Data Protection & NDPR

Privacy Policy & Data Security

How AROVA collects, encrypts, and processes personal and financial data in full compliance with the Nigeria Data Protection Regulation (NDPR).

1. Information We Collect

To provide safe lodging services, AROVA processes: (a) contact credentials (name, email, phone number); (b) government identity information for host verification (NIN, BVN tokenized validation, CAC certificate where corporate entity); (c) payment transaction records (processed via PCI-DSS compliant gateways).

2. Contact Masking & Privacy Shield

Direct contact information between guests and hosts (personal phone numbers and raw email addresses) is masked prior to confirmed reservation checkout. Communication takes place inside the AROVA end-to-end messaging console to protect both parties from off-platform fraud.

3. Data Storage & Encryption

All sensitive records are stored in AES-256 encrypted databases with TLS 1.3 transport security. In accordance with the Nigeria Data Protection Act, you maintain the right to inspect, correct, or request deletion of your personal identity records.

4. Contact Our Data Protection Officer

Questions about your data privacy can be sent to AROVA support.