Privacy Policy
Effective 3 July 2026 · Last updated 8 July 2026
TODO — legal review. This template covers the essentials for Meta and Google ad approval and reflects standard NDPR obligations for a Nigerian real estate operator. Replace the placeholder company address and contact email below, then have a Nigerian data-protection lawyer confirm before running paid ads at scale.
Nexora Experience Ltd ("Nexora", "we", "us") operates nexoraexperience.com and related project pages. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA), 2023.
Information we collect
- Information you give us — your name, phone number, email address, project of interest, and preferred inspection date, submitted through our contact and inspection-booking forms.
- Information collected automatically — pages visited, referring website, approximate location (based on IP address), device type, browser, and interactions like clicks on WhatsApp / Book Inspection buttons. This is used to understand which listings interest visitors and to measure advertising performance.
- Cookies and similar technologies — we use a first-party session identifier stored in your browser's
localStorage to count unique visits, and (with your consent, requested via a banner on your first visit) third-party pixels from Meta (Facebook / Instagram) and Google (Analytics, Ads) to measure ad campaigns. See Cookies & pixels below.
Why we use your information
- To respond to your inspection request, share project information, and coordinate site visits.
- To send confirmations and follow-ups by WhatsApp, phone, or email regarding the property you enquired about.
- To improve our website content and understand how visitors find and engage with our listings.
- To measure and optimize the performance of paid advertising campaigns on Meta and Google.
- To detect and prevent form abuse, spam, and fraud.
- To comply with legal obligations, including our KYC and anti-money-laundering duties when you enter into a purchase transaction with us.
Legal basis
Under the NDPR and NDPA we process your data on the following legal bases: your consent (submitting an inspection form), the performance of a contract (once you are an active buyer), our legitimate interests in marketing our developments and measuring advertising, and where required, legal obligation.
Who we share information with
- Our team and appointed agents — advisors and realtor partners who follow up on your enquiry, under a duty of confidentiality.
- WhatsApp (Meta Platforms Inc.) — to deliver template messages confirming your inspection request, per WhatsApp Business terms.
- Meta and Google — through advertising pixels loaded only after you accept the cookie banner, receive event data (page view, form submission, WhatsApp click) used to optimise our ad campaigns. Where Meta's Advanced Matching feature is enabled, hashed versions of your email or phone number may also be shared with Meta so that ad performance can be attributed correctly. We never share your unhashed name, phone, or email with them.
- Vercel Inc. — our hosting provider, which processes site traffic on our behalf and stores form submissions in encrypted blob storage.
- Regulators and law enforcement — where required by applicable Nigerian law.
We do not sell your personal information.
International data transfers
Some of the third-party services we rely on (Meta, Google, Vercel) are based in the United States and may process your data outside Nigeria. Where this happens, we rely on their contractual safeguards for cross-border data transfers and, where applicable, standard contractual clauses. If you do not accept the advertising pixels via our consent banner, no third-party transfer takes place for advertising purposes.
How long we keep it
Inspection enquiries are kept for up to 36 months from your last interaction, so we can follow up as new phases release. Records tied to a completed purchase are kept for at least 7 years to satisfy tax and land-title obligations. Aggregated site analytics are kept for up to 90 days in identifiable form and indefinitely in anonymised, aggregated form.
Cookies & pixels
On your first visit we show a consent banner that asks whether you want to accept advertising pixels or use only essential first-party analytics. You can change your choice at any time by clearing your browser's site data for nexoraexperience.com; the banner will reappear on your next visit.
nx_sid — first-party session ID stored in your browser's localStorage to count unique visits. Not shared with third parties. Essential.
nx_consent — first-party record of your cookie-banner choice, kept for 6 months. Essential.
- Meta Pixel — loaded only if you accept. Measures ad performance on Facebook and Instagram. Learn more: Meta Pixel policy.
- Google Analytics 4 & Google Ads — loaded only if you accept. Measures site traffic and ad conversions. IP addresses are anonymised. Learn more: Google Analytics privacy.
- Vercel Web Analytics — first-party, cookie-less traffic measurement provided by our hosting platform. No data leaves the Vercel account.
You can also opt out of behavioural advertising through your device settings, browser extensions (e.g. Privacy Badger, uBlock Origin), or ad-platform preference centres.
Your rights under NDPR / NDPA
- Access — a copy of the personal data we hold about you.
- Rectification — correction of inaccurate data.
- Erasure — deletion, subject to legal retention obligations.
- Objection — to processing based on legitimate interests, including direct marketing.
- Portability — to receive your data in a structured, machine-readable format.
- Withdraw consent — at any time; this does not affect processing done before you withdrew.
- Lodge a complaint — with the Nigeria Data Protection Commission (NDPC), formerly NITDA.
Security
We use industry-standard measures including TLS (HTTPS) encryption in transit, encrypted blob storage at rest, scrypt-hashed passwords for staff and portal accounts, permission-scoped access controls, and rate limiting on public endpoints.
Children
Our services are directed at adults over 18. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will change and, where changes are material, we will notify active enquirers by email or WhatsApp.
Contact
Nexora Experience Ltd
TODO: Registered office address, Port Harcourt, Rivers State, Nigeria
Email: privacy@nexoraexperience.com (TODO: confirm mailbox exists)
WhatsApp: +234 706 171 0564
Data subject requests are answered within 30 days.