Privacy Policy

This policy explains how Haloft handles your personal data, in line with the Nigeria Data Protection Act / NDPR. We collect only what we need to run the service and never sell your data.

Account data: your name, email, and phone number.
Booking data: the rooms you request, your stay dates, and any special requests you provide.
Payment data: payments are processed by Paystack; we store a transaction reference and status, not your card details.
Usage data: basic technical information needed to operate and secure the platform.

To create and manage your account, process booking requests and payments, send transactional emails about your bookings, moderate reviews, provide support, and keep the platform secure. We rely on your consent and the performance of our service to you as the legal bases for this processing.

We use trusted processors to run the service: Supabase (database and authentication), Paystack (payments), Resend (email), and Vercel (hosting). Property owners receive only the information needed to fulfil a confirmed booking. We do not sell your data.

You may request access to, correction of, or deletion of your personal data, and you may object to certain processing. To exercise these rights, email support@haloft.homes. You can also delete your account, after which we retain only what we are legally required to keep.

We keep your data only as long as needed to provide the service and meet legal obligations. Access is protected by row-level security and encrypted connections. No system is perfectly secure, but we take reasonable measures to protect your information.

Questions about your data? Reach us at support@haloft.homes.