This Privacy Policy explains how Girard Property Limited ("Girard", "we", "us") collects, uses, shares and protects personal data when you use our website at girardpropertylimited.com, our mobile apps, and the services behind them. It is written to describe what actually happens on the platform, and it is updated when that changes.
Who we are
Girard Property Limited operates a property management, lettings and cross-border swap platform from 21 Fatai Arobieke Street, Off Admiralty Way, Lekki Phase 1, Lagos. For any privacy matter, contact privacy@girardpropertylimited.com or WhatsApp +234 704 817 3866.
Information we collect, and why
- Account details. Your name, email address and phone number, and the role you choose (tenant, owner, agent, subscriber or manager). Needed to run your account and to contact you about it.
- Enquiries and leads. If you ask about a property, request a valuation, or join the waiting list, we keep what you told us: your name, contact details, the area, budget or rent figure, and any notes. We use it to reply, to match you with a property, and to send up to 3 short follow-up emails if we have not heard from you, each carrying a link to stop them.
- Property and verification documents. If you list a property we ask for the title document, proof of your identity, and photographs and details of the property. These are used only to verify the listing and are stored in private storage that staff can reach and the public cannot.
- Tenancy records. Applications, tenancy agreements and the recorded signatures on them, rent invoices, payments, maintenance requests and the messages between owner, tenant and Girard. These are the record of the tenancy and are kept for as long as that record is needed.
- Payout details. If you receive rent through Girard we collect your bank account details and verify them against your identity through a verification service before money is sent. Card and bank details used to pay are handled by our payment processor and are not stored by us.
- Reviews. If you leave a review we keep your name as you gave it, your review, and an email address that is not published and is used only to check the review is genuine.
- Device and usage information. If you allow notifications, a device token so we can send them. Page-view analytics on the website, which do not use cookies and do not identify you. Basic technical logs needed to run and secure the service.
Who processes data on our behalf
We do not sell personal data and we do not show advertising. We share data only with the providers that run parts of the platform, each under its own terms, and only for the purpose named:
- Supabase hosts the database, sign-in and private file storage.
- Vercel hosts the website and its server functions, and provides page-view analytics.
- Paystack processes payments and pays rent to owners. We never see full card numbers.
- Dojah verifies an owner's bank account against their identity before a payout is approved.
- Resend sends our emails, including sign-in emails and lead follow-ups.
- Expo delivers push notifications to the mobile apps.
- Cloudflare Turnstile checks that a form was submitted by a person rather than a bot.
- Twilio, where configured, sends SMS and WhatsApp messages.
We may also disclose data where the law requires it.
Lawful basis
Under the Nigeria Data Protection Act we rely on the performance of our contract with you (running your account and tenancy), our legitimate interest in operating, securing and improving the platform, your consent where we ask for it (notifications, follow-up emails), and compliance with our legal obligations (financial record-keeping, identity verification for payouts).
International transfers
Some of the providers above process data on servers outside Nigeria. Where that happens we rely on the provider's own safeguards and contractual terms, and we take reasonable steps to keep your data protected to a standard consistent with the NDPA.
Data retention
- Accounts. Kept while your account is open. You can request deletion at any time (see below).
- Enquiries and leads. Kept while we are dealing with you. Follow-up emails stop when you ask, or after the third one.
- Verification documents. Kept while the property is on the platform and for a period afterwards so that a verification can be shown to have been done.
- Financial and tenancy records. Invoices, payments and signed agreements are kept for the period Nigerian law requires for financial and contractual records, even after an account is deleted, because they are the record of money that changed hands and of agreements that were made.
Deleting your account
You can request deletion from inside the app, or by email to privacy@girardpropertylimited.com. We complete the request within 30 days. Deletion removes your sign-in, your profile and your notification tokens, and ends our ability to contact you through the platform. It does not remove invoices, payments or signed agreements, which are kept for the retention period above and are held against an email address rather than a live account.
Security
Data is encrypted in transit. Access to personal data in the database is restricted by row-level rules so that a person sees only their own records and staff see only what their role allows. Private documents are stored in storage that is not publicly readable. No system is completely secure, and if we become aware of a breach affecting your data we will tell you and the regulator as the law requires.
Your rights
You may ask to see the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, to withdraw a consent you gave, and to receive a copy of it. Use the Data and privacy tools inside the app, or write to privacy@girardpropertylimited.com. You may also complain to the Nigeria Data Protection Commission.
Children
Girard is for adults aged 18 and over. It is not directed at children and we do not knowingly collect data from anyone under 18.
Cookies and local storage
We use local storage in your browser to keep you signed in and to remember preferences such as the consent notice. We do not use advertising or tracking cookies. Website analytics are cookieless and do not identify you.
Changes to this policy
When the platform changes in a way that affects your data, this page changes with it, and the date at the top is updated.
Contact
Girard Property Limited, 21 Fatai Arobieke Street, Off Admiralty Way, Lekki Phase 1, Lagos. Email privacy@girardpropertylimited.com.
← Back to Girard