# Afrik Casa Privacy Policy **Version:** 2026-10-06 **Effective date:** 6 October 2026 This Privacy Policy explains how Afrik Casa (“Afrik Casa”, “we”, “us” or “our”) collects, uses, stores, shares and otherwise processes personal data. Afrik Casa processes personal data in accordance with applicable Nigerian data-protection law, including the Nigeria Data Protection Act 2023. This Privacy Policy is a notice explaining our processing practices. Creating an Afrik Casa account does not require a separate blanket acceptance of this Privacy Policy. ## 1. Who this Policy applies to This Policy applies to people who visit Afrik Casa websites or applications; create accounts; buy, sell, build or inspect property; submit property information; participate in Deal Rooms; represent organisations; offer professional services; participate in the Partner Network; contact Afrik Casa; or otherwise interact with the Platform. ## 2. Personal data we may collect Depending on how you use Afrik Casa, we may process account and contact information; identity and verification information; organisation and professional information; property information; property media and capture information; transaction and Deal Room information; financial and payout information; referral information; device and security information; usage and technical information; and communications. Referral information may include a Referral Partner identifier, referral code, attribution source, referred-user relationship, Programme version, earning records, payout status and fraud or dispute records. A Referral Partner does not receive confidential referred-client transaction information merely because a referral attribution exists. ## 3. How we obtain personal data We may obtain personal data directly from you; from an organisation you represent; from another user who lawfully provides it; through property or transaction workflows; through authorised professionals or representatives; through referral links or codes; from verification or payment providers; from public or government sources where lawful; and automatically through Platform technology. ## 4. Why we process personal data We process personal data where there is an appropriate lawful basis, including where necessary to create and administer accounts; authenticate users; provide Platform services; perform contractual obligations; verify identity, ownership, organisations and authority; prevent fraud; maintain property and transaction records; operate Deal Rooms; arrange inspections; process payments or payouts; administer the Referral Partner Programme; communicate service information; comply with law; establish or defend legal claims; protect legitimate interests that do not improperly override user rights; or carry out optional activities for which consent is the appropriate lawful basis. Afrik Casa does not rely on one blanket consent as the legal basis for all processing. ## 5. Marketing Where required, Afrik Casa will obtain consent before sending optional promotional communications. You may withdraw marketing consent without losing access to core services that do not require that consent. Service, security, legal and transaction communications may still be sent where necessary or another lawful basis applies. ## 6. Progressive identity, trust and automated tools Afrik Casa may use automated systems, rules and artificial-intelligence-assisted tools to detect fraud, identify duplicate properties, assess risk, organise evidence, assist verification, classify referral benefits, identify suspicious activity or support authorised human reviewers. Where applicable law provides protections against decisions based solely on automated processing that have legal or similarly significant effects, Afrik Casa will provide applicable safeguards, which may include human review. ## 7. Referral privacy A Referral Partner may receive only information reasonably necessary to administer the Programme, such as whether attribution was valid, whether a referred account reached an eligible status and accounting information necessary to explain Programme earnings. Referral attribution does not entitle a Partner to private property documents, identity documents, confidential negotiations, Deal Room messages or unrelated personal data of the referred user. ## 8. Sharing personal data Afrik Casa may share personal data where necessary with payment and banking providers; communications providers; cloud and storage providers; identity or verification providers; authorised professionals; property service providers; transaction counterparties where appropriate; organisations you represent; regulators, courts and law-enforcement bodies where lawfully required; fraud, security or compliance providers; analytics and infrastructure providers; and professional advisers. Afrik Casa does not sell personal data to advertisers. ## 9. International transfers Some service providers or technical infrastructure may process data outside Nigeria. Where personal data is transferred internationally, Afrik Casa will use safeguards required by applicable Nigerian data-protection law. ## 10. Data minimisation and accuracy Afrik Casa seeks to collect information reasonably necessary for the relevant Platform purpose. Users should keep their information accurate and current. Afrik Casa may request updates where verification, legal, security or transaction requirements make this necessary. ## 11. Retention Afrik Casa retains personal data only for as long as reasonably necessary for the purpose for which it was collected or for legitimate legal, regulatory, security, fraud-prevention, evidential, contractual or dispute-resolution requirements. Transaction, verification, property, fraud-prevention and legal records may need to be retained after an account is closed where lawfully necessary. ## 12. Security Afrik Casa uses technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. No electronic system can guarantee absolute security. ## 13. Your data-protection rights Subject to applicable law, you may have rights to be informed about processing; access personal data; correct inaccurate information; request erasure where legally applicable; restrict certain processing; object to certain processing; request data portability where applicable; withdraw consent where processing is based on consent; obtain safeguards concerning certain automated decisions; and lodge a complaint with the Nigeria Data Protection Commission. Some rights are subject to legal exceptions. Afrik Casa may retain information needed for fraud prevention, legal claims, regulatory compliance or transaction records even after an erasure request where applicable law permits or requires it. ## 14. Privacy requests Privacy requests may be submitted through the official privacy or support contact channel published on the Platform. Afrik Casa may reasonably verify the identity of the requester before releasing, changing or deleting personal information. ## 15. Cookies and similar technologies Afrik Casa may use cookies or similar technologies for authentication, security, preferences, Platform functionality, performance measurement and permitted analytics or marketing. Where applicable law requires consent for a particular technology, Afrik Casa will request it. ## 16. Children Afrik Casa transactional services are intended for adults. Afrik Casa does not knowingly permit persons under 18 to independently enter property transactions through the Platform. ## 17. Account closure Closing an account does not necessarily result in immediate deletion of every record. Afrik Casa may retain information where required for contractual, regulatory, fraud-prevention, transaction, security, evidential or legal purposes. ## 18. Changes to this Privacy Policy Afrik Casa may update this Policy to reflect changes to law, technology, services or processing practices. The current version and effective date will be published on the Platform. Where a new processing purpose requires consent, Afrik Casa will obtain that consent rather than treating a Privacy Policy update by itself as consent. ## 19. Complaints and contact You may contact Afrik Casa through the privacy or support contact details published on the Platform. Eligible complaints may also be raised with the Nigeria Data Protection Commission.