Privacy, Cookie & KYC Policy

Information We Collect

We collect information to provide, improve, and secure our Platform. The types of information we collect include:

Personal Information — When you create an account, submit a listing, complete KYC verification, or contact us, we collect details such as your full name, email address, phone number, residential address, and government-issued ID documents.

Listing Information — Property details, photos, videos, pricing, and documents you upload as a seller.

Transaction Information — Subscription plan details, payment records, and billing history processed through our payment partners.

Communication Data — Messages sent between buyers and sellers through our Platform, inquiry records, and support correspondence.

Technical & Usage Data — IP address, browser type, device information, pages visited, time spent on pages, search queries, and how you navigate the Platform. This is collected automatically to improve your experience.

How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account;
• To verify your identity through our KYC process (sellers only);
• To publish, manage, and display your property listings;
• To process subscription payments and manage billing;
• To facilitate communication between buyers and verified sellers;
• To detect, investigate, and prevent fraud, scams, and platform abuse;
• To send transactional emails — account confirmations, listing approvals, payment receipts;
• To send marketing communications and property insights (you can opt out at any time);
• To improve our Platform, features, and AI-powered tools;
• To comply with applicable Nigerian laws and regulatory requirements.

Payment Information

All payments on Blomset Properties are processed securely through Paystack and Flutterwave — two of Nigeria's most reputable and PCI-DSS compliant payment processors.

Blomset Properties does not store, access, or retain your credit card, debit card, or bank account details on our servers. All payment data is handled entirely by our payment processors and is subject to their respective security standards and privacy policies.

By completing a payment on our Platform, you consent to your payment details being processed by Paystack and/or Flutterwave in accordance with their terms.

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your information only in the following limited circumstances:

• Service Providers — With trusted third-party vendors who help us operate the Platform (e.g., payment processors, email delivery services, cloud hosting providers). These parties are contractually bound to protect your data and may only use it to perform services on our behalf.
• Legal Compliance — Where we are required by Nigerian law, court order, or regulatory authority to disclose your information.
• Fraud Prevention — With law enforcement authorities where we have reasonable grounds to believe a user has committed fraud, identity theft, or any other criminal act through our Platform.
• Business Transfers — In the event of a merger, acquisition, or sale of Blomset Enterprises Limited, your information may be transferred as part of that transaction, with appropriate notice given to affected users.

Data Security

We implement industry-standard security measures to protect your personal information, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encrypted storage of KYC documents and sensitive personal data;
• Access controls ensuring only authorised Blomset staff can access verification data;
• Regular security reviews and vulnerability assessments.

While we take reasonable precautions to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, and you use the Platform at your own risk in this regard. If you suspect your account has been compromised, contact us immediately at support@blomsetproperties.com.

Affiliate Program Data

If you join our Affiliate Program, we collect additional information necessary to run and pay out the program, including:

• Referral & Tracking Data — Your unique referral link/ID, and records of which sellers registered through it, when they subscribed, and when they renew or cancel.
• Payout Information — Your Nigerian bank account details, submitted so we can process commission payouts. As with subscription payments (see Section 3), payout transfers are handled through our payment partners; we retain only the minimum account information needed to initiate a transfer.
• Earnings History — Commission accrued, paid, reversed, or withheld, including reasons for any reversal (e.g. a referred seller's payment being refunded or charged back).

We use this data solely to calculate commission, detect self-referral or fraudulent referral activity, process payouts, and communicate with you about your affiliate account. Affiliate referral and earnings data is never sold or shared with third parties other than the payment processors needed to complete your payout, and is retained for as long as your affiliate account remains active plus any period required for financial record-keeping under Nigerian law.

Your Rights

Subject to applicable Nigerian data protection law (including the NDPR), you have the following rights regarding your personal data:

• Access — Request a copy of the personal information we hold about you;
• Correction — Request correction of inaccurate or outdated information;
• Deletion — Request deletion of your personal data, subject to legal obligations we may have to retain certain records;
• Opt-Out — Unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us directly.

To exercise any of these rights, email us at support@blomsetproperties.com with your request. We will respond within 14 business days.

Children's Privacy

Blomset Properties is not intended for use by persons under the age of 18 years. We do not knowingly collect personal information from anyone under 18. If we discover that a minor has created an account or submitted personal data, we will immediately delete that information and terminate the account. If you believe a minor has used our Platform, please contact us at support@blomsetproperties.com.

