1. Who controls your data
Peacoqs Limited (RC 9831276), of No. 8 Wutche Street, Rumuokwurusi, Rivers State, Nigeria, is the data controller for personal information collected through the Peacoqs website and mobile app. Data-protection questions, access requests and complaints go to privacy@peacoqs.com, or to our registered office at the address above.
2. What we collect
We collect the following categories of personal information:
- Account data: name, email address, phone number, password (stored only as a hash), roles, profile photo, and bio.
- Onboarding answers: what brought you to Peacoqs, your budget range, when you are looking to move, and how many properties you manage. You give these when you sign up and they shape what we show you.
- Business data: for agents and companies, your business name, RC number and tax identification number where you supply them.
- Listing data: property details, photos, videos, address, map coordinates, pricing, fees and house rules.
- Activity data: inspections scheduled, applications, bookings and stays, favourites, reviews, messages and conversations, and searches you run.
- Payment data: amount, gateway, transaction reference and status. We never receive or store full card numbers — those go straight to Paystack or Flutterwave.
- Verification data: see section 3, which covers it in full.
- Device data: device model, operating system, app version, push-notification token, and approximate location derived from your IP address.
- Precise location: only when you grant permission for the map and nearby-places features.
3. Identity and business verification
Verification is handled by Dojah, a Nigerian identity provider, and it is worth being specific about what is kept:
- For identity verification you may submit a NIN, BVN, or government-issued ID through Dojah's secure widget. Peacoqs stores only the type of document and its last four digits, plus the outcome of each check. We do not store your full NIN or BVN.
- Liveness and document images are captured by Dojah, not by us, and are held under Dojah's own retention terms.
- For business verification you give an RC number and a claimed company name. We look these up on the Corporate Affairs Commission register and store the registered name, company type, registry status, and whether a director's name matched your account.
- The registry response includes information about the company's directors. We keep their names and roles as evidence of the ownership match, and we strip out their personal phone numbers and email addresses before storing it. If you are a director of a verified company and want to know what we hold, write to privacy@peacoqs.com.
- Most checks are decided automatically. Where a check is inconclusive it is flagged for review and a member of our team looks at it, and we record who reviewed it and when. If a verification is rejected we will tell you the reason; you can submit a new attempt, or contest the outcome at support@peacoqs.com and have a person look at it again.
4. Why we use it, and on what lawful basis
We process your data for these purposes:
- To provide the service (performance of a contract): authenticating you, showing listings, running inspections, applications, bookings, tenancies and payments.
- To verify identity and business ownership (legal obligation and legitimate interest): protecting users from fraud and impersonation.
- To communicate with you (contract and legitimate interest): booking, payment, application, inspection and rent-reminder notifications.
- To keep the platform safe (legitimate interest): investigating reports, detecting abuse, and supporting law-enforcement requests.
- To keep the service working (legitimate interest): error reports, crash diagnostics and debugging.
- To understand how the site is used (consent): Google Analytics, which runs only if you agree to it and stops if you withdraw. You can change your answer at any time from Cookie settings in the footer of the Peacoqs website.
- To send marketing (consent): only if you opt in, and you can withdraw at any time.
- To comply with the law (legal obligation): tax, anti-money-laundering, and court orders.
5. Who we share it with
We share personal data with other users where the service requires it — a seeker's name and phone number go to the landlord they apply to, and the landlord's go back — and with the service providers we rely on to run the platform:
- Supabase — database and file storage, where your account, listings and uploads are held.
- Cloudinary — image and video hosting and delivery for listing media.
- Paystack and Flutterwave — card and transfer payments.
- Dojah — identity and business verification (see section 3).
- Termii — SMS delivery for reminders and alerts.
- Our email provider — transactional email such as confirmations and reminders.
- Expo — push notifications to the mobile app.
- Google — sign-in with Google, Google Maps, and Google Analytics.
- HERE and Foursquare — geocoding, and the nearby-places information shown on a listing.
- Sentry — error and crash reporting, which can include the identifier of the account that hit the error.
- Law enforcement, regulators, or a court, where we are legally required to disclose.
6. Where your data is processed
Peacoqs stores data with providers that operate outside Nigeria, including in the European Union and the United States. Where we transfer personal data outside Nigeria we do so on the conditions permitted by section 41 of the NDPA, and we rely on the data-processing and transfer terms published by each provider listed in section 5. If you want to know where a specific category of your data is held, ask us at privacy@peacoqs.com and we will tell you.
7. When Peacoqs staff can access your account
In limited circumstances, authorised Peacoqs staff can sign in to your account to investigate a report, resolve a support case, prevent fraud, or address a security concern. Access is limited to what is reasonably necessary for that purpose, and every session is time-limited, subject to access controls, and recorded in an audit log. If you have questions about staff access to your account, write to privacy@peacoqs.com.
8. How long we keep it
We keep your account data while your account is open. Verification records are retained for up to 24 months after your account closes, for fraud prevention. Payment and transaction records are retained for at least 7 years to meet tax and anti-money-laundering obligations. Reviews stay visible for as long as the listing is live. Audit logs, including staff-access logs, are retained for 24 months. You can ask us to delete anything we are not required to keep.
9. Your rights under the NDPA
You have the right to:
- Access the personal data we hold about you, and get a copy.
- Correct data that is wrong or incomplete.
- Ask us to delete your data, subject to the retention rules in section 8.
- Restrict or object to processing in certain circumstances.
- Receive your data in a portable format.
- Withdraw any consent you have given, without affecting what was done before you withdrew it.
- Complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you think we have got it wrong. We would rather you told us first at privacy@peacoqs.com so we can fix it.
10. Security
We protect your data with HTTPS in transit, encryption at rest for sensitive fields, hashed passwords, role-based access control, and audit logging of administrative actions. No system is perfectly secure. Use a strong, unique password, and tell us at security@peacoqs.com if you suspect a problem.
11. Children
Peacoqs is not for anyone under 18 and we do not knowingly collect data from children. If you believe a child has registered, contact privacy@peacoqs.com and we will close the account and delete the data.
12. Cookies, analytics and push tokens
The website uses cookies necessary for sign-in and session security. It also uses Google Analytics to understand how the site is used, but only if you agree: we ask on your first visit, and until you say yes the Google tag is never loaded. Cookie settings, in the footer of every page on the website, lets you change that answer whenever you like. The mobile app has no analytics and does not use cookies, but it stores a push-notification token on your device so we can deliver alerts; you can revoke it in your phone's notification settings. Our Cookie Notice sets out each one and how to turn off what is optional.
13. Changes
We will update this policy when our practices change. Material changes will be highlighted in-app or notified by email.
14. Contact
Questions, access requests, or complaints: privacy@peacoqs.com, or Peacoqs Limited, No. 8 Wutche Street, Rumuokwurusi, Rivers State, Nigeria.
Questions?
Reach our team at privacy@peacoqs.com.