Privacy Policy

How we collect, use, and protect your personal data

Last Updated: 22 May 2026

1. Introduction

This Privacy Policy explains how ShortletPro ("ShortletPro", "we", "us" or "our") collects, uses, stores, shares and protects personal data when you use:

  • the ShortletPro website available at https://shortletpro.com;
  • any ShortletPro mobile application;
  • related products, services, communications, support channels and promotional activities; and
  • any booking, hosting, listing, payment, verification or account features we make available from time to time.

ShortletPro operates a technology platform that helps guests discover and book short-let accommodation and helps hosts, property managers and related partners list and manage accommodation offerings.

This Privacy Policy is designed primarily for our current operations in Nigeria. As ShortletPro expands into other African countries, Canada, Europe and the United Arab Emirates, we may publish country- or region-specific supplements, addenda or notices to address local legal requirements.

2. Who We Are

ShortletPro is the controller of personal data processed through the platform except where we clearly state otherwise.

Controller details

If applicable, ShortletPro may appoint a Data Protection Officer or privacy contact person. Their contact details should be added above before publication.

3. Scope

This Privacy Policy applies to personal data relating to:

  • website visitors;
  • mobile app users;
  • prospective, current and former guests;
  • prospective, current and former hosts and property managers;
  • payment recipients and payers;
  • customer support contacts;
  • referral participants, marketing subscribers and community members; and
  • individuals whose information is provided to us in connection with bookings, check-in, identity verification, compliance or dispute resolution.

4. Personal Data We Collect

We may collect the following categories of personal data:

A. Information you provide directly

  • full name;
  • email address;
  • telephone number;
  • password and login credentials;
  • profile photograph;
  • date of birth, gender or nationality where needed for verification or compliance;
  • billing address, residential address or contact address;
  • property listing details, host profile information and business registration details;
  • government-issued identification details where needed for identity, fraud-prevention or legal compliance purposes;
  • booking details, travel preferences, guest counts, stay dates and special requests;
  • communications you send to us or through the platform;
  • reviews, ratings, feedback, complaints and survey responses;
  • bank account or payout information for hosts or partners;
  • tax information where required; and
  • any other information you choose to provide.

B. Information collected automatically

  • device type, operating system and mobile app identifiers;
  • browser type, IP address and general location inferred from IP;
  • usage logs, pages viewed, clicks, session duration and feature interactions;
  • crash reports, diagnostics and performance data;
  • cookie, SDK and similar tracking information; and
  • login timestamps, security events and fraud indicators.

C. Information from third parties

  • payment confirmations and limited transaction metadata from payment processors;
  • identity verification results from verification vendors;
  • booking, occupancy or check-in information from hosts, property managers or building administrators;
  • social login information if you choose a third-party sign-in method;
  • marketing or analytics data from advertising and analytics providers; and
  • information from law enforcement, regulators, courts or dispute-resolution bodies where necessary.

5. How We Use Personal Data

We use personal data to:

  • create and manage user accounts;
  • enable guests to search, book and manage accommodation;
  • enable hosts and property managers to create, publish and manage listings;
  • process payments, payouts, refunds, chargebacks and related accounting;
  • facilitate identity checks, fraud detection, trust and safety reviews and security monitoring;
  • send booking confirmations, reminders, receipts, service messages and support responses;
  • personalize content, search results, recommendations and user experience;
  • administer promotions, referrals and marketing campaigns;
  • improve the website, mobile apps and platform functionality;
  • comply with legal, regulatory, tax, anti-fraud, consumer protection and law-enforcement obligations;
  • investigate disputes, complaints, misuse, suspicious activity or policy violations; and
  • establish, exercise or defend legal claims.

6. Legal Bases for Processing

Where applicable under Nigerian law and other relevant privacy laws, we process personal data on one or more of the following grounds:

  • your consent;
  • performance of a contract or steps requested before entering into a contract;
  • compliance with a legal obligation;
  • protection of vital interests;
  • performance of a task carried out in the public interest, where applicable; and
  • our legitimate interests, including operating and improving the platform, preventing fraud, securing our services and managing customer relationships, provided those interests are not overridden by your rights.

7. Cookies and Similar Technologies

We use cookies, pixels, tags, SDKs and similar technologies to:

  • keep you signed in;
  • remember preferences and settings;
  • understand platform usage;
  • measure marketing effectiveness;
  • improve performance and reliability; and
  • help detect suspicious or abusive activity.

Where required by law, we will ask for consent before using non-essential cookies or similar technologies. You can control cookies through your browser or device settings, subject to certain functionality limitations.

