DropLocationNG® Privacy Policy
Cardinal & Oakridge Limited
Effective Date: 24 June 2026 | Version 2.1 | Amended: 1 July 2026
Amendment note: Version 2.1 adds Section 3.1 disclosure of anonymous session identifiers used for listing analytics. No other provisions have changed.
Trademark Registration Notice: DropLocationNG® is a registered trademark of Cardinal & Oakridge Limited, registered at the Trademarks Registry (IPONIG), Federal Republic of Nigeria, in Classes 39, 41, and 42. All rights reserved.
DropLocationNG® is operated by Cardinal & Oakridge Limited (DropLocationNG®, we, us, or our), a company incorporated in Nigeria with its registered address at Abuja, Federal Capital Territory, Nigeria. We are committed to protecting the privacy and personal data of every person who uses our platform.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have in relation to your data. It applies to all visitors and users of the DropLocationNG mobile-responsive web application and partner submission portal (collectively, the Platform).
By accessing or using the Platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please do not use the Platform.
1. Who We Are and How to Contact Us
Data Controller: Cardinal & Oakridge Limited
Trading As: DropLocationNG®
Registered Address: Abuja, Federal Capital Territory, Nigeria
Contact Email: hello@droplocationng.com
For all privacy-related enquiries, data subject requests, or concerns, please contact us at hello@droplocationng.com. We will respond to all requests within 30 days.
2. Legal Framework
DropLocationNG® is committed to full compliance with the Nigeria Data Protection Act 2023 (NDPA 2023) and the regulations issued by the Nigeria Data Protection Commission (NDPC). Where users access the Platform from other jurisdictions, we apply equivalent standards of protection appropriate to those regions.
We process your personal data only where we have a valid lawful basis to do so, including:
- –Your consent (which you may withdraw at any time)
- –The performance of a contract or pre-contractual steps at your request
- –Compliance with a legal obligation
- –Our legitimate interests, where these do not override your fundamental rights and freedoms
3. What Personal Data We Collect
3.1 Visitor Users (General Public)
When you browse the Platform without creating an account, we may collect:
- –Device and browser information (type, operating system, screen resolution)
- –IP address (used for security and aggregate analytics only)
- –Pages visited, time spent, and interaction data
- –Anonymous session identifiers — a randomly generated code stored temporarily in your browser for the duration of your visit, used to calculate how many distinct visitors view each listing on the Platform. Session identifiers are not linked to your name, email address, account, or any other personal information, and are permanently discarded when you close your browser session. They are used solely to produce aggregate listing performance statistics made available to listed partners.
- –Search queries entered within the Platform
- –Location data — only where you explicitly grant permission via your device settings
3.2 Registered Users
If you create an account or use personalised features, we additionally collect:
- –Name and email address
- –Password (stored in encrypted form; never readable by DropLocationNG® staff)
- –Saved events, bookmarks, and itinerary preferences
- –Notification and communication preferences
3.3 Business Partners (Event Organisers, Hotels & Short-lets, Transport Providers)
Partners who register via our submission portal provide:
- –Business name, trading name, and business type
- –Contact name, email address, and WhatsApp number
- –Business address and area of operation
- –Business registration documents and supporting evidence
- –Compliance and safety documentation (e.g. venue permits, safety clearance certificates, insurance evidence)
- –Bank account or payment details where applicable for commercial arrangements
Sensitive identity documents (such as passports or national identity documents) submitted as part of verification are stored securely and are accessible only to authorised DropLocationNG® administrators. They are never published on the public Platform or shared with other partners.
3.4 Data We Do Not Collect
DropLocationNG® does not collect and will never request the following:
- –Bank Verification Numbers (BVN)
- –National Identification Numbers (NIN)
- –Passport or travel document numbers as a routine requirement
- –Financial account details from visitors or general users
- –Health or medical information
- –Political opinions, religious beliefs, or other special categories of sensitive data
4. How We Use Your Data
We use your personal data only for the purposes set out below:
Service Delivery: To operate the Platform, display event listings, area guides, accommodation and transport directories, and safety information.
Account Management: To create and manage your user account, authenticate your identity, and maintain your preferences.
Partner Onboarding & Verification: To review partner submissions, verify business credentials, communicate approval or rejection decisions, and publish verified listings.
Safety & Trust: To maintain the integrity of the Platform, investigate reported issues, identify fraudulent listings, and protect users from scams.
Platform Improvement: To understand how users navigate the Platform, identify popular content, and improve the user experience using anonymised, aggregated data.
Communications: To send you transactional notifications (e.g. account creation, partner approval status) and, where you have consented, marketing or promotional communications.
Legal Compliance: To meet our obligations under applicable Nigerian law and respond to lawful requests from regulatory or law enforcement authorities.
5. Consent and Your Choices
Where we rely on your consent to process your data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Specific consent choices available to you include:
- –Location data sharing — all location-based features require your explicit opt-in. You may disable location access through your device settings at any time.
