← Back to MyEstatePrivacy Policy
Effective date: January 1, 2025 · Last updated: April 2026
This policy explains how MyEstate Technology Ltd collects, uses, and protects your personal data in compliance with the Nigerian Data Protection Regulation (NDPR) 2019.
1. Data Controller
MyEstate Technology Ltd is the data controller responsible for your personal data. Contact our Data Protection Officer at: privacy@mynaijaestate.com
2. Data We Collect
We collect the following categories of personal data:
| Category | Examples |
|---|
| Identity | Full name, house/unit number, role (resident/guard/admin) |
| Contact | Phone number, email address (optional) |
| Transaction | Token purchases, payment references, deductions |
| Activity | Visitor passes created, gate entry logs, SOS events |
| Device / Technical | IP address, browser type, login timestamps |
| Visitor Data | Names and phone numbers of visitors you invite |
3. How We Use Your Data
- To operate the estate management platform and provide the features you use
- To verify visitor access codes at the gate
- To process token purchases and deductions
- To send important estate notifications and security alerts via SMS
- To maintain audit logs required for estate security
- To comply with applicable Nigerian laws and regulations
4. Legal Basis for Processing (NDPR)
We process your data on the following lawful bases:
- Consent — you explicitly accepted this policy and our Terms of Service on registration
- Contract performance — processing is necessary to deliver the service you registered for
- Legitimate interests — security logging, fraud prevention, and platform integrity
- Legal obligation — where required by Nigerian law
5. Data Sharing
We do not sell your personal data. We share data only with:
- Your estate administrator — they can see estate-wide activity logs and resident data
- Credo — our payment processor, for token purchase transactions
- SMS providers (Multitexter, Termii, Africa's Talking) — to deliver gate codes and alerts to phone numbers you provide
- VTPass — when you purchase airtime, data, or utility bill payments
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- Your name and phone number are anonymised within 30 days
- Transaction records are retained for 7 years as required by Nigerian financial regulations
- Security and audit logs are retained for 2 years
7. Your Rights Under NDPR
As a data subject, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, by closing your account
To exercise any of these rights, contact us at privacy@mynaijaestate.com. We will respond within 72 hours.
8. Security
We implement industry-standard security measures: passwords are hashed (bcrypt), authentication uses httpOnly JWT cookies, all data is transmitted over HTTPS, and we maintain detailed audit logs of administrative actions. However, no online system is 100% secure; please use a strong password and protect your device.
9. Cookies
We use a single httpOnly authentication cookie (myestate_token) that is strictly necessary for login. We do not use advertising or tracking cookies.
10. Minors
The Service is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us at privacy@mynaijaestate.com and we will delete the account promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically. The updated version will be posted on this page with a new effective date. Continued use of the Service after the update constitutes acceptance.
12. Contact & Complaints
Data Protection Officer: privacy@mynaijaestate.com
If you have unresolved concerns, you may lodge a complaint with the National Information Technology Development Agency (NITDA), the NDPR supervisory authority.
By registering on MyEstate, you confirm that you have read this Privacy Policy and consent to the processing of your personal data as described above.