Website Privacy Notice

What is this Privacy Notice for?

[CITIRESIDENCE LEGAL ENTITY NAME] (referred to in this document as “Citiresidence Lagos”, “the Company”, or “we”) values your personal data and is committed to protecting your privacy whenever you interact with us. Please read this Privacy Notice (the “Notice”) to understand our policies, processes and procedures regarding the processing of your personal data.

This Notice explains how your personal data is collected, used, managed and transferred by Citiresidence Lagos, how you can update your personal data with us, and how you can exercise your rights in respect of the personal data you provide to us.

What personal data we collect

We ask for and may collect personal information from you when you make a booking or submit a contact form on our website, or when you use interactive features of the website, including surveys, contests, promotions, document downloads, customer support requests, event registrations, or any other communication with us. This includes, but is not limited to, the following:

• Name and gender
• Postal address
• Telephone number and email address
• Financial information (such as credit or debit card number or other payment data)
• Date and place of birth
• Nationality, passport, visa or other government-issued identification data
• Important dates such as birthdays, anniversaries and special occasions
• Employer details (for business-related bookings)
• Travel itinerary, tour group or activity data
• Prior stays or interactions, goods and services purchased, and special service and amenity requests
• Social media account ID, profile photo and other publicly available data, or data made available by linking your social media and loyalty accounts

In more limited circumstances, we may also collect

• Data about family members and companions, including names and ages of children
• Images, video and audio recorded by security cameras located in public areas of our property, such as hallways and lobbies

If you give us personal data about other people (for example, when you make a reservation for another individual), you confirm that you have the authority to do so and you permit us to use that data in accordance with this Notice. It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

How we use your data

We use your personal data to:

• process and manage your reservations, payments, refunds and cancellations;
• verify your identity and meet check-in and legal registration requirements;
• provide the services and amenities you request and personalise your stay;
• respond to your enquiries and support requests;
• send you service messages and, where you have agreed, marketing and promotional communications;
• maintain the safety and security of our guests, staff and premises; and
• comply with legal and regulatory obligations.

Media

If you upload images to the website, avoid uploading images that include embedded location data (EXIF GPS). Visitors to the website can download images and extract any location data from them.

What constitutes your consent?

Where we process personal data on the basis of consent, we will obtain that consent at the time we collect the data. You consent to the processing of your personal data when you access our platforms or use the services, content, features, technologies or functions offered on our website or other digital platforms. You can withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out on the basis of consent before it was withdrawn.

Who do we share your personal data with?

We respect your privacy and limit disclosure of your personal data to third parties. We do not sell, give or trade any personal data we obtain from you to any third party for data-mining or marketing purposes. We may, however, share your personal data with companies related to Citiresidence Lagos and with service providers engaged by us to provide services to Citiresidence Lagos, subject to appropriate data security and protection.

We may transfer your personal data out of Nigeria in line with the requirements of the Nigeria Data Protection Act, 2023 and the Nigeria Data Protection Regulation, 2019. We may also share your information where we have a regulatory or statutory obligation to disclose it under applicable law.

Embedded content from other websites

Pages on this site may include embedded content (for example videos, images and articles). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including when you have an account and are logged in to that website.

Security of your personal data

We take the security of your personal data seriously and make every effort to keep it secure. We have put in place technological and organisational measures, including requiring our staff and any third parties who carry out work on our behalf to comply with appropriate security standards, to protect your personal data.

Retention of your personal data

We take appropriate measures to ensure that your personal data is processed only for the minimum period necessary for the purposes set out in this Notice or as required by applicable law. Once your personal data is no longer required, we destroy it in a safe and secure manner.

How long we keep your data

Your personal data may be kept in a form that allows you to be identified only for as long as:

1. we maintain an ongoing relationship with you, which allows us to improve your experience and make sure you receive communications from us;
2. your personal data is necessary for the purposes set out in this Notice and we have a valid legal basis; and
3. any applicable limitation period has not ended (that is, any period during which a person could bring a legal claim against us).

We actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or consumer need to keep it.

Your rights

Citiresidence Lagos collects personal data only for the purposes identified in this Notice, and that data will not be reused for another purpose that is incompatible with the original one. You have the right to:

1. request and access the personal data we collect and store about you;
2. withdraw your consent at any time, for example to stop receiving marketing or promotional material or to unsubscribe from our newsletters;
3. object to automated decision-making;
4. request correction and updating of the personal data we hold about you;
5. request deletion of your personal data;
6. be informed of, and give consent to, any processing of your personal data for purposes other than those for which it was collected;
7. request that we restrict the processing of your personal data; and
8. request information about any specific processing of your personal data.

To exercise any of these rights, contact our Data Protection Officer (DPO) using the details below. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) if you believe we have violated your privacy rights.

Changes to this Privacy Notice

Technology and regulatory requirements change, so we may update this Notice from time to time. The most recent version will always be available on this website.

Contact & communication

For more information about this Notice, or to contact our DPO, reach us at: