Privacy Policy

RentAll Africa Ltd (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website at rentallafrica.com, our mobile applications, and related services (collectively, the “Platform”). This policy applies to all users — Customers, Vendors, and visitors.

1. Information We Collect

1.1 Information You Provide

• Account Information: Full name, email address, phone number, password, and profile photo.
• KYC Verification: Government-issued ID (NIN, international passport, or other valid ID), ID number, selfie photograph, and residential address including Local Government Area (LGA).
• Vendor Business Details: Business name, business type, CAC registration number, tax identification number, business address, bank name, bank account name, and bank account number.
• Listing Information: Item descriptions, photographs, pricing, location details, and features (provided by Vendors).
• Booking Information: Rental dates, quantities, payment details, and any messages exchanged between parties.
• Condition Documentation: Timestamped photographs of rented items at pickup and return, including GPS coordinates.
• Communications: Messages sent through the in-app chat system, support requests, and dispute details.
• Reviews: Ratings, written reviews, and vendor responses.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Usage Data: Pages visited, features used, listing views, search queries, and interaction patterns.
• Location Data: GPS coordinates captured during condition photo documentation and approximate location for listing search.
• Log Data: IP address, access times, and referring URLs.

1.3 Information from Third Parties

• Payment Processors: Transaction status, payment references, and verification data from Paystack and Flutterwave.
• Referrals: Referral source information when you join through a referral link.

2. How We Use Your Information

We use your personal information for the following purposes:

• Account Management: Creating and managing your account, verifying your identity, and processing KYC.
• Facilitating Rentals: Processing bookings, payments, escrow management, caution fee handling, and fund releases.
• Safety & Trust: Verifying Vendor and Customer identities, moderating listings and reviews, detecting and preventing fraud.
• Dispute Resolution: Investigating damage claims, reviewing condition photographs, and resolving disputes between parties.
• Communication: Sending booking confirmations, payment receipts, status updates, and important account notifications.
• Platform Improvement: Analysing usage patterns to improve features, user experience, and search relevance.
• Legal Compliance: Meeting obligations under Nigerian data protection regulations, anti-money laundering laws, and other applicable legislation.

3. Legal Basis for Processing

We process your personal data under the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) on the following bases:

• Consent: You consent to data processing when you create an account and accept our Terms & Conditions.
• Contract Performance: Processing necessary to fulfil rental bookings and provide Platform services.
• Legitimate Interest: Fraud prevention, platform security, and service improvement.
• Legal Obligation: KYC verification and compliance with Nigerian financial regulations.

4. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

• Between Parties: When a booking is confirmed, limited contact details and Listing address are shared between the Customer and Vendor to facilitate pickup and return.
• Payment Processors: Transaction data is shared with Paystack and Flutterwave to process payments securely.
• Service Providers: We may share data with cloud hosting, analytics, and communication providers who assist in operating the Platform, under strict data processing agreements.
• Legal Requirements: We may disclose information when required by Nigerian law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

5. Data Storage & Security

• Your data is stored on secure cloud servers with encryption at rest and in transit.
• Passwords are hashed and never stored in plain text.
• KYC documents and sensitive identification data are stored in private, access-controlled storage.
• Payment card details are never stored on our servers — they are processed directly by our payment partners (Paystack, Flutterwave).
• We implement industry-standard security measures including access controls, regular security audits, and monitoring.

6. Data Retention

• Active Accounts: Data is retained for as long as your account remains active.
• Closed Accounts: After account closure, we retain essential data for up to 6 years to comply with Nigerian financial and tax regulations.
• Booking Records: Transaction and booking records are retained for a minimum of 6 years for legal and audit purposes.
• Condition Photos: Pickup and return photos are retained for 90 days after booking completion, or until any related dispute is resolved — whichever is later.
• Messages: Chat messages are retained for 12 months after the last activity in a conversation.

7. Your Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access: Request a copy of your personal data held by us.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention obligations.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Data Portability: Request your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interest.
• Withdraw Consent: Withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies & Tracking

We use essential cookies for authentication, session management, and security. We may also use analytics cookies to understand how users interact with the Platform. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect Platform functionality.

9. Children’s Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information.

10. International Data Transfers

Your data may be processed on servers located outside Nigeria for cloud hosting and infrastructure purposes. Where this occurs, we ensure adequate safeguards are in place in compliance with the NDPA, including data processing agreements with appropriate security standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The “Last updated” date at the top of this page indicates when the policy was last revised.

12. Contact Us

For privacy-related questions, data access requests, or complaints:

• Email: [email protected]
• Address: Shop S4 & S5 Zonta Shopping Complex, Kunsela Road, Ikate, Lagos, Nigeria

If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).