Resídium

Privacy Policy

Last updated