Legal
Privacy Policy
Last updated: 7 May 2026
LodgeSelect ("we", "us") respects your privacy. This policy explains what personal data we collect, why we collect it, and your rights under the UK GDPR and the UK Data Protection Act 2018, and the Nigeria Data Protection Act 2023 (NDPA) overseen by the Nigeria Data Protection Commission (NDPC).
1. Data we collect
- Account data — name, email, password hash.
- Booking data — check-in/out dates, guest count, apartment chosen.
- Payment data — handled directly by Stripe (UK) or Paystack (NG); we never see or store your full card details.
- Communications — messages sent via our contact form or email.
- Technical data — IP address, device, browser, and basic analytics.
2. How we use it
- To provide, secure, and improve the Service.
- To process bookings and payments, and to send you transactional emails (receipts, check-in info, password resets).
- To comply with legal, tax, and accounting obligations.
- With your consent, to send marketing or newsletter emails — you can unsubscribe at any time.
3. Legal bases (UK / EU)
We process your data on the basis of contract (to deliver bookings), legitimate interests (security, fraud prevention, service improvement), legal obligation (tax, accounting), and consent (marketing, optional cookies).
4. Sharing
We share data only with the processors needed to run the Service:
- Supabase (database, authentication, file storage)
- Stripe (UK payments)
- Paystack (Nigeria payments)
- Resend (transactional email delivery)
- Hosting and analytics providers used to operate the website
Each is bound by a data-processing agreement. We do not sell your personal data.
5. International transfers
Some processors are based outside the UK or Nigeria. Where data is transferred we rely on adequacy decisions or Standard Contractual Clauses to ensure equivalent protection.
6. Retention
We retain account and booking records for up to 7 years to meet UK and Nigerian tax and accounting obligations, then delete or anonymise them. You may request earlier deletion (see "Your rights" below) subject to legal retention requirements.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request deletion ("right to be forgotten");
- object to or restrict processing;
- data portability;
- withdraw consent at any time.
To exercise any of these, email privacy@lodgeselect.com. UK users may complain to the Information Commissioner's Office (ICO); Nigerian users may complain to the Nigeria Data Protection Commission (NDPC).
8. Cookies
We use a small number of cookies — strictly necessary cookies (always on) and, with your consent, analytics cookies. See the cookie banner shown on your first visit, or update your choices any time by clearing cookies for our domain.
9. Contact
Data controller: LodgeSelect. Email privacy@lodgeselect.com.