Privacy Policy.

§ 01

1. Information We Collect

We collect information you provide directly, information collected automatically when you use the Platform, and information from third-party sources.

Information you provide

• Account: Name, email, phone, password, and profile photograph.
• Identity verification: Government-issued ID, proof of address, or other documentation for verification.
• Booking: Check-in and check-out dates, guest count, special requests, and preferences.
• Payment: Card details, bank account information, and billing address. Payment information is processed by our third-party payment processors and not stored directly on our servers.
• Communications: Messages between guests and Residence Managers through the Platform, support requests, and feedback.
• Residence data: Descriptions, photographs, amenities, pricing, availability, and location provided by Residence Managers.

Information collected automatically

• Device: Type, operating system, browser, unique device identifiers, and mobile network information.
• Usage: Pages visited, features used, search queries, booking history, and interaction patterns.
• Location: Approximate location based on IP address. We do not collect precise GPS location without your explicit consent.
• Cookies and similar technologies: As described in Section 6.

§ 02

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To facilitate reservations, process payments, enable communication between guests and Residence Managers, and provide support.
• Account management: To create and manage your account, verify your identity, and maintain security of the Platform.
• Communications: To send booking confirmations, receipts, service updates, and, where you have opted in, promotional correspondence.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and develop new features.
• Safety and security: To detect and prevent fraud, abuse, and other harmful activities, and to enforce our Terms.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

§ 03

3. Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

• Between guests and Residence Managers: When you reserve, we share necessary information with the Residence Manager to facilitate the stay. Residence Manager contact details and residence information are shared with guests.
• Service providers: We share information with third-party service providers who assist us in operating the Platform — payment processors, cloud hosting, analytics, and support tools. These providers are contractually bound to use your information only for specified purposes.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

§ 04

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• Secure payment processing through PCI-compliant third-party providers.

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

§ 05

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete information.
• Deletion: The right to request deletion of your personal information, subject to legal and contractual retention requirements.
• Data portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.
• Withdrawal of consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
• Objection: The right to object to the processing of your information for certain purposes, including direct marketing.

To exercise any of these rights, reach us at privacy@citiestroves.com. We will respond within 30 days.

§ 06

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us:

• Essential cookies: Enable core functionality such as authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the Platform.
• Preference cookies: Remember your settings, such as language and currency.
• Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

§ 07

7. International Data Transfers

CitiesTroves operates across multiple countries, and your information may be transferred to and processed in countries other than your country of residence. When we transfer your information internationally, we take appropriate safeguards to ensure that it is protected in accordance with this Privacy Policy and applicable data protection laws.

These safeguards may include data processing agreements with standard contractual clauses, compliance with local data protection frameworks (such as the Nigeria Data Protection Regulation and the Ghana Data Protection Act), and other legally recognised transfer mechanisms.

§ 08

8. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware we have collected such information, we will take steps to delete it promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, reach us at privacy@citiestroves.com.

§ 09

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

§ 10

10. Contact

For questions or requests regarding this Privacy Policy or our data practices: