Legal
Privacy Policy
How we collect, use, store and protect your personal data — and the rights you have over it.
Draft pending review. This document is a working draft prepared for the site build. It must be reviewed and approved by a qualified legal practitioner, and the company details and data protection registration confirmed, before the site goes live.
Last updated: 12 August 2026
Who we are
TrustCreast Homes Limited (“TrustCreast”, “we”, “us”) is a property company operating in Nigeria. We are the data controller for the personal data described in this policy. You can reach us at info@trustcreasthomes.com.
We process personal data in accordance with the Nigeria Data Protection Act 2023 and the regulations made under it.
What we collect
Information you give us
- Name, email address and telephone number when you make an enquiry, request a viewing or valuation, or contact us
- Details of the property or requirement you are enquiring about, including budget, preferred areas and timescale
- Where you proceed to a transaction: identification documents, proof of address, employment and income evidence, and bank statements, as required for tenant referencing or statutory anti-money-laundering checks
Information collected automatically
- IP address, browser type and device information, collected in server logs
- Pages visited and searches performed on this site, used to understand which listings and areas are in demand
- A truncated, irreversible hash of your IP address, retained temporarily to rate-limit form submissions and block automated abuse. This is deliberately designed so it cannot be used to identify you.
Why we process it, and on what basis
- To respond to your enquiry — because you asked us to, and because it is necessary to take steps prior to entering a contract
- To carry out our services — performance of a contract with you, such as a tenancy or agency agreement
- To verify identity and conduct referencing — compliance with our legal obligations, and our legitimate interest in preventing fraud
- To improve the site and prevent abuse — our legitimate interest in operating a secure, useful service
- To send you property alerts or marketing — only with your consent, which you may withdraw at any time
Who we share it with
We do not sell your personal data. We share it only where necessary:
- With the landlord, vendor, buyer or tenant on the other side of your transaction, to the extent required to progress it
- With solicitors, surveyors, referencing agencies and contractors instructed in connection with your matter
- With service providers who host our systems and process data on our behalf under contract
- With regulators, law enforcement or courts where we are legally required to do so
Where your data is held
Our systems are hosted with reputable providers, and some infrastructure is located outside Nigeria. Where personal data is transferred outside Nigeria we take steps to ensure it remains protected to a standard consistent with the Nigeria Data Protection Act 2023.
How long we keep it
- Enquiries that do not proceed: retained for up to 24 months, so we can pick up the conversation if you return
- Transaction and tenancy records: retained for the period required by law and for the resolution of any subsequent dispute
- Identity and anti-money-laundering records: retained for the statutory period
- Rate-limiting hashes: retained for a short period only, then deleted
Your rights
Under the Nigeria Data Protection Act 2023 you may:
- Request a copy of the personal data we hold about you
- Ask us to correct data that is inaccurate or incomplete
- Ask us to delete data where we no longer have a lawful basis to keep it
- Object to processing carried out on legitimate interests
- Withdraw consent to marketing at any time
- Lodge a complaint with the Nigeria Data Protection Commission
To exercise any of these, email info@trustcreasthomes.com. We will respond within the period required by law.
Security
Access to personal data is restricted to staff who need it, data is transmitted over encrypted connections, and our database enforces row-level access controls so that enquiry records are not publicly readable. No system is perfectly secure, but we take these obligations seriously and review them.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.
