Skip to content
InventiveLabs Ltd

Data Protection Policy

Effective 8/24/2026

Controller: InventiveLabs Ltd

InventiveLabs Ltd (“we”, “our”, “us”) is committed to protecting personal data across all our platforms, including NaijaProperty, NaijaPlace, NaijaDirectories, Inventtive, Tutorial, NaijaLab, and many more. This policy explains how we collect, use, store, secure, and manage personal information in compliance with the Nigeria Data Protection Act (NDPA 2023) and NDPC regulations.

1. Purpose

This policy ensures that personal data is handled responsibly, securely, and transparently across all InventiveLabs platforms and services.

2. Scope

This policy applies to:

  • All users of our platforms

  • All employees, contractors, and partners

  • All systems, databases, and services operated by InventiveLabs Ltd

We process personal data under the following legal bases:

  • Contract: To provide and manage our services

  • Consent: For identity verification, marketing, and optional features

  • Legitimate Interest: Fraud prevention, platform security, service improvement

  • Legal Obligation: Compliance with regulatory requirements

4. Categories of Data We Collect

Depending on the platform, we may collect:

  • Contact details

  • Account information

  • Business or listing information

  • Usage and analytics data

  • Communication records

  • Optional marketing preferences

Sensitive Personal Data (NaijaProperty and NaijaPlace)

Through our identity verification provider (Didit.me), we process:

  • Government ID information

  • Facial biometrics

  • Liveness detection

  • Face match results

  • Verification metadata

We do not store raw biometric data. Only verification status, timestamp, and reference ID are retained.

5. How We Use Personal Data

We use personal data to:

  • Operate and improve our platforms

  • Support account and listing functionality

  • Verify identities (NaijaProperty and NaijaPlace)

  • Prevent fraud and abuse

  • Respond to inquiries

  • Comply with legal obligations

6. Third‑Party Processors

We work with trusted service providers, including:

  • Didit.me – Identity verification

  • Hetzner – Hosting and infrastructure

  • Resend – Email delivery

  • Stripe – Payment processing

All processors operate under written agreements and comply with NDPA requirements.

7. Cross‑Border Data Transfers

Some personal data may be processed outside Nigeria.
We implement safeguards such as encryption, secure hosting, and contractual protections to ensure compliance with NDPA 2023.

8. Data Security

We implement:

  • Encryption

  • Access controls

  • Secure hosting environments

  • Regular security audits

  • Monitoring for unauthorized access

  • Data minimization practices

9. Data Retention

We retain personal data only as long as necessary for:

  • Service delivery

  • Legal compliance

  • Fraud prevention

  • Platform security

Retention periods vary by platform and data category.

10. User Rights

Users may request:

  • Access

  • Correction

  • Deletion

  • Restriction

  • Withdrawal of consent

Requests may be sent to: legal@inventivelabs.ltd

11. Children’s Data

Our platforms are not intended for children under 18.
We do not knowingly process children’s personal data.

12. Automated Decision‑Making

We do not use automated decision‑making or profiling that produces legal or significant effects on users.

13. Breach Notification

In the event of a data breach, affected users and authorities will be notified promptly in accordance with NDPA 2023.

14. Data Protection Officer

Name: Said
Email: legal@inventivelabs.ltd
Role: Data Protection Officer (DPO)

15. Complaints

Users may lodge complaints with:

16. Updates

We may update this policy periodically to reflect regulatory changes or platform updates.