Last updated: January 2025
This Privacy Policy explains how iComStay ("we", "our", or "us") collects, uses, stores, and shares your personal information when you use our website and services. By using iComStay, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly and information collected automatically when you use our services:
- Account Information: Name, email address, phone number, and password when you register.
- Booking Information: Check-in/out dates, number of guests, payment details (processed securely by Paystack), and special requests.
- Identity Verification: For hotel owners, government-issued ID and business registration documents.
- Communications: Messages, reviews, and support enquiries you send us or submit through the platform.
- Technical Data: IP address, browser type, device information, pages visited, and session data (collected via cookies and server logs).
- Location Data: General location derived from your IP address or, with your permission, precise location for nearby property searches.
2. How We Use Your Information
We use your information to:
- Create and manage your account and provide our booking services
- Process reservations and facilitate payments through Paystack
- Send booking confirmations, receipts, and transactional emails
- Provide customer support and resolve disputes
- Send promotional emails about deals (you can unsubscribe at any time)
- Improve our platform through analytics and user feedback
- Comply with legal obligations and prevent fraud
- Verify property listings submitted by hotel partners
3. Sharing Your Information
We do not sell your personal data. We share it only in the following limited circumstances:
- Property Owners: When you make a booking, the relevant hotel or property owner receives your name, contact details, and booking information necessary to fulfil your reservation.
- Payment Processors: Paystack processes payments on our behalf under its own privacy policy and PCI-DSS certification.
- Service Providers: We use trusted third-party services for email delivery, analytics, and cloud hosting, all bound by data processing agreements.
- Legal Requirements: We may disclose data when required by Nigerian law, court order, or to protect the safety of our users.
- Business Transfers: In the event of a merger or acquisition, your data may be transferred with appropriate notice.
4. Data Security
We take the security of your data seriously. iComStay uses:
- HTTPS/TLS encryption for all data in transit
- Bcrypt hashing for passwords (never stored in plain text)
- Regular security audits and vulnerability assessments
- Access controls limiting who can view personal data internally
- Paystack's PCI-DSS certified infrastructure for payment data
No system is 100% secure. If you suspect your account has been compromised, please contact us immediately.
5. Cookies
We use cookies to remember your login session, preferences, and for analytics. You can control cookies through your browser settings, but disabling them may affect site functionality. We do not use cookies for advertising or third-party tracking.
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate information via your account settings
- Deletion: Request deletion of your account and associated data
- Portability: Receive your data in a machine-readable format
- Opt-out: Unsubscribe from marketing emails at any time using the link in each email
To exercise these rights, email us at privacy@icomstay.com.
7. Children's Privacy
iComStay is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child has provided us with personal information, we will delete it promptly.
8. Third-Party Links
Our site may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before submitting any personal information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of iComStay after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related enquiries, contact our Data Protection Officer at: