Privacy Policy

LagosLandCheck ("we," "us," "our," or "the Service") operates lagoslandcheck.com. We are based in Lagos, Nigeria. This Privacy Policy explains: • What personal data we collect about you • How we use it • Who we share it with • Your rights under the Nigerian Data Protection Regulation (NDPR), the Nigerian Data Protection Act 2023, and (where applicable) the EU/UK GDPR for our diaspora users This policy applies to data collected through lagoslandcheck.com and any associated emails or PDF deliveries. It does not apply to third-party services we link to (Paystack, Google Maps, etc.) — those have their own privacy policies. For questions about this policy or to exercise any of your rights, contact support@lagoslandcheck.com.

We collect the minimum data needed to provide the Service: (a) Email address — when you pay for a report. Used to deliver the report and reply to support enquiries. (b) Name — when you fill out the contact form. Used to address you personally in replies. (c) Coordinates and addresses you submit — to run the six verification checks. We retain these for analytics, fraud detection, and to allow you to re-download past reports. (d) Payment metadata — Paystack handles all card processing. We receive only: payment reference, success/failure status, transaction amount, and timestamp. We DO NOT receive or store your card number, CVV, PIN, or full bank details. (e) Email engagement data — when we send you an email via Resend, Resend tracks delivery status (delivered, opened, clicked, bounced). We use this to detect deliverability issues. (f) Server logs — IP address, browser type, pages visited, timestamps. Retained for 30 days for security and debugging. (g) Cookies — we use only essential cookies (session management, payment flow). We do NOT use advertising trackers, retargeting pixels, or behavioural analytics cookies. We do not currently use Google Analytics. We do NOT collect: • Biometric data • National Identification Numbers (NIN) • Bank account details • Health, religion, or political information • Children's data (the Service is not intended for users under 18)

We use your data only for these specific purposes: (a) Service delivery — running the six checks, generating the report, emailing it to you, providing access to re-download. (b) Support — responding to your contact form submissions and email enquiries. (c) Payment processing — confirming your payment with Paystack and issuing receipts. (d) Fraud prevention — identifying abusive use of the Service (e.g., automated scraping, duplicate payment attempts). (e) Marketing emails (only with your explicit consent) — if you opt in via the checkbox at payment, we may send occasional emails about new features, Lagos property news, fraud alerts, and product updates. Frequency: no more than 2 emails per month. Every marketing email includes a one-click unsubscribe link. (f) Service improvement — aggregated, anonymized analytics about which areas of Lagos are most checked, common risk patterns, etc. This data is never linked to identifiable individuals. We do NOT: • Sell your data to anyone, ever • Share your data with property developers, estate agents, or third-party marketers • Use your data for profiling beyond legitimate fraud prevention • Make automated decisions about you that have legal effect

Your data is shared only with the third-party service providers we need to operate the Service: (a) Paystack (paystack.com) — handles all card and payment processing. Subject to Paystack's Privacy Policy. (b) Resend (resend.com) — sends transactional and marketing emails. Subject to Resend's Privacy Policy. (c) Supabase (supabase.com) — stores coordinates, report references, and check results. Hosted in EU (Frankfurt) data centres. Subject to Supabase's Privacy Policy. (d) Google Cloud (google.com) — provides Google Maps Static API for satellite imagery. Subject to Google's Privacy Policy. (e) OpenAI (openai.com) — performs AI satellite image analysis (GPT-4o). Images and coordinates sent to OpenAI are subject to OpenAI's API data policy, which states API data is not used for model training. (f) Vercel (vercel.com) — hosts the website. Subject to Vercel's Privacy Policy. We have selected these providers in part because they are GDPR / NDPR compliant. We do NOT share data with: • Lagos State Government registries (we only READ from public databases — we don't share customer information with them) • Property lawyers, surveyors, or estate agents • Advertising networks • Data brokers

We keep different categories of data for different periods: (a) Report data (coordinates, check results, reference numbers) — retained indefinitely to allow you to re-download past reports. Deletable on request. (b) Email addresses from purchases — retained for 24 months after the last purchase, then automatically deleted unless you have opted in to marketing emails (in which case retained until you unsubscribe). (c) Contact form submissions — retained for 24 months to enable continuity of support conversations, then deleted. (d) Payment metadata — retained for 7 years as required by Nigerian tax and financial regulations. (e) Server logs — automatically deleted after 30 days. (f) Email engagement data (delivery, open, click) — retained for 90 days by Resend, then deleted. You can request earlier deletion of any of the above (except payment metadata, which we are legally required to retain) by emailing support@lagoslandcheck.com.

