Legal

Privacy Policy

Effective date: 4 April 2026. This policy explains how YARDLA collects, uses, protects, and retains personal information in compliance with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).

1. Data We Collect

We collect the following categories of personal information:

  • Account data: full name, email address, authentication method, and account type.
  • Profile details: phone number, contact email, address, state of residence, professional licence number, and brokerage name (where applicable).
  • Listing data: property addresses, descriptions, images, and pricing information you submit.
  • Communication data: messages exchanged through the platform between users.
  • Usage data: pages visited and actions taken on the platform, collected to improve service reliability and user experience.

2. Legal Basis for Processing

Under the NDPA 2023, we process your personal data on the following lawful bases:

  • Contract performance: processing necessary to create and manage your account, publish listings, and facilitate enquiries.
  • Consent: where you have explicitly agreed, such as enabling WhatsApp contact or phone number reveal on your listings.
  • Legitimate interests: improving platform safety, fraud prevention, and service quality, provided these do not override your fundamental rights.
  • Legal obligation: where we are required to process or retain data to comply with Nigerian law.

3. How We Use Data

Your data is used to authenticate accounts, operate listing workflows, facilitate communication between users, improve platform safety, and send essential account notifications (such as password resets and moderation decisions). We do not sell your personal data to third parties, and we do not use it for behavioural advertising.

4. Third-Party Service Providers

To operate the platform, we engage trusted third-party processors including cloud hosting providers, image storage and delivery services, and transactional email delivery services. These providers process your data only as necessary to deliver their services to us, are bound by data processing agreements, and may process data outside Nigeria. Where cross-border transfers occur, we rely on appropriate safeguards consistent with the NDPA 2023.

5. Data Retention

We retain your personal data for as long as your account is active. Following account closure or deletion, we retain data for a further period of up to 12 months to handle any outstanding obligations, resolve disputes, and comply with legal requirements. Listing content associated with a deleted account is anonymised or removed within the same period. Communication records may be retained for up to 24 months for fraud-prevention and trust and safety purposes.

6. Sharing and Security

We share data only when required to deliver core platform functionality, comply with a legal obligation, or protect the safety of users. We implement reasonable technical and organisational controls — including encrypted transmission, access controls, and secure credential storage — to reduce the risk of unauthorised access. No system is completely secure; please notify us promptly if you suspect a data security incident.

7. Your Data Rights (NDPA 2023)

As a data subject under Nigerian law, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
  • Right to data portability: request your data in a structured, commonly used format.
  • Right to object: object to processing based on legitimate interests.
  • Right to withdraw consent: where processing is based on your consent (e.g. phone reveal, WhatsApp contact), you may withdraw that consent at any time from your account settings.

To exercise any of these rights, contact our Data Protection Officer at privacy@yardla.com. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

8. Your Controls

You may update your profile information at any time from your account settings. Direct WhatsApp contact for listings is only available when an advertiser enables both WhatsApp contact and phone reveal. If phone reveal is disabled, direct WhatsApp contact is not provided. You may toggle these preferences from your dashboard at any time.

9. Changes to This Policy

We may update this Privacy Policy as our practices evolve or as required by law. Material changes will be reflected here with a revised effective date. We encourage you to review this page periodically.

Data or privacy questions? Email our DPO. Also see our Terms of Use.