Privacy notice
Last updated 29 October 2026
This notice explains what personal data Proptiva Ratings collects, why, and your rights under the Nigeria Data Protection Act 2023 (NDPA).
Who is responsible
Proptiva Africa Limited (RC 9740545), 40 Agboola Ajumobi Street, Magodo, Lagos, Nigeria, is the data controller. Data protection contact: the Data Protection Officer, Proptiva Africa Limited, support@proptivaafrica.com.
What we collect
- Reviewers and people raising concerns: name, email, phone (optional), what you tell us about the company and your deal, and any evidence you send us.
- Company representatives: account details (name, email, phone), your role, and the proof of authority you upload (CAC certificate, a director’s ID).
- Company check customers: name, email, phone, country and the details of the company to check.
- Everyone: basic technical data needed to run the site securely, including Cloudflare’s bot check.
Why, and on what basis
- To check and publish reviews and handle disputes: our legitimate interest in running an accurate review service, and your consent to publication of your review under your first name.
- To handle concerns you raise privately: your consent, and our legitimate interest in protecting buyers.
- To verify company claims and run company accounts: performing our agreement with you.
- To deliver Company checks and Proptiva Checked: performing the contract.
- To keep records of disputes and removal requests: legal obligation and legitimate interest.
What is published
Only the review itself, with the reviewer’s first name, the state, the month of the dealing and the type of deal. We never publish reviewers’ emails, phone numbers or surnames, and we never publish concerns raised privately. Companies never see reviewers’ contact details.
Who we share it with
Our service providers, under contract: Supabase (database, accounts and file storage), Cloudflare (hosting and bot protection), Paystack (payments) and Brevo (email delivery). Some of them process data outside Nigeria, under written contracts that require them to protect it to the standard of the NDPA, as the Act requires for transfers outside Nigeria. We share data with authorities only where the law requires it.
How long we keep it
Published reviews: while they remain published, then 2 years. Concerns and evidence: 3 years after the last contact. Company claim documents: while the company account is active, then 1 year. Dispute and removal records: 6 years, the period within which legal claims about published content can be brought. After that we delete the data or make it anonymous.
Your rights
Under the NDPA you can ask to access, correct or delete your data, object to or restrict its use, withdraw consent, and ask for a copy in a portable format. Email us and we will reply within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).