Privacy Policy

1. Introduction

At Abraham's Listing ("we", "our", "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform. We are committed to transparency and giving you control over your personal data.

1.5 Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Improving our platform, preventing fraud, and marketing (where balanced with your rights)
• Legal Obligations: Compliance with tax, anti-fraud, and other legal requirements
• Consent: For marketing communications and optional data collection (you may withdraw consent anytime)

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

2. Information We Collect

Personal Information You Provide

• Account Information: Name, email address, phone number
• Location Information: Physical address, country, state, city
• Business Information: Business name, category, description, photos (for service providers)
• Payment Information: Processed securely by third-party providers (Paystack, Stripe) - we do not store full payment details
• Communications: Messages, reviews, and ratings you submit

Information Automatically Collected

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, search queries, time spent on platform
• Cookies: We use cookies to enhance your experience and analyze usage

3. How We Use Your Information

• To create, manage, and maintain your account
• To connect you with service providers or customers
• To process transactions, subscriptions, and payments
• To improve, personalize, and optimize our platform
• To communicate important account notifications
• To send promotional offers (you may opt out anytime)
• To prevent fraud, ensure security, and enforce our terms
• To comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information in these circumstances:

• With Other Users: Your public profile information (name, business details, location) is visible to other users
• Service Providers: Third-party vendors who help us operate (hosting, payment processing, email services)
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement robust security measures to protect your information:

• SSL/TLS encryption for all data transmission
• Secure servers with firewalls and access controls
• Regular security audits and vulnerability scans
• Limited employee access to personal data
• Secure password hashing (never stored in plain text)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correct: Update inaccurate or incomplete information
• Delete: Request deletion of your account and personal data
• Opt-out: Unsubscribe from marketing communications
• Export: Receive a portable copy of your data
• Restrict: Limit how we process your information

To exercise these rights, contact us at privacy@abrahamslisting.com.

6.5 Your GDPR Rights (For EEA Residents)

If you are located in the European Economic Area (EEA), you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right to Access (Article 15): Obtain confirmation of whether we process your personal data and access that data
• Right to Rectification (Article 16): Correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten") (Article 17): Request deletion of your personal data under certain conditions
• Right to Restrict Processing (Article 18): Limit how we use your personal data
• Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used format
• Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing
• Automated Decision-Making (Article 22): Not be subject to solely automated decisions that have legal effects

To exercise these rights: Contact our Data Protection Officer at privacy@abrahamslisting.com. We will respond within 30 days as required by law.

7. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Remember your preferences and login status
• Analyze site traffic and user behavior
• Personalize content and recommendations
• Improve platform performance

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

8. Third-Party Links

Our platform may contain links to third-party websites (payment gateways, social media). We are not responsible for their privacy practices. We encourage you to read their privacy policies.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. Children's Privacy (COPPA & GDPR-K)

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from:

• Under 13: As required by the US Children's Online Privacy Protection Act (COPPA)
• Under 16: As required by GDPR (for users in the EEA)

If you believe a child has provided us with personal data, please contact us immediately. We will take steps to delete such information promptly. Parents/guardians may review or request deletion of their child's information by contacting us.

10. International Data Transfers (Including EU-US/UK-US)

Your information may be transferred to and processed in countries outside your home country, including Nigeria. When transferring personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs): EU-approved mechanisms for data transfers
• Data Processing Agreements (DPAs): Contracts with our service providers ensuring adequate protection
• Privacy Shield (where applicable): For transfers to certified US organizations (though no longer a primary mechanism)

For transfers to countries without adequacy decisions, we implement appropriate safeguards. You may request a copy of these safeguards by contacting us.

11. Data Retention

We retain your personal information as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for legal compliance, fraud prevention, or legitimate business purposes (e.g., transaction records).

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via:

• Email notification (if you have provided an email address)
• Notice on our website
• Platform notification

The "Last Updated" date at the top indicates when changes were made. Continued use constitutes acceptance.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer:

Abraham's Listing
3 Egbema Close, Borikiri, Port Harcourt, Rivers State, NIGERIA
Email: privacy@abrahamslisting.com
Phone: +234 812 870 1855

13.5 Data Protection Officer (DPO)

We have appointed a Data Protection Officer to oversee our data protection practices. You can contact our DPO at:

Data Protection Officer
Abraham's Listing
Email: dpo@abrahamslisting.com
Address: 3 Egbema Close, Borikiri, Port Harcourt, Rivers State, NIGERIA

Our DPO is responsible for ensuring compliance with GDPR and other data protection laws.

14. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where feasible)
• Notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms
• Document all breaches, including facts, effects, and remedial actions taken

Our Data Protection Officer leads our breach response and notification process.

15. Right to Lodge Complaint with Supervisory Authority

If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with your local supervisory authority:

• United Kingdom: Information Commissioner's Office (ICO) - https://ico.org.uk
• European Union: Your local EU Data Protection Authority - Find your DPA
• Nigeria: Nigeria Data Protection Commission (NDPC) - https://ndpc.gov.ng

We would appreciate the opportunity to address your concerns directly before you contact a supervisory authority. Please contact us first.