Legal
Privacy Notice
How Substrat Limited handles your personal data.
Last updated: 23 September 2026
Who is responsible
Substrat Limited, ICAN House, Plot 2048 Michael Okpara Street, Wuse Zone 5, Abuja, FCT, Nigeria, is the data controller for personal data collected through this website. Contact: info@substratasset.com.
Data we collect and why
- Contact details (name, email, phone): to respond to enquiries and manage listing applications — contract performance / legitimate interests.
- Listing and asset information, photos and documents: to verify authority and review, publish and market assets — contract performance.
- Admin login credentials: to secure access for authorised staff — legitimate interests.
- Messages and support correspondence (including WhatsApp/email): customer support — legitimate interests.
- Technical data (IP address, device and browser identifiers, usage logs): security, fraud prevention and service improvement — legitimate interests.
- Records of transactions: to meet accounting and legal obligations — legal obligation.
Payment card details are collected directly by Paddle, not by us.
Who we share data with
- Service providers and subprocessors (hosting, database, storage and communication tools).
- Paddle, our Merchant of Record, for the sale of services, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting).
- Authorities where required by law.
We do not sell personal data.
International transfers
Some providers may process data outside Nigeria. Where this happens we rely on appropriate safeguards such as contractual protections.
Retention
We keep personal data only as long as needed for the purposes above — typically for the duration of the enquiry or listing plus up to 6 years for legal and accounting records — after which it is deleted or anonymised.
Your rights
Subject to applicable law (including the Nigeria Data Protection Act 2023 and, where relevant, GDPR), you may request access, correction, deletion, restriction, portability, object to processing or withdraw consent. You may complain to the Nigeria Data Protection Commission or your local authority. We respond within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit, private storage for uploaded documents and role-based access controls.
Cookies
We use only essential cookies and local storage needed to run the site and keep administrators signed in. We do not use advertising cookies. You can clear or block cookies in your browser settings.