Links to Other Websites

Our Platform may contain links to external websites, third-party tools, or social media platforms not operated by Blomset Properties. We are not responsible for the privacy practices, content, or security of any third-party site. We strongly encourage you to review the privacy policies of any external website before providing your personal information.

Community Data & Public Profile Information

When you participate in the Blomset Community — by posting, commenting, voting, or reporting — we collect and process additional data specific to those features. This section explains how that data is handled, what is public, and what remains private.

Publicly Visible Information
The Community is designed to be an open, searchable space. When you create a post or comment, the following information is publicly visible to all visitors (including guests who are not signed in):

• Your display name and, if applicable, your seller role (e.g. Landlord, Agent, Estate Baron);
• Your KYC verification status (verified or unverified) and any associated trust badge;
• Your Community rank (Tenant, Agent, Landlord, Estate Baron) and approximate point total;
• The content of your posts, comments, replies, and any images or documents you upload;
• Engagement metrics such as upvotes, view counts, comment counts, and solution marks.

Please be aware that anything you post in the Community is public and may be indexed by search engines. Do not share sensitive personal information — such as your home address, bank details, or unredacted ID documents — in public posts.

Data We Collect for Community Features
In addition to the general data described in Section 1, we collect the following Community-specific data:

• Activity Data — Posts created, comments submitted, upvotes given and received, reports filed, messages sent, and solutions marked;
• Points & Rank Data — Your accumulated points, rank history, and any adjustments made for moderation purposes;
• Interaction Logs — IP addresses, timestamps, and device information associated with Community activity, retained for fraud prevention and abuse detection;
• Scam Report Data — Details of fraud reports you submit, including descriptions, evidence uploads, and the identity of the reported party. This data is shared with our moderation team and, where confirmed, may be forwarded to the EFCC or Nigerian law enforcement as described in Section 5.

How We Use Community Data
We use your Community data to:

• Operate, moderate, and secure the Community forum;
• Calculate and display ranks, points, and verified badges;
• Detect and prevent abuse, spam, vote manipulation, and fraudulent reporting;
• Investigate scam reports and co-operate with law enforcement where necessary;
• Send you notifications about replies, upvotes, or moderation actions concerning your account;
• Improve Community features and surface relevant discussions to users.

Direct Messages
If the Platform enables direct messaging between Community members, the content of those messages is stored on our servers and is visible only to you and the recipient. Blomset Properties does not routinely monitor private messages; however, we reserve the right to review message content if a report is filed (e.g. harassment or scam attempts via DM), if required by law, or to protect platform safety. Messages may be retained as long as both accounts remain active, and for a reasonable period thereafter for legal or investigative purposes.

Your Rights Over Community Data
You may edit or delete your own posts and comments at any time while your account is active. If you request full account deletion, your public posts will be anonymised (attributed to "Deleted User") unless they are part of an active scam investigation or required to be preserved by law. Scam reports you have filed may be retained even after account deletion to support ongoing investigations or legal proceedings. To request deletion of specific content or exercise your data rights, email us at support@blomsetproperties.com.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. When material changes are made, we will update the effective date at the top of this page and notify registered users by email or via a Platform notice. Your continued use of Blomset Properties after any update constitutes your acceptance of the revised policy.

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site. Cookies do not contain viruses and cannot access other files on your device.

Blomset Properties uses the following types of cookies:

• Essential Cookies — Required for the Platform to function correctly. These include session cookies that keep you logged in and remember your preferences (e.g. dark/light theme). You cannot disable these without affecting Platform functionality.
• Analytics Cookies — Help us understand how visitors use the Platform — which pages are most visited, how users search for properties, and where users drop off. We use this data to improve the user experience. This data is anonymised and aggregated.
• Functional Cookies — Remember your settings and preferences across sessions — such as your last search filters, saved properties, and preferred property categories — so you don't have to re-enter them.
• Marketing Cookies — Used to deliver relevant content and, where applicable, targeted advertising based on your browsing behaviour on our Platform. You can opt out of these at any time.

Some cookies are placed by third-party services we use, including:

• Google Analytics — For traffic and usage analytics;
• Paystack / Flutterwave — For secure payment processing;
• Meta / Google Ads — For marketing and retargeting (where applicable).