8. When We Share Personal Data

We may share personal data with:

  • hosts, property managers and accommodation providers to facilitate bookings and stays;
  • guests where necessary to confirm reservations, check-in or resolve booking issues;
  • payment processors, banking partners and payout providers;
  • cloud hosting, analytics, CRM, communication, support and security vendors;
  • identity verification, fraud prevention and risk management providers;
  • legal, tax, accounting, audit and professional advisers;
  • insurers and dispute-resolution service providers;
  • law enforcement agencies, regulators, courts or competent authorities where required; and
  • a buyer, investor, successor or affiliate in connection with a merger, acquisition, financing, reorganization or sale of assets.

We do not sell personal data in the ordinary sense of exchanging it for money. If applicable law treats certain advertising or analytics sharing as a regulated disclosure, we will handle it in accordance with that law.

9. International Data Transfers

ShortletPro is headquartered for current operations in Nigeria, but some of our service providers or future group operations may be located in other countries. As a result, personal data may be transferred to and processed outside your country of residence.

When we transfer personal data across borders, we will take reasonable steps to ensure appropriate safeguards are in place, which may include:

  • contractual data protection commitments;
  • transfer impact assessments where appropriate;
  • vendor due diligence and security reviews;
  • access controls and data minimization; and
  • any additional measures required by applicable law.

If we launch services targeted at the European Economic Area, the United Kingdom, Canada, the UAE or other jurisdictions with specific transfer rules, we may issue supplemental notices or agreements to address those requirements.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • maintaining active accounts and booking records;
  • completing transactions and payouts;
  • supporting tax, audit and accounting obligations;
  • complying with legal, regulatory, anti-fraud and dispute-resolution requirements; and
  • enforcing our agreements and defending legal claims.

Retention periods may vary by data type, legal obligation and operational need. Where data is no longer required, we will delete, anonymize or securely archive it in line with our retention practices.

11. Data Security

We use reasonable technical, organizational and administrative safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction. These measures may include encryption, access controls, role-based permissions, monitoring, secure development practices, staff confidentiality obligations and vendor management controls.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work to maintain security measures appropriate to the nature of the data and risks involved.

12. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • request confirmation of whether we process your personal data;
  • access personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data in appropriate circumstances;
  • object to or request restriction of certain processing;
  • withdraw consent where processing is based on consent;
  • request portability of personal data where applicable;
  • opt out of certain marketing communications; and
  • lodge a complaint with a competent data protection authority.

We may ask you to verify your identity before acting on a request. We may also retain certain information where necessary for legal, security, fraud prevention, contractual or record-keeping reasons.

Requests may be sent to: info@shortletpro.com

13. Account Deletion

Users may request account deletion through in-app tools, website features or by contacting support. When an account deletion request is received, we may retain limited information where necessary to:

  • complete outstanding bookings or transactions;
  • detect and prevent fraud or abuse;
  • comply with tax, accounting, regulatory or legal obligations; and
  • resolve disputes or enforce our agreements.

Residual copies may remain in backups for a limited period, subject to our security and retention controls.

14. Marketing Communications

We may send promotional emails, push notifications, SMS or other communications about new listings, offers, platform updates or related services where permitted by law. You can opt out of marketing communications at any time by using the unsubscribe link, adjusting device settings or contacting us.

Operational messages relating to your account, bookings, security or transactions are not marketing and may still be sent where necessary.

15. Children's Privacy

ShortletPro is not intended for children to independently use for bookings or hosting unless permitted by applicable law and supervised by a parent, guardian or authorized adult. We do not knowingly collect personal data from children in a manner prohibited by law. If you believe a child has provided personal data improperly, contact us so we can review and take appropriate action.

16. Third-Party Links and Services

Our website and apps may contain links to third-party websites, payment pages, maps, social platforms or other services. We are not responsible for the privacy, security or content practices of third parties. You should review their privacy notices before providing personal data to them.

17. Regional Notices

As ShortletPro expands, we may publish regional notices or addenda for users in particular jurisdictions, including:

  • additional disclosures for residents of specific African countries;
  • GDPR-style notices for the European Economic Area and the United Kingdom;
  • PIPEDA- or provincial privacy-related notices for Canada; and
  • UAE-related notices for users in Dubai or other parts of the United Arab Emirates.

Where a regional notice conflicts with this Privacy Policy for users in that region, the regional notice will prevail to the extent required by law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, technical or commercial changes. Where required, we will provide notice through the website, mobile app, email or other appropriate means. The "Last Updated" date above shows when this Privacy Policy was last revised.

19. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or our handling of personal data, contact:

info@shortletporo.com

If you are dissatisfied with our response, you may have the right to complain to the relevant data protection regulator in your jurisdiction.