Privacy notice.
We collect only what we need to welcome you, and we treat that information with the discretion you would expect of a private residence. This notice explains what we collect, why, and how to reach us with a question or request.
What we collect.
When you reserve a stay, sign up for an account, or contact us through the website, we collect a small amount of information directly from you. That includes your name, email address, telephone number, the dates and residence you have selected, and any notes you choose to share about the purpose of your visit or special arrangements.
If you pay online, we hand the payment itself to Paystack, our payment processor. We never see or store your card number; we only receive a transaction reference that confirms the payment cleared.
We also keep a small functional cookie (wp_session_present) and a signed authentication token (wp_token, HttpOnly) so that you stay signed in while you move between pages. These are essential to operating the guest portal; we do not use cookies for tracking or advertising.
Why we collect it.
- To create and operate your reservation.
- To send confirmations, receipts, and operational messages connected to your stay.
- To meet our obligations under Nigerian law, including tax and anti-fraud requirements.
- To improve the service we offer, where we can do so without identifying individual guests.
Who has access.
Inside the company, access is restricted to the people who need it to deliver your stay. Outside the company, we share information only with the partners that help us run the business — currently our payment processor (Paystack) and our hosting provider — and only to the extent each one needs to perform its role.
How long we keep it.
Reservation and payment records are retained for as long as we are legally required to keep them — at minimum, seven years for tax records under Nigerian law. Account details are kept for as long as your account is active; you may request deletion at any time, subject to those legal retention periods.
Your rights.
You may ask us to confirm what we hold about you, correct anything that is inaccurate, or close your account. We will respond within thirty days. To make a request, write to info@whitepolegroup.com with the subject line “Data request”.
Security.
Our website is served exclusively over HTTPS. Passwords are hashed before storage. Authentication tokens are HttpOnly and short-lived. Our servers sit behind a managed firewall and we keep an audit log of every authentication event.
Contact us.
For any question about this notice or how we handle your information, please write to info@whitepolegroup.com or call +234 705 363 6519.