Privacy notice

We collect the following categories of personal data:

• Account data: name, email address, phone number, role (buyer, seller, agent), and country of residence at signup.
• Identity documents: the image of the government-issued ID, professional licence or CAC certificate you choose to upload for identity review, and its number held as a hash and its last four characters. Identity verification is optional.
• Listing data: if you list a plot: title deed, survey plan, receipts, GPS coordinates, photography, and any free-text description you submit.
• Interaction data: listings you save or enquire about, inspection requests, document-copy requests, and the messages you send through the Platform.
• Device and analytics data: IP address, browser user-agent, pages viewed and approximate location at the city level, counted without cookies.

Verify a property requests: this covers the details and documents you send us when you ask us to check a property. We keep what you tell us about the property (its type, state, local government area, address or description, plot or title number, the documents you hold and any notes), the files you upload, our quote and your report. Only you and Land and More’s reviewers can open the files you upload; the lawyer who reviews your request receives them from our team (see section 5). We delete the files you uploaded for a Verify a property request 90 days after we deliver your report, unless your request links a listing you are selling on Land and More. Your report stays on your account. Our team runs this deletion by hand at the start of each month, so a file can be kept for up to a month longer. If a request is cancelled or declined, we keep its files until you ask us to delete them. The five-year period in section 7 does not apply to these files.

We process personal data for the following purposes:

• Operating the marketplace: creating your account, rendering listings, facilitating enquiries and inspection requests.
• Running checks: reviewing the identity documents sellers choose to upload, handling Verify a property requests and briefing the lawyer who reviews them, and showing each listing’s tier badge.
• Fraud prevention: reviewing listings and reports of concern, recording our findings for internal use, and reporting where the MLPPA 2022 framework requires it.
• Communications: transactional notifications (account, verification, enquiry), and service updates. Marketing communications are sent only where you have opted in.
• Product improvement: aggregated, de-identified analytics used to improve the Platform.

Under NDPA 2023, s.25, we process personal data on one or more of the following lawful bases:

• Consent: for cookies beyond those strictly necessary, opt-in marketing, and any processing you explicitly authorise via the Platform UI.
• Performance of a contract: delivering the Platform services you requested by creating an account.
• Legitimate interest: fraud prevention, network security, product analytics, and record-keeping, where those interests are not overridden by your rights or freedoms.
• Legal obligation: AML/CFT record retention under the MLPPA 2022, responses to NFIU and EFCC requests, and compliance with court orders.

When a lawyer outside Land and More reviews a Verify a property request, we share with them only what that review needs: the documents you uploaded, what you told us about the property, and contact details sufficient to ask you a question. We do not use anyone outside Land and More to check listings.

Anyone we share data with for a check executes a data-sharing agreement that binds them to use the data only for the instructed work product and to retain it in accordance with their own professional-body rules.

Land and More is operated from Nigeria. Diaspora buyers may access the Platform from the United Kingdom, the United States, Canada, the United Arab Emirates, and other jurisdictions. When personal data moves across a border as a consequence of your use of the Platform, we rely on the conditions set out in NDPA 2023, s.41, namely adequacy decisions issued by the NDPC, binding corporate rules where applicable, or your explicit consent given at the time of the transfer.

Our database is hosted by Supabase in Zurich, Switzerland, and the website is served by Vercel.

We retain personal data only for as long as necessary:

• Active account data: held for the life of the account plus 30 days after deletion to allow recovery from accidental removal.
• KYC records and listing verification records: held for a minimum of five years after the last transaction, as required by the MLPPA 2022 and related AML/CFT regulations. This applies to the records behind listings and their verification tiers only.
• Listing records: archived for seven years after delisting to support dispute investigation.
• Analytics logs: retained for 90 days at user-identifiable granularity, then aggregated.

Subject to the exemptions in the NDPA, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of data that is no longer necessary for the purpose for which it was collected.
• Port your data to another service in a structured machine-readable format.
• Object to processing based on our legitimate interests, and withdraw consent where consent is the lawful basis for processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe our processing breaches the NDPA.

To exercise these rights, contact us using the details in section 10.

We set cookies only to keep you signed in and to protect your session. These are strictly necessary, so they are set without asking. We do not set advertising or measurement cookies.

The Platform does not embed third-party advertising trackers. We count page visits with Vercel Analytics, which uses no cookies, and our error reports are set not to include personal data such as your IP address.

Write to us about your personal data at info@getlandandmore.com. Written correspondence can be directed to our registered office in Jos, Plateau State, Nigeria.

If you are unsatisfied with our response, you may escalate to the Nigeria Data Protection Commission at ndpc.gov.ng. The NDPC operates a public complaints channel and publishes guidance on data- subject rights at the same address.