Under the Nigerian Data Protection Act 2023, the NDPR, and (for applicable users) the EU/UK GDPR, you have the following rights: (a) Access — request a copy of all personal data we hold about you. (b) Correction — request that we correct inaccurate or incomplete data. (c) Deletion ("right to be forgotten") — request that we delete your data, subject to legal retention requirements (e.g., payment records). (d) Restriction — request that we limit how we process your data. (e) Objection — object to specific uses of your data, particularly marketing. (f) Portability — request your data in a machine-readable format. (g) Withdraw consent — at any time, for any consent you have given (e.g., marketing emails — just click unsubscribe). (h) Complaint — lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data. To exercise any of these rights, email support@lagoslandcheck.com with your request. We respond within 30 days as required by law. You do not need to give a reason, and exercising these rights is free.

We send two types of email: (a) Transactional emails — reports, payment receipts, support replies, password resets (if applicable). These are not marketing emails and are always sent because they are essential to the Service. (b) Marketing emails — new features, product updates, fraud alerts, occasional Lagos property news. We send these ONLY if you ticked the marketing opt-in checkbox at payment. If you opted in but want to opt out: • Click the "Unsubscribe" link at the bottom of any marketing email — instant, no questions asked • Or email support@lagoslandcheck.com asking to be unsubscribed Opting out of marketing emails does NOT affect your access to the Service or any transactional emails about reports you have already paid for. You can re-subscribe later by emailing support.

We take reasonable security measures, including: • HTTPS encryption on all pages • Encrypted storage for sensitive data (Supabase encrypts at rest) • Access controls — only authorized personnel can access user data • Secret rotation — API keys are rotated when leaked or suspected • Vendor selection — we use providers (Paystack, Resend, Supabase) that meet industry security standards • No card storage — payment details are never on our servers; they go directly to Paystack No system is 100% secure. If a data breach occurs that may compromise your personal data, we will notify you within 72 hours as required by Nigerian law, and notify the NDPC. To report a security concern, email support@lagoslandcheck.com with "SECURITY" in the subject line.

LagosLandCheck is operated from Nigeria. If you access the Service from outside Nigeria (e.g., as a diaspora buyer in the UK, US, EU, or elsewhere), your data may be transferred to and processed in: • Nigeria (our base of operations) • Frankfurt, Germany (Supabase database hosting, Resend EU region) • Ireland (Resend processing region for some flows) • United States (OpenAI API, Vercel hosting, Google Cloud) Where we transfer data internationally, we rely on: • Standard Contractual Clauses with EU vendors • Adequacy decisions (where applicable) • Vendor compliance with GDPR / NDPR For EU/UK users specifically: the legal basis for our processing is contract performance (delivering the report you paid for) and legitimate interest (running the business, preventing fraud).

We may update this Privacy Policy from time to time. Material changes (those affecting your rights or how we use your data) will be notified by: • Updating the "Last updated" date at the top of this page • Emailing past customers about significant changes affecting them • Posting a notice on the homepage for at least 14 days for major changes Minor updates (clarifications, typo fixes) may be made without notice. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

For any privacy-related question or request: Email: support@lagoslandcheck.com Subject line tip: include "PRIVACY" or "DATA REQUEST" for faster routing Response time: within 30 days as required by law (typically within 24–48 hours in practice) If you believe we have not handled your privacy concerns adequately, you may complain to: Nigeria Data Protection Commission (NDPC) Website: ndpc.gov.ng Email: info@ndpc.gov.ng For EU/UK users: you may also complain to your local data protection authority.