Privacy Policy

SoulStay Ltd ("SoulStay", "we", "our", or "us") recognizes the importance of privacy and is committed to protecting the personal information of users who access or use the SoulStay platform.

This Privacy Policy explains how SoulStay collects, uses, processes, stores, shares, transfers, secures, and otherwise handles personal information in connection with its web application, accommodation marketplace, booking services, Soul Trails, City Pulse, event ticketing services, experiences, customer support channels, marketing communications, and related services (collectively, the "Platform").

This Policy is intended to comply with the Nigerian Data Protection Act 2023 ("NDPA"), applicable regulations issued by the Nigeria Data Protection Commission ("NDPC"), and internationally recognised privacy and data protection principles.

This Policy applies to:

• Travellers and Guests
• Hosts and Property Owners
• Event Organizers and Experience Providers
• Website Visitors
• Job Applicants
• Business Partners and Service Providers
• Any individual whose personal information is processed by SoulStay

This Policy governs information collected through the SoulStay web application, accommodation bookings, property listings, Soul Trails, City Pulse, event ticket purchases, experience bookings, customer support communications, marketing activities, surveys, promotions, and any other services offered through the Platform.

For the purposes of applicable data protection laws, SoulStay Ltd acts as the Data Controller.

Where required by law, SoulStay may appoint a Data Protection Officer or designated privacy contact.

SoulStay may collect the following categories of personal information.

SoulStay does not intentionally store complete payment card information. Where enabled, SoulStay may also collect location information to improve recommendations, local discovery, and travel experiences.

SoulStay may collect information:

• Directly from users through account registration
• Through bookings and transactions
• Through identity verification processes
• From payment processors and service providers
• Through cookies and analytics technologies
• Through customer support interactions
• From publicly available sources where permitted by law

SoulStay processes personal information for legitimate business and operational purposes, including:

• Creating accounts and managing bookings
• Processing transactions and facilitating payouts
• Identity verification and fraud prevention
• Security monitoring and risk management
• Responding to inquiries and resolving disputes
• Product improvement, research, and analytics
• Travel recommendations and marketing
• Regulatory compliance and legal claims management

SoulStay processes personal information based on one or more lawful grounds, including user consent, performance of a contract, compliance with legal obligations, legitimate business interests, protection of vital interests, and establishment, exercise, or defence of legal claims.

SoulStay may disclose personal information to:

• Hosts and Travellers (where necessary to complete transactions)
• Payment processors and verification providers
• Cloud service and analytics providers
• Professional advisers and auditors
• Regulatory authorities, courts, and law enforcement agencies

SoulStay may process or store personal information outside Nigeria. Where international transfers occur, SoulStay shall implement appropriate safeguards designed to ensure adequate protection of personal information consistent with applicable law.

SoulStay retains personal information only for as long as reasonably necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain business records. Upon expiration of applicable retention periods, information may be securely deleted, anonymized, archived, or destroyed.

SoulStay maintains administrative, technical, physical, and organisational safeguards including:

• Access controls and authentication procedures
• Encryption technologies
• Monitoring systems and secure hosting environments
• Staff confidentiality obligations
• Security reviews and audits

Despite these safeguards, no system can guarantee absolute security.

Subject to applicable law, users may have the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion of information
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge complaints with competent authorities

Requests may be submitted through SoulStay's designated support channels.

Users may receive newsletters, promotional campaigns, travel content, event updates, and platform announcements. Users may unsubscribe from marketing communications at any time. Service-related communications may continue where necessary for account administration or contractual performance.

SoulStay uses cookies and similar technologies to improve functionality, remember preferences, analyse usage, enhance security, and personalise user experiences. Users may manage cookie preferences through browser settings. Disabling cookies may affect certain Platform features.

SoulStay may process information relating to user recommendations, cultural experiences, destination exploration, event participation, travel interests, and community engagement. This information may be used to personalise recommendations and improve Platform services.

Users are responsible for content they submit. Content published publicly may become accessible to other users. Users should exercise caution before sharing personal information publicly through reviews, recommendations, comments, photographs, or other submissions.

SoulStay is intended for individuals aged sixteen (16) years and above. Where required by law, users below the age of eighteen (18) must obtain parental or guardian consent. SoulStay reserves the right to restrict or remove accounts that do not satisfy applicable age requirements.

SoulStay maintains procedures for identifying, investigating, documenting, managing, and mitigating actual or suspected data breaches. Where required by law, SoulStay shall notify affected individuals and competent authorities within applicable timeframes.

The Platform may contain links to third-party websites or services. SoulStay is not responsible for the privacy practices, content, security, or operations of third-party services. Users are encouraged to review the privacy policies of such third parties.

Users who believe their privacy rights have been violated may contact SoulStay. Where concerns cannot be resolved directly, users may submit complaints to the Nigeria Data Protection Commission or any competent regulatory authority.

SoulStay reserves the right to amend this Privacy Policy periodically. Updated versions shall become effective upon publication unless otherwise stated. Continued use of the Platform after publication constitutes acceptance of the revised Policy.

For privacy-related requests, complaints, inquiries, or rights exercises, contact: