1. Overview

Loftylot Apartments is committed to protecting the privacy of our guests and website users. This Privacy Policy explains how we collect, use, store, and protect personal data.
We comply with:

Nigerian Data Protection Act (NDPA)
Applicable GDPR/UK-GDPR principles for international guests

2. Information We Collect

We may collect:

Full name, contact details
Government ID or passport information
Booking and payment details
CCTV recordings (public areas only)
Marketing preferences
Communications and inquiries

3. How We Use Personal Data

Personal data is used to:

Process bookings and payments
Verify identity and comply with legal obligations
Provide accommodation services
Improve guest experience
Send marketing communications (with consent)
Ensure property security

4. Legal Basis for Processing

We process data based on:

Contractual necessity
Legal obligations
Legitimate business interests
Consent (for marketing communications)

5. Marketing Communications

Guests may receive promotional emails or SMS.
You may opt out at any time using provided unsubscribe mechanisms or by contacting us directly.

6. Data Sharing

We may share data with:

Payment processors
Booking platforms
Legal or regulatory authorities
Service providers supporting operations

We do not sell personal data.

7. International Data Transfers

Where data is transferred outside Nigeria, we ensure appropriate safeguards are in place consistent with international data-protection standards.

8. Data Retention

Personal data is retained only as long as necessary for:

Legal compliance
Business operations
Dispute resolution

9. Your Rights

Subject to applicable law, you may:

Access your data
Request correction or deletion
Withdraw consent
Object to processing
Lodge complaints with relevant authorities

10. Security Measures

We implement administrative, technical, and physical safeguards to protect personal data against unauthorized access or misuse.

Privacy Policy

Loftylot Apartments

Last updated: January 11th 2026