Privacy notice

We collect the following categories of personal data:

• Account data — name, email address, phone number, role (buyer, seller, agent), and country of residence at signup.
• Identity documents — government-issued ID used for KYC, selfie liveness verification, and where applicable a proof-of-address document.
• Listing data — if you list a plot: title deed, survey plan, receipts, GPS coordinates, photography, and any free-text description you submit.
• Interaction data — listings you save or enquire about, inspection requests, verification-tier upgrade requests, and messages exchanged through the Platform messaging system.
• Device and analytics data — IP address, browser user-agent, pages viewed, approximate location at the city level, and cookies set by our first-party analytics.

We process personal data for the following purposes:

• Operating the marketplace — creating your account, rendering listings, facilitating enquiries and inspection requests.
• Running verification — checking identity documents, briefing partner legal firms and surveyors, producing tier badges and evidence summaries.
• Fraud prevention — detecting duplicate listings, anomalous transaction patterns, and suspicious activity for review or reporting under the MLPPA 2022 framework.
• Communications — transactional notifications (account, verification, enquiry), and service updates. Marketing communications are sent only where you have opted in.
• Product improvement — aggregated, de-identified analytics used to improve the Platform.

Under NDPA 2023, s.25, we process personal data on one or more of the following lawful bases:

• Consent — for cookies beyond those strictly necessary, opt-in marketing, and any processing you explicitly authorise via the Platform UI.
• Performance of a contract — delivering the Platform services you requested by creating an account.
• Legitimate interest — fraud prevention, network security, product analytics, and record-keeping, where those interests are not overridden by your rights or freedoms.
• Legal obligation — AML/CFT record retention under the MLPPA 2022, responses to NFIU and EFCC requests, and compliance with court orders.

To complete verification, we share specified personal data with independent partners. Sharing is limited to what a given tier requires:

• Tier 2 (Documents checked) — partner legal firms receive the title deed, survey plan, and chain-of- ownership paperwork together with seller contact details sufficient to request clarification.
• Tier 3 (Site verified) — partner surveyors receive the GPS coordinates, seller contact details needed to coordinate access, and any prior documentation relevant to the walk.
• Tier 4 (Title Check Pack) — partner legal firms receive the full documentation set plus buyer contact details when a buyer has requested the upgraded pack.

Every partner executes a data-sharing agreement that binds them to use the data only for the instructed work product and to retain it in accordance with their own professional-body rules.

Land and More is operated from Nigeria. Diaspora buyers may access the Platform from the United Kingdom, the United States, Canada, the United Arab Emirates, and other jurisdictions. When personal data moves across a border as a consequence of your use of the Platform, we rely on the conditions set out in NDPA 2023, s.41, namely adequacy decisions issued by the NDPC, binding corporate rules where applicable, or your explicit consent given at the time of the transfer.

Our cloud infrastructure is hosted in the European Union. The NDPC has recognised EU jurisdictions as offering an adequate level of protection for personal data.

We retain personal data only for as long as necessary:

• Active account data — held for the life of the account plus 30 days after deletion to allow recovery from accidental removal.
• KYC records and verification evidence — held for a minimum of five years after the last transaction, as required by the MLPPA 2022 and related AML/CFT regulations.
• Listing records — archived for seven years after delisting to support dispute investigation.
• Analytics logs — retained for 90 days at user-identifiable granularity, then aggregated.

Subject to the exemptions in the NDPA, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of data that is no longer necessary for the purpose for which it was collected.
• Port your data to another service in a structured machine-readable format.
• Object to processing based on our legitimate interests, and withdraw consent where consent is the lawful basis for processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe our processing breaches the NDPA.

To exercise these rights, contact our Data Protection Officer using the details in section 10.

We use first-party cookies for session management, anti-fraud protection, and measurement. Strictly-necessary cookies are set without consent. Measurement cookies require explicit consent on your first visit; you can withdraw consent at any time from the cookies control in your account settings.

The Platform does not embed third-party advertising trackers. Where analytics data leaves the Platform, it has been aggregated and stripped of identifiers beforehand.

Our Data Protection Officer can be reached at dpo@landandmore.ng (placeholder address). Written correspondence can be directed to our registered office in Lagos, Nigeria.

If you are unsatisfied with our response, you may escalate to the Nigeria Data Protection Commission at ndpc.gov.ng. The NDPC operates a public complaints channel and publishes guidance on data- subject rights at the same address.