Mazi Properties
Login

Privacy Policy

Last updated 2 October 2026

This Privacy Policy explains what personal data Mazi Properties ("we", "us", "our") collects through the Mazi Properties website, why we use it, who receives it and what rights you have. We process personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and applicable regulations and guidance of the Nigeria Data Protection Commission (NDPC). It should be read with our Cookie Policy and Terms & Conditions.

1. Information we collect

Account information

When you register we collect your first and last name, email address, optional phone number, account type (seeker, agent or agency/company) and password. Your password is stored only as a one-way hash, never in readable form.

Profile and listing information (agents, agencies and advertisers)

Display or company name, phone, WhatsApp number, email, address, website, social links, photo or logo, description and, where you provide it, your company registration number; plus the listings you publish (text, photos, price, location and an optional map pin). Agent and agency profiles and listings are public by design.

Enquiries, reports and messages

When you send an enquiry about a property or profile, report a listing, or use the contact form, we collect your name, email address, optional phone number, your message and your IP address, and your account if you are signed in. Enquiries are delivered to the advertiser concerned; contact-form messages are sent to our official address and stored for administrators.

Verification documents

If you apply for a verified badge you may upload documents such as identity documents, company registration certificates or property documents. They are stored in a private area that is not publicly accessible and are visible only to you and to authorised administrators; each administrator view is recorded.

Payment records

We keep a record of each payment (reference, purpose, amount, payment method, status and time). Card and bank details are entered with our payment provider and are not stored by us.

Saved searches and favourites

Your saved searches (filters and alert frequency) and favourite listings.

Technical and usage information

We record IP addresses for sign-in attempts, administrator actions, enquiries, reports, contact messages, spam and abuse prevention and advert measurement. We also keep our own first-party usage statistics: property page views, phone and WhatsApp number reveals, and advert impressions and clicks. We do not use Google Analytics, advertising networks or social-media tracking pixels.

2. How we use your information, and why

  • To provide the service you asked for (contract): create and manage your account, publish and moderate listings, deliver enquiries, process payments and run verification.
  • To send you service emails: email verification, password reset, enquiry notifications, payment receipts and decisions on listings, verifications and adverts.
  • To send saved-search alerts (consent): only if you save a search with alerts switched on. Every alert has an unsubscribe link. We do not run a newsletter or send bulk marketing.
  • To keep the Platform safe and prevent fraud and abuse (legitimate interests): sign-in protection, rate limiting, spam detection, reviewing reports and keeping an audit record of sensitive actions.
  • To understand and improve the Platform (legitimate interests): the first-party statistics described above.
  • To comply with the law and respond to lawful requests from authorities (legal obligation).

3. Who we share data with

We do not sell your personal data. We share it only as follows:

  • Advertisers and agents receive the details in the enquiries you send them. Listings and profiles you publish are visible to everyone.
  • Service providers that help us run the Platform: an email delivery provider (we plan to use Brevo) that sends our emails; our payment provider (Monnify) that processes card and bank payments; and our web hosting provider. They may process data on our instructions and under confidentiality obligations.
  • Map providers: listings with a map pin show an OpenStreetMap frame (or Google Maps if we have enabled it). Loading the frame may send your IP address and browser details to that provider, which may set its own cookies.
  • Authorities, where we are legally required to disclose information or need to protect rights, safety or property.

Some of these providers may process data outside Nigeria. Where that happens we take reasonable steps to make sure the data remains protected as the NDPA requires.

4. Cookies

We set one cookie, a session cookie that keeps you signed in and protects forms. We do not set analytics, advertising or preference cookies. Details are in the Cookie Policy.

5. Security

We use measures including HTTPS, one-way hashed passwords, sign-in lockout after repeated failures, a form-forgery (CSRF) token on every state-changing request, parameterised database queries, escaped output, strict security headers, re-processing of uploaded images, private storage for verification documents, encryption of stored secrets and deletion records, role-based administrator permissions and an audit log of sensitive actions. No system can be guaranteed completely secure. If a breach affects your personal data we will act and notify as the NDPA requires.

6. How long we keep data

  • Sessions: up to 24 hours.
  • Sign-in attempt records: 7 days.
  • Detailed usage events and advert tracking rows: 90 days; afterwards only daily totals are kept.
  • Sent emails: 30 days. Emails containing one-time links are erased as soon as they are sent.
  • Payment records and the administrator audit log: kept for accounting, security and legal purposes and not deleted when you delete your account.
  • Verification documents: kept while your account exists and deleted with it.
  • When an account is deleted we remove your profile, listings, photos, favourites, saved searches, received enquiries, notifications and verification documents, and anonymise enquiries you sent. We keep an encrypted copy of the account record for 12 months for legal and dispute purposes and then destroy it automatically, unless a legal hold applies.

7. Your rights

Subject to the NDPA and its exemptions, you have the right to be informed about how your data is used; to access your data; to have inaccurate data corrected; to have data erased; to object to or ask us to restrict certain processing; to withdraw consent where processing relies on consent (for example by unsubscribing from alerts); and to complain to the Nigeria Data Protection Commission.

You can delete your account yourself from your dashboard. To exercise any other right, email info@maziproperties.com or use our contact form. We may need to verify your identity before acting on a request.

8. Children

The Platform is intended for adults. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will deal with it.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page shows the current version, and we will notify registered users of material changes by email. Continued use of the Platform after an update means you accept it.

10. Contact

Questions about this policy or your personal data? Email info@maziproperties.com or use our contact form. You may also contact the Nigeria Data Protection Commission (NDPC) if you believe your rights have not been respected.