- –Marketing communications — you may opt out of non-essential marketing emails by clicking the unsubscribe link in any email we send, or by contacting hello@droplocationng.com.
- –Analytics cookies — where applicable, you may control non-essential cookies through your browser settings or any cookie preference panel displayed on the Platform.
6. Data Sharing and Disclosure
DropLocationNG® does not sell your personal data to any third party. We do not share your data with advertisers or data brokers.
We may share your data only in the following limited circumstances:
Service Providers: We work with trusted third-party providers to operate the Platform (including Base44 as our application platform, and cloud hosting and email delivery services). These providers process data only on our instructions and are bound by appropriate data processing agreements.
Business Partners: Where a user contacts a listed partner (e.g. via a WhatsApp link or booking referral), only the information necessary to facilitate that contact is shared. DropLocationNG® does not share your profile data with partners without your action.
Government & Regulatory Authorities: We may disclose data where required by law, court order, or legitimate request from a Nigerian regulatory or law enforcement authority. We will notify you where legally permissible.
Analytics Dashboards: Any data shared with government tourism agencies or institutional partners through our analytics products is aggregated and anonymised. No personally identifiable information is included.
Business Transfers: If DropLocationNG® or Cardinal & Oakridge Limited is involved in a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified in advance.
7. Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law.
- –Visitor browsing data and analytics: retained in anonymised form only; raw identifiable logs deleted within 90 days.
- –Registered user account data: retained for the duration of your account and for 12 months following account deletion, after which it is permanently erased.
- –Partner submission data: retained for the duration of the partner relationship and for 3 years following the end of that relationship, to support legal, compliance, and dispute resolution purposes.
- –Verification documents (passports, certificates): retained for 3 years from the date of submission, then securely deleted.
- –Issue reports and safety incident records: retained for 5 years in accordance with our legal and safety obligations.
8. Data Security
DropLocationNG® implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:
- –Encrypted data transmission (HTTPS/TLS) across the Platform
- –Role-based access controls limiting staff access to personal data
- –Secure password hashing — no DropLocationNG® staff member can read your password
- –Restricted access to partner verification documents (admin-only, not surfaced publicly)
- –Regular review of data handling practices and access privileges
While we take reasonable precautions, no system is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Nigeria Data Protection Commission in accordance with NDPA 2023 requirements.
9. Your Rights Under the NDPA 2023
As a data subject under Nigerian law, you have the following rights in relation to your personal data held by DropLocationNG®:
To exercise any of these rights, please contact us at hello@droplocationng.com. We will respond within 30 days. We may need to verify your identity before processing a request. You will not be charged a fee for exercising your rights, unless the request is manifestly unfounded or excessive.
If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
10. Children's Privacy
The DropLocationNG® Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at hello@droplocationng.com and we will take prompt steps to delete that information.
Some events listed on the Platform may have age restrictions. These are published on the relevant event listing pages. DropLocationNG® does not verify the age of visitors accessing event information.
11. International Data Transfers
DropLocationNG® is a Nigeria-based platform. Where the technical infrastructure used to operate the Platform (including cloud hosting and third-party service providers) involves processing data outside Nigeria, we take appropriate steps to ensure equivalent levels of data protection are applied, in accordance with NDPA 2023 transfer requirements.
We do not transfer personal data to jurisdictions with inadequate data protection without appropriate safeguards in place.
12. Cookies and Tracking Technologies
DropLocationNG® uses cookies and similar tracking technologies to operate the Platform effectively and improve your experience. This includes:
Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled.
Analytics Cookies: Help us understand how users interact with the Platform. All analytics data is anonymised and aggregated before use.
Preference Cookies: Remember your settings and choices across sessions.
You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.
13. Third-Party Links
The Platform contains links to external websites and services, including ticketing platforms, accommodation booking sites, and transport provider contact pages. DropLocationNG® is not responsible for the privacy practices of these third parties. We encourage you to read the privacy policy of any third-party site you visit.
Clicking a ticket link, WhatsApp button, or booking referral on DropLocationNG® directs you to the relevant third-party platform. DropLocationNG® does not collect or retain data from those interactions beyond the click event itself.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or Platform features. When we make material changes, we will notify you via a notice on the Platform and, where we hold your email address, by email.
The date at the top of this document indicates when it was last revised. Continued use of the Platform following a material update constitutes acceptance of the revised policy.
15. Contact Us
For all privacy questions, data subject requests, or to report a concern, please contact:
DropLocationNG® Privacy Team
Cardinal & Oakridge Limited
Email: hello@droplocationng.com
Address: Abuja, Federal Capital Territory, Nigeria
We aim to respond to all enquiries within 30 days of receipt.
DropLocationNG® is a registered trademark of Cardinal & Oakridge Limited. This Privacy Policy is governed by the laws of the Federal Republic of Nigeria.