Privacy Policy

1. Who we are

listing.ng is a classifieds marketplace where people in Nigeria buy and sell operated by Bolrach Technologies Limited (“listing.ng”, “we”, “us”). For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the data controller for the information described here. You can reach our privacy team at privacy@listing.ng. Our Data Protection Officer is Alonge Adewale Sunday, who can be contacted at the same address.

2. What we collect

• Account information. An account holder’s first, middle (where there is one) and last name, sex, date of birth and email address. An account made through Authvio also carries the phone number Authvio has verified; listing.ng never asks for a number to be typed in. Where a password is used, only a hash of it is stored. Where the Authvio account has a profile photo, listing.ng copies it, stores it as WebP and replaces it when the photo changes on Authvio.
• Verification status. Before a signed-in person posts an ad, sends a message or uses Safe Buy, listing.ng asks Authvio whether it has fully verified that person and whether the account remains in good standing. Authvio answers with the result only. The ID document and the selfie stay with Authvio and never reach listing.ng.
• Your ads. The photos, title, description, price, category details and the state, local government area and area a seller chooses. Photos are stored as WebP, and the location data a camera writes into a photo is removed before anyone sees it.
• Messages and offers. What buyers and sellers write to each other in chat, and the offers they make. Messages are checked automatically for common scam patterns, such as a request to pay a "delivery agent" first, so that a warning can be shown.
• Safe Buy and promotions. Each order, its amounts and what happened to it, and the 6-digit release code, which only the buyer can see. Payments are taken by Bolrach Pay; card numbers never reach listing.ng.
• Contact requests. When a signed-in buyer views a seller’s number or opens WhatsApp from an ad, we record who did it and when, so that sellers’ numbers cannot be harvested.
• Counts. A view of an ad is counted once per person per day using a one-way code that cannot be turned back into an account or an address. Search words are counted without anything about who searched.
• Usage information. Pages viewed, features used, searches, and time spent, so we can run and improve the service.
• Device and connection data. IP address, browser and device type, language, and approximate region derived from your IP.
• Cookies and similar technologies. As described in our Cookie Policy.

listing.ng does not ask for special-category data (such as health or religious beliefs), and it has no place in ads or messages.

3. How and why we use it

Under the GDPR we rely on a lawful basis for each use of your information:

Where we rely on consent (for example, non-essential cookies), you can withdraw it at any time without affecting earlier processing.

4. Sharing

We do not sell your personal information. We share it only with:

• Service providers who host, secure, and operate listing.ng on our behalf (including hosting, content delivery and photo storage, sign-in and identity verification through Authvio, sending sign-in codes by email, answering support requests through our help desk, and taking payments through Bolrach Pay and the card companies it works with), under contracts limiting them to that purpose.
• Authorities or third parties where the law requires it or to protect our rights, users, or the public.
• Ads. An ad is public once it is live: its photos, words, price and area, with the seller’s display name and the month they joined. A seller’s phone number shows only to signed-in buyers who ask for it, and never in the ad itself.
• Page measurement. We use Cloudflare Web Analytics to see how fast our pages load and how many visits they get in total. It sets no cookie and stores nothing on a visitor's device. It cannot identify anyone or follow a visitor to other sites, and Cloudflare keeps what it measures under its own privacy policy.

5. International transfers

listing.ng is a global service, so your information may be processed in countries other than your own. Where we transfer personal data out of the EEA or UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) to protect it.

6. How long we keep it

We keep your information while your account is active and for a reasonable period afterwards to meet legal, security, and record-keeping needs, then delete or anonymise it. A live ad stays public until it is sold, expires after 60 days, or the seller removes it.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and get a copy;
• correct information that is wrong or incomplete;
• delete your data (the “right to be forgotten”);
• restrict or object to certain processing, including profiling;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To exercise any of these, email privacy@listing.ng. We will respond within the time the law allows. If you are in the EEA or UK and believe we have not handled your data properly, you may also complain to your local data protection supervisory authority, though we hope you will contact us first.

8. Security

We use technical and organisational measures, including encryption in transit and access controls, to protect your information. No system is perfectly secure, so we also ask you to keep your login safe.

9. Children

listing.ng is not directed at children under 18 (or the minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has given us information, contact us and we will remove it.

10. Changes to this policy

If we make changes, we will update the date above and, for significant changes, notify you in the product. Your continued use of listing.ng after an update means you accept it.

11. Contact us

Questions or requests? Email privacy@listing.ng, or write to Bolrach Technologies Limited via bolrach.com. You can also reach us through our contact page.