1. Data controller
RentPal NG is the data controller for personal data processed through this platform. Our payment partner, cloud hosting provider and database/authentication provider act as data processors on our behalf.
2. What we collect
- Account data: name, email address, phone number, company name, role, avatar image.
- Listing data: property details, addresses, photographs and amenities submitted by landlords.
- Verification data: identity or ownership documents you upload to the verification flow.
- Transactional data: tenancy records, rent invoices, payment references, provider transaction IDs and receipts.
- Communications: messages you exchange with other users, inspection bookings, maintenance requests and notifications.
- Technical data: log records generated when you use the service.
We do not collect or store your card details. Card data is entered on our payment partner's hosted checkout page and never reaches RentPal.
3. Why we process it (lawful basis)
- Performance of a contract — operating your account, tenancies, invoices and payments.
- Legal obligation — record keeping, fraud prevention and responding to lawful requests.
- Legitimate interest — platform safety, moderation, abuse prevention and service improvement.
- Consent — optional marketing emails, which you can withdraw at any time.
4. Who can see your data
Access is enforced at the database level by row-level security. Tenants see their own bookings, messages, invoices, payments and receipts. Landlords see data relating to their own properties and tenancies. RentPal staff with an administrator or moderator role can access moderation, verification and payment records for governance purposes. Other users never see your payment records, invoices or verification documents.
5. Cross-border transfers
Our hosting, database and payment infrastructure may process data on servers located outside Nigeria. Where the NDPA 2023 applies, such transfers rely on the recognised transfer conditions — including contractual safeguards with our processors and, where relevant, your consent or the necessity of the transfer to perform our contract with you.
6. Retention
Account, tenancy, invoice, payment and receipt records are retained while your account is active and afterwards for as long as needed for financial, tax and dispute-resolution purposes. Verification documents are retained for the period needed to support the verification decision and any subsequent dispute.
7. Your rights
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data — much of this you can do yourself in your profile.
- Request deletion, subject to records we must keep for legal or financial reasons.
- Object to or restrict certain processing, and withdraw consent to marketing.
- Request portability of data you provided to us.
- Lodge a complaint with the Nigeria Data Protection Commission.
8. Security
Data is transmitted over encrypted connections. Uploaded documents and images are held in private storage buckets that are not publicly listable, with access granted through short-lived signed links to the people entitled to see them. Payment settlement is confirmed only from a signature-verified notification from our payment partner and a server-side verification call.
9. Cookies and local storage
We use browser storage to keep you signed in and to remember interface preferences. We do not run third-party advertising trackers.
10. Contact
Data protection requests can be raised through our Support & Disputes page.