Draft — to be reviewed by counsel
Privacy policy
How Bricks & Click handles your personal data, written to align with the Nigeria Data Protection Act 2023. This draft should be reviewed by a data-protection professional before public launch.
What we collect
- Account data: name, username, e-mail, phone number, profile photo and bio.
- Identity data: NIN, BVN, date of birth (for BVN) and liveness photos, collected only with your consent.
- Listing data: property details, photos, documents and exact location.
- Activity data: messages, viewing bookings, invoices, searches you save and security logs.
How we protect it
- NIN and BVN are encrypted at rest; we store a keyed fingerprint so one number cannot back two accounts.
- Ownership documents and liveness photos are encrypted and viewable only by our verification team and, for verified documents, by ID-verified users with a confirmed viewing. Every access is logged.
- Exact property locations are never published; public maps use a deliberately offset approximate area.
- Photos have embedded location (EXIF) data removed on upload.
Who sees what
- Other users see your first name and last initial (or company name), profile photo, bio and verification level.
- A lister receives your phone number only after they confirm your viewing.
- Your e-mail address is never shown to other users.
Why we use it
To run the marketplace, verify identities and documents, prevent fraud, send service notifications, and comply with the law. We do not sell personal data.
Your rights
You may request access to, correction of, or deletion of your personal data, and withdraw consent for optional processing. Some records (such as invoices and audit logs) may be retained where the law requires.
Third parties
We use OpenStreetMap-based services for maps and address search. Where we connect an identity provider for NIN/BVN checks, it will process the numbers you submit on our behalf.