Privacy Policy

Last updated 1 September 2026

This policy explains how Golden Coterie Limited processes your personal data under the Nigeria Data Protection Act 2023 (NDPA) and, for users in the UK and the European Union, the UK GDPR and EU GDPR. Golden Coterie Limited is the data controller.

1. What we collect

Account details (name, email, phone, date of birth, city), verification data (ID type, a liveness selfie, the result of checks run by Smile Identity), proof-of-occupancy documents, profile and lifestyle answers, messages, and payment records processed by Paystack. We never store your raw NIN or BVN — only the last four digits, a hashed reference and the verification job number.

2. Why we process it

To verify that every user is a real, identified person (our legitimate purpose of fraud prevention and user safety), to operate matching and messaging, to process payments, and to meet legal obligations. Verification data is used for verification and fraud prevention only, never for marketing or profiling.

3. Who sees what

Other users only ever see your first name, age, general area (LGA level), photo, lifestyle answers and badges. Your surname, contact details, documents, ID numbers and exact address are never shown. Documents can only be opened by a Compliance Officer, in a watermarked viewer, and every access is logged. Moderators can read a conversation only after a report is filed on it.

4. Processors

Smile Identity (identity verification), Paystack (payments), Amazon Web Services (hosting), and our SMS and email providers, each under a data processing agreement.

5. Retention

Identity documents and raw verification responses: 24 months after account closure. Occupancy documents: 12 months after the listing ends. Messages: 24 months from last activity. Transaction records: 7 years. Selfie and face data: life of the account plus 90 days.

6. Your rights

Under the NDPA you can access, correct, export (JSON, from Settings) or delete your data, withdraw consent, and complain to the Nigeria Data Protection Commission. Account deletion has a 14-day grace period, after which data is deleted or irreversibly anonymised on the schedule above.

7. Contact

Data questions: privacy@reside2gether.com. We respond within 30 days.