Privacy Policy

Directrent.ng (“we,” “our,” or “the Platform”) is committed to protecting the privacy and personal data of all users — tenants, landlords, and visitors — in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023.

This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights as a data subject under Nigerian law.

By using directrent.ng, you consent to the practices described in this policy.

Information you provide directly:

• Full name, email address, phone number (during registration and waitlist signup)
• BVN (Bank Verification Number) or NIN (National Identification Number) for identity verification
• Property details, photos, and descriptions (for landlords listing properties)
• Messages sent through the in-app chat system
• Payment information processed through our payment partner (Paystack)

Information collected automatically:

• Device type, browser type, operating system
• IP address and approximate location (city-level)
• Pages visited, features used, and time spent on the platform
• Referral source (how you found Directrent.ng)

Information from third parties:

• Identity verification results from BVN/NIN verification partners
• Payment confirmation data from Paystack

We use the data we collect for the following purposes:

• To create and manage your account
• To verify your identity through BVN/NIN checks (required for all landlords and tenants)
• To connect tenants with landlords through our direct matching system
• To process rental payments securely through Paystack escrow
• To generate digital lease agreements compliant with Lagos State Tenancy Law 2011
• To send you notifications about your listings, applications, and payments
• To send marketing communications (only with your explicit consent; you can opt out at any time)
• To improve our platform through anonymized, aggregated usage analytics
• To comply with legal obligations, including LASRERA regulations and CBN payment guidelines

We collect your BVN or NIN solely for identity verification purposes. This data is processed through accredited verification partners and is never stored in raw form on our servers.

Verification results (confirmed/not confirmed) are stored. The underlying BVN/NIN number is encrypted at rest using AES-256 encryption and is never shared with other users, landlords, tenants, or any third party.

You have the right to request deletion of your verification data at any time by contacting us at hello@directrent.ng.

We do not sell your personal data to any third party.

We share data only with:

• Paystack (payment processing — governed by their own privacy policy and CBN regulations)
• BVN/NIN verification partners (identity confirmation only)
• Lagos State authorities if required by law (e.g., LASRERA compliance inquiries)
• Law enforcement agencies when compelled by valid legal process

Your data is stored on secure cloud infrastructure with encryption at rest and in transit.

We implement industry-standard security measures including AES-256 encryption, role-based access controls, regular security audits, and secure API authentication.

Despite these measures, no system is 100% secure. If a data breach occurs, we will notify affected users within 72 hours as required by the NDPR.

As a data subject under the NDPR, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate data
• Right to request deletion of your data (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability (receive your data in a structured format)
• Right to withdraw consent at any time
• Right to lodge a complaint with the National Information Technology Development Agency (NITDA)

To exercise any of these rights, email us at hello@directrent.ng. We will respond within 30 days.

• Active account data: retained while your account is active and for 12 months after deletion
• Transaction records: retained for 6 years (CBN financial record-keeping requirements)
• Chat messages: retained for 12 months after the related tenancy ends
• Waitlist data: retained until you unsubscribe or the waitlist closes

Directrent.ng is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.

We may update this Privacy Policy from time to time. Material changes will be communicated via email and a prominent notice on the platform. Continued use after changes constitutes acceptance.

For privacy-related inquiries or to exercise your data rights:

• Email: hello@directrent.ng
• Address: Lagos, Nigeria

You may also contact Nigeria's data protection authority: National Information Technology Development Agency (NITDA), Abuja.