Data Protection

Last updated 21 June 2026

This page summarises how EstateOps protects personal data and the data-processing commitments we make to the estates that use the Service. It supports our Privacy Policy and is consistent with the Nigeria Data Protection Act 2023 (NDPA). A formal Data Processing Agreement (DPA) is available to customers on request.

1. Roles

For the operational and resident data held within an estate’s account, the estate is the data controllerand EstateOps is the data processor. We process that data only to provide the Service and on the estate’s documented instructions. For our own account, billing and website data, EstateOps is the controller.

2. What we process (on behalf of estates)

• Categories of data subjects: estate managers and staff, residents, and service partners.
• Categories of data: contact details, roles, issue/work-order content and photos, asset and maintenance records, checklist entries, visitor logs, and finance entries recorded by the estate.
• Purpose: to deliver facilities-management functionality to the estate.
• Duration: for the term of the estate’s subscription, then return or deletion as below.

3. Our commitments as processor

• Process personal data only on the controller’s documented instructions.
• Ensure people authorised to process data are bound by confidentiality.
• Apply appropriate technical and organisational security measures (see Security).
• Enforce strict isolation so one estate cannot access another estate’s data.
• Assist the controller, where reasonably possible, with data-subject requests and with security and breach obligations.
• Notify the controller without undue delay after becoming aware of a personal-data breach affecting their data.
• Delete or return personal data at the end of the engagement, subject to any legal retention requirements.
• Make available information reasonably necessary to demonstrate compliance.

4. Sub-processors

We use a small number of trusted providers to deliver the Service:

We require sub-processors to provide appropriate data-protection safeguards. We will give notice of material changes to this list.

5. International transfers

Where a provider processes data outside Nigeria, we rely on contractual and technical safeguards to maintain a level of protection consistent with the NDPA.

6. Security and access

Access by EstateOps staff to customer data is on a need-to-know basis for operating and supporting the Service, under confidentiality and access controls, with logging of administrative access. See our Security page.

7. Data-subject requests

If you are a resident or partner and wish to exercise your rights, please contact your estate management first (the controller). EstateOps will support estates in responding to valid requests.

8. Contact

Data-protection enquiries: privacy@estateops.ng. To request our Data Processing Agreement, email the same address.

This summary is provided for general information and should be reviewed by qualified legal counsel before you rely on it.