These third parties have their own privacy and cookie policies. We do not control the cookies they set and are not responsible for their practices.

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually;
• Block all cookies from all or specific websites;
• Set your browser to notify you before a cookie is placed.

Please note that disabling certain cookies — particularly essential and functional cookies — may affect how the Platform works and may prevent you from accessing features such as saved searches, account login, and your seller dashboard.

To manage your cookie preferences, refer to your browser's help documentation or visit www.aboutcookies.org for guidance.

Property fraud — including ghost listings, double sales, impersonation, and fake agents — is one of Nigeria's most prevalent financial crimes. Blomset Properties was built specifically to address this problem. Our Know Your Customer (KYC) process is the foundation of trust on our Platform. Every seller must be identity-verified before they can publish a single listing. No exceptions.

This means buyers can interact with listings knowing that a real, confirmed person is behind every one of them — not a fake profile, not a ghost agent, not a stolen identity.

KYC verification is mandatory for all sellers on Blomset Properties, including:

• Private homeowners listing their own property;
• Landlords listing rental properties;
• Property developers listing new builds or land;
• Licensed realtors and estate agents;
• Shortlet operators listing serviced apartments;
• Commercial property owners listing offices, warehouses, or retail spaces.

Buyers do not require KYC to search, save, or inquire about properties.

To complete KYC, sellers must submit:

• A valid government-issued ID — National ID card (NIN slip or card), International passport, Driver's licence, or Permanent Voter's Card (PVC). The document must be current, legible, and clearly show your full name and photo.
• A selfie — A clear, recent photograph of yourself holding your ID document. This is used to match your face against the document photo.

For company accounts — such as property development companies — we may additionally require a Certificate of Incorporation or CAC registration documents.

Once you submit your KYC documents through the Seller Dashboard:

• Our verification team reviews your submission manually within 24 hours on weekdays;
• You will receive an email notification confirming approval, or requesting corrected documents if your submission was unclear or incomplete;
• Approved sellers receive the KYC Verified badge on their profile and all listings;
• Rejected submissions will include a clear explanation of why and what to resubmit.

We take the protection of your identity documents extremely seriously. Blomset Properties uses two of Nigeria's most trusted third-party identity and biometric verification providers to power our KYC process:

• Smile Identity — A leading African identity verification platform that enables real-time verification of Nigerian government-issued IDs (NIN, BVN, Driver's Licence, International Passport) combined with AI-powered liveness detection and selfie biometric matching. Smile Identity is used across financial institutions, fintechs, and regulated platforms across Nigeria and Africa.
• Prembly (Identitypass) — A Nigerian-built identity infrastructure provider offering real-time ID verification, document checks, biometric matching, and database lookups against NIMC, FRSC, and other government registries. Prembly is compliant with NDPR and CBN data guidelines.

By submitting your KYC documents, you consent to your identity data being processed by these providers strictly for the purpose of verification. Both Smile Identity and Prembly operate under their own privacy policies and data protection frameworks, which are consistent with Nigerian data protection law (NDPR).

In addition to third-party verification, Blomset Properties applies the following data protection standards:

• All KYC documents are encrypted at rest and in transit using industry-standard encryption;
• Access to KYC data is restricted to authorised Blomset verification staff only;
• KYC documents are never shared with buyers, third parties, or advertisers under any circumstances;
• We retain KYC records for a minimum period required by Nigerian anti-fraud and financial crime regulations, after which they are securely deleted;
• In the event of confirmed fraud, KYC records may be shared with the EFCC or Nigerian law enforcement as required by law.

Submitting false, forged, altered, or stolen identity documents during KYC verification is a serious criminal offence under Nigerian law. Any seller found to have done so will face:

• Immediate and permanent account termination;
• Removal of all listings from the Platform;
• Referral of their details and submitted documents to the Economic and Financial Crimes Commission (EFCC) and relevant law enforcement authorities;
• Potential civil and criminal liability.

Blomset Properties has a zero-tolerance policy for identity fraud of any kind.

Your KYC status is a key component of your Seller Score — Blomset's AI-generated trust rating displayed on your profile and listings. A valid, active KYC status contributes positively to your score, increases your listing visibility, and signals to buyers that they are dealing with a trustworthy seller.

If your KYC status lapses — for example, if your ID document expires and is not updated — your Seller Score may be affected and your listings may be deprioritised in search results until your verification is renewed.