Controller and scope
The data controller is Relocation Nigeria Ltd, RC 8137426, Suite 4B, 18 Adeola Hopewell Street, Victoria Island, Lagos 106104, Nigeria. Privacy enquiries can be sent to privacy@relocation.ng.
This notice covers relocation.ng, its contact and correction forms, reader reviews, correspondence and related editorial services. It is effective from 1 October 2026.
Applicable obligations can depend on the owner’s establishment, where people are located and how the site offers or monitors services. The Nigeria Data Protection Act, GDPR or another regime may be relevant, but this must be confirmed for the actual operation.
Personal data actually collected
Complete a data inventory before writing the final list. Depending on enabled features, the website may process:
- contact details and the content of messages;
- account, profile, comment and reader-review information;
- ratings, moderation records and limited verification evidence;
- IP address, device, browser, security and server-log information;
- cookie identifiers and analytics or advertising events;
- newsletter preferences and delivery records;
- company-representative correspondence and correction evidence.
List only data the site really processes. Map every field from collection to deletion. Do not invite users to upload passports, complete bank statements, medical records or immigration files through public forms.
Purposes and lawful bases
| Activity | Information and purpose | Basis | Retention |
|---|---|---|---|
| General enquiries | Name, email address and message used to reply | Consent and legitimate interests in answering enquiries | 12 months after the enquiry closes |
| Corrections and company submissions | Contact details, sources and supporting evidence used for editorial verification | Legitimate interests in accuracy and accountable publishing | 24 months after the matter closes |
| Reader reviews | Name or pseudonym, email, rating, review and moderation records used to assess and publish submissions | Consent and legitimate interests in operating the review service | While published and for up to 12 months after removal |
| Security logs | IP address, browser and request information used to prevent abuse and protect the website | Legitimate interests in service security | 90 days, unless required for an active investigation |
| Analytics | Cookie, device and page-event data used to understand aggregate website performance | Consent where required | 14 months |
Do not list consent for every activity by default. The correct basis depends on the law and real purpose. Where consent is used, explain how it can be withdrawn without affecting earlier lawful processing. Where legitimate interests are relied on, document the balancing assessment.
If children are likely to use a feature, assess age, notice language, consent and risk requirements separately. Do not infer sensitive characteristics for advertising or profiling without a lawful, reviewed design.
Providers, transfers and security
Service providers may process limited data on our behalf. The website uses a managed WordPress hosting provider for website delivery, Cloudflare for DNS, content delivery and security, Google Analytics for consent-based audience measurement, a WordPress contact-form service for enquiries, and a managed email provider for messages sent to addresses at relocation.ng. Encrypted backups are retained through the hosting environment. We do not use an advertising network or newsletter service.
For international transfers, identify the applicable transfer mechanism and supplementary safeguards instead of claiming that all providers are automatically compliant. Contracts, settings and data locations must match the notice.
Describe proportionate organisational and technical measures without publishing information that weakens security. Access should be limited by role, administrator accounts protected, software maintained and backups and incident response tested.
Retention and individual rights
General enquiries are normally retained for 12 months, editorial corrections and supporting evidence for 24 months after closure, security logs for 90 days and analytics events for 14 months. Published reader reviews remain available while relevant and may be retained for up to 12 months after removal for moderation, dispute and security purposes. Rolling backups are normally deleted within 90 days.
The final notice should explain rights that apply under the relevant law, which can include access, correction, deletion, restriction, objection, portability, withdrawal of consent and complaint to a regulator. Rights are not absolute in every situation; explain how requests are verified and answered.
Provide the real privacy contact and competent supervisory authority only after jurisdiction is confirmed. Do not require excessive identity evidence for a routine request.
Cookies and tracking
The website uses strictly necessary cookies for security, session management and saved privacy choices. Google Analytics may set measurement cookies only after the visitor gives consent where consent is required. Relocation Nigeria does not use advertising cookies.
The cookie banner allows visitors to accept or reject non-essential measurement and to change their choice later. Browser settings can also be used to remove stored cookies, although blocking necessary cookies may affect some features.
Re-run the audit whenever plugins, analytics, advertising, embedded media or CDN settings change. The written notice and real network behaviour must agree.
Privacy Policy FAQ
Who can I contact about my information?
Email privacy@relocation.ng. We aim to acknowledge requests within one business day, Monday to Friday.
Should users send passports with correction requests?
No. Ordinary forms should not collect unnecessary identity, banking or immigration documents.
Must every website use consent as its lawful basis?
No. The correct basis depends on the activity and applicable law; it must be assessed rather than copied.
What providers must be considered?
Hosting, email, forms, anti-spam, analytics, CDN, backups, security, newsletters and advertising are common examples, but only actual providers belong in the final notice.
When should the Privacy Policy be reviewed?
Whenever processing, vendors, cookies, law or ownership changes, and on a regular documented schedule.
Official sources
Immigration rules can change without notice. Check the relevant authority before paying a fee, booking travel or submitting an application.