and responses to lawful regulatory requests.

We share personal data only with vendors that help us run the platform, and only to the extent needed:

• Paystack and Flutterwave — payment processing.
• Cloudflare R2 — listing photos and document storage.
• Firebase — phone OTP delivery.
• Google — sign-in via OAuth.
• Resend — transactional email and the weekly briefing.
• Vercel (frontend hosting), Render (backend hosting), and CockroachDB Cloud (database).
• Cloudflare — DNS, CDN, and WAF.

We do not sell your personal data. Where a vendor is outside Nigeria, we ensure the transfer is covered by their data-protection commitments and our contractual safeguards.

We retain data for as long as your account is active and you have an ongoing engagement with us. Beyond that, we apply minimums set by Nigerian law:

• Transaction and payment records: seven (7) years, in line with NITDA guidance and Federal Inland Revenue Service requirements.
• Listings and reconciled comparables: as long as the data point remains material to our market intelligence; identifiers are stripped or generalised once a listing is closed.
• Inactive accounts: deleted on request or, in the absence of a request, anonymised after 36 months of inactivity.
• Marketing consent records: kept while consent is active and for two years after it is withdrawn so we can prove compliance.

Under the NDPR and NDPA you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request erasure where there is no continuing lawful basis to keep the data.
• Restrict or object to processing, including marketing.
• Receive a portable copy of your data in a structured machine-readable form.
• Withdraw consent at any time, without affecting processing that has already taken place.
• Lodge a complaint with the National Information Technology Development Agency (NITDA).

Write to dpo@realtorspractice.com. We respond within 30 days as required by NDPR.

We take engineering measures appropriate to the sensitivity of the data we handle:

• TLS for all traffic between your browser, our edge, and our backend.
• Database connections enforce sslmode=verify-full with a pinned CA bundle.
• Password hashing with scrypt; tokenised payment processing through Paystack and Flutterwave so card numbers never reach our infrastructure.
• Encrypted backups, principle-of-least-privilege access controls, and per-environment secret isolation via Doppler.
• Independent verification gates before any listing is published to the public marketplace.

No system is perfect, and we will tell you within 72 hours if we ever experience a breach that affects your personal data, alongside notifying NITDA as required.

For privacy questions, NDPR data-subject requests, or to update your preferences, email dpo@realtorspractice.com. For everything else, write to info@realtorspractice.com or use the Reach Us form when it lands.

This Privacy Policy may change as the platform evolves. Material changes are announced at least 30 days before they take effect.