Privacy Policy
Last updated: 16 Oct 2026
This policy explains how Wooke Technologies Ltd, RC 9251478, of No 5 Bobas Street, Anaye, Ikere Ekiti, Ekiti State, Nigeria ("LodgeDesk", "we", "us") collects and uses personal information. It is written to meet the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC).
1. Who this policy covers
- Business users: owners, managers and receptionists who use LodgeDesk. For your information, we are the data controller.
- Guests: people who receive invoices and receipts from businesses using LodgeDesk. For guest information, the lodge or apartment that serves you is the data controller, and LodgeDesk is their data processor. If you are a guest with a question about your data, please contact the business first. We will help them respond.
- Website visitors: people who visit lodgedesk.com.ng.
2. What we collect
From business users
- Name, email address, phone number and role.
- Business details: business name, logo, addresses of locations, room types and prices.
- Bank account details for payouts, which are verified through Paystack.
- Subscription and billing records.
- How you use the app, such as log-in times, device and browser type, and actions taken, for security and support.
About guests (entered by the business)
- Name, phone number, email address (optional) and company (optional).
- Stay details: location, room, dates, amounts, invoices, payments and receipts.
- Payment references from Paystack. We never see or store guests' full card details; Paystack handles those.
From website visitors
- Basic technical information such as IP address, browser type and pages visited, through essential cookies.
3. Why we use it and our legal basis
| Purpose | Legal basis under the NDPA |
|---|---|
| Providing the service: creating invoices, recording payments, issuing receipts | Performance of our contract with the business |
| Processing online payments and payouts through Paystack | Performance of contract |
| Sending account emails: sign-up, password reset, invoices, receipts, billing notices | Performance of contract |
| Keeping financial and tax records | Legal obligation |
| Preventing fraud and keeping the service secure | Legitimate interest |
| Improving the product using usage patterns | Legitimate interest |
| Sending product news or offers to business users | Consent, which you can withdraw at any time |
We do not sell personal information, and we do not use guest information for our own marketing.
4. Who we share it with
We share personal information only with service providers who help us run LodgeDesk, under contracts that require them to protect it:
| Provider | What they do |
|---|---|
| Paystack Payments Limited | Payment processing, subscriptions, bank account verification and payouts |
| Wooke Technologies Ltd | Our business email inboxes, including privacy@ and support@lodgedesk.com.ng |
We may also share information when required by law, by a court order or by a regulator such as the NDPC, or to protect people from fraud or harm.
5. Transfers outside Nigeria
Some of our providers store or process data outside Nigeria. When this happens, we rely on the safeguards allowed under the NDPA, such as contractual protections and providers that meet recognised security standards, so your information receives a comparable level of protection.
6. How long we keep it
- Invoices, receipts and payment records: at least 6 years after the transaction, to meet Nigerian tax and accounting requirements.
- Business account information: while the account is active and for 30 days after closure, so you can export your data, then deleted except for records we must keep by law.
- Usage and security logs: up to 12 months.
- Marketing preferences: until you unsubscribe or withdraw consent.
7. How we protect it
We use encryption in transit, access controls that separate each business's data from every other business, role-based access for staff, and secure hosting. Only people who need access to provide support can see account data, and they are bound by confidentiality.
If a personal data breach is likely to put people at risk, we will notify the NDPC within 72 hours of becoming aware of it, and inform affected businesses and individuals without undue delay.
8. Your rights
Under the NDPA, you can ask us to:
- give you a copy of your personal information;
- correct information that is wrong or incomplete;
- delete your information, where we are not required to keep it;
- restrict or object to how we use it;
- give you your information in a portable format;
- withdraw consent you have given, at any time.
Email privacy@lodgedesk.com.ng. We will respond within 30 days. If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Guests should first contact the business that issued their invoice. If you cannot reach them, write to us and we will pass your request on and help them respond.
9. Cookies
We use only essential cookies needed to keep you signed in and to secure the service. We do not use advertising cookies. If we add analytics cookies in future, we will ask for your consent first.
10. Children
LodgeDesk is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children for our own purposes.
11. Changes to this policy
We may update this policy. If the changes are significant, we will email business users before they take effect. The date at the top shows when it was last updated.
12. Contact
Data protection contact: privacy@lodgedesk.com.ng
General support: support@lodgedesk.com.ng
Address: No 5 Bobas Street, Anaye, Ikere Ekiti, Ekiti State