Privacy Policy

RateMyAgentNaija (“we”, “us”, or “the Platform”) is committed to protecting your personal information in line with the Nigeria Data Protection Regulation 2019 (NDPR), the Nigeria Data Protection Act 2023 (NDPA), and any applicable state legislation. Please read this policy carefully before using our services.

1. Who We Are

RateMyAgentNaija is a Nigerian online platform that enables property buyers, tenants, landlords, and investors to read and submit verified reviews of licensed real estate agents across all 36 states and the FCT. Our registered business address is available upon request at privacy@ratemyagentnaija.com.

2. Data We Collect

2.1 Information You Give Us

• Reviewers: Full name (or shortened version), email address, password (hashed — we never store plaintext passwords), and the review content you submit.
• Agents: Full name, professional email address, phone number, agency/company name, regulatory licence number (LASRERA or equivalent), city, and state of operation.
• All users: IP address at time of registration and review submission (for fraud prevention).

2.2 Information Collected Automatically

• Browser type and version, operating system, referring URL, pages visited, and time/date of visit — collected via server logs.
• Cookies required for maintaining your login session (session cookies, deleted when you close your browser).

2.3 Information We Do Not Collect

We do not collect payment card numbers, bank details, National Identification Numbers (NIN), BVN, or any government-issued identity document details unless you voluntarily attach them to a support request.

3. How We Use Your Data

4. Review Anonymity

Reviewers have the option to display only a shortened version of their name on published reviews (e.g. “Tunde A.”). Your full name, email address, and IP address are stored internally but are never made public. Agents cannot see who left a review beyond the display name you choose.

5. Sharing Your Data

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers: Web hosting (Hostinger), email delivery (Brevo/SendGrid) — under data processing agreements.
• Regulatory bodies: LASRERA or equivalent state regulatory bodies — solely to verify agent licence numbers.
• Law enforcement: If required by a valid Nigerian court order or law enforcement request.

6. Data Retention

• Account data: Retained for the life of your account, plus 24 months after account deletion.
• Published reviews: Retained indefinitely as part of the public record unless removed under our dispute policy or upon verified legal request.
• Server logs and IP addresses: 90 days, then automatically deleted.

7. Your Rights Under the NDPA 2023

As a data subject, you have the right to:

• Access — request a copy of all personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your account and associated data (subject to legal retention requirements).
• Restriction — request that we stop processing your data while a dispute is resolved.
• Data Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw Consent — where processing is based on consent, withdraw it at any time.

To exercise any right, visit our Data Management page or email privacy@ratemyagentnaija.com. We will respond within 30 days.

8. Cookies

We use only strictly necessary cookies (session management and login). We do not use advertising or third-party tracking cookies. You may disable cookies in your browser settings, but this will prevent you from logging in to the platform.

9. Security

All data is transmitted over HTTPS (TLS 1.2+). Passwords are stored as bcrypt hashes. Our hosting environment is protected by a Web Application Firewall (WAF). We conduct regular security reviews and will notify affected users within 72 hours of any confirmed data breach.

10. Children

Our platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us immediately at privacy@ratemyagentnaija.com.

11. Changes to This Policy

We may update this policy periodically. Significant changes will be notified by email to registered users. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact & Complaints

For privacy enquiries: privacy@ratemyagentnaija.com

If you believe your data rights have been violated and we have not resolved your complaint, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.