Introduction
Vacation Haven Ltd. is committed to protecting the personal data of our guests, agents, and website users in compliance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable regulations. This Data Protection Policy outlines how we collect, process, store, and protect your personal information.
Data Collection
We collect personal information necessary for providing our services, including but not limited to:
- Full name, email address, phone number, and address for booking and customer service purposes.
- Bank account details for agents to facilitate commission payments.
- Identification documents (optional) for agent verification, such as Passport, Driver's License, or NIN.
- Website usage data, including IP addresses, browser type, and cookies, to improve user experience.
Purpose of Data Processing
Your personal data is processed for the following purposes:
- Processing bookings and managing reservations for our shortlet apartments.
- Facilitating agent onboarding, commission tracking, and payments.
- Communicating important updates, such as booking confirmations or changes to our services.
- Improving our website functionality and user experience through analytics.
- Complying with legal obligations, including NDLEA coverage and other regulatory requirements.
Legal Basis for Processing
We process personal data based on the following legal grounds under the NDPA 2023:
- Consent: Where you have explicitly agreed to the processing of your data (e.g., by submitting an agent application or booking form).
- Contractual Necessity: To fulfill our contractual obligations, such as processing bookings or agent commissions.
- Legal Obligation: To comply with Nigerian laws and regulations, including tax or law enforcement requirements.
- Legitimate Interests: For improving our services, ensuring website security, and preventing fraud, where such interests do not override your rights.
Data Protection Measures
We implement robust measures to safeguard your personal data, including:
- Encryption of sensitive information, such as bank details, during transmission and storage.
- Access controls to ensure only authorized personnel can access personal data.
- Regular security audits and updates to our systems to prevent unauthorized access.
- Secure payment processing through trusted platforms like Paystack.
Data Sharing
We do not share your personal data with third parties except in the following circumstances:
- With trusted service providers (e.g., Paystack) for payment processing, who are contractually obligated to protect your data.
- With law enforcement or regulatory authorities when required by law, such as NDLEA compliance.
- With your explicit consent for specific purposes, such as agent verification processes.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:
- Booking data is retained for 5 years to comply with financial and tax regulations.
- Agent data is retained for the duration of the agent’s relationship with Vacation Haven Ltd. and up to 2 years after termination, unless otherwise required by law.
- Website usage data is retained for up to 1 year for analytics purposes.
Your Rights
Under the NDPA 2023, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data where it is no longer necessary or where you withdraw consent.
- Right to Restrict Processing: Request limitation of data processing in certain circumstances.
- Right to Data Portability: Request your data in a structured, machine-readable format for transfer to another provider.
- Right to Object: Object to data processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact our Data Protection Officer at [email address] or [phone number].
Cookies and Website Tracking
Our website uses cookies to enhance user experience and analyze site performance. Cookies may include:
- Essential cookies for website functionality.
- Analytics cookies to track user behavior and improve our services.
- Marketing cookies to deliver personalized advertisements (with your consent).
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission (NDPC) within 72 hours, as required by the NDPA 2023.
Amendments to This Policy
We reserve the right to update this Data Protection Policy to reflect changes in law or our practices. Updates will be posted on our website, and significant changes will be communicated via email to registered users.
Contact Us
If you have questions or concerns about this Data Protection Policy or our data practices, please contact our Data Protection Officer:
- Email: info@vacationhaven.ng
- Phone: +234 912 022 1942
You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated.
Governing Law
This Data Protection Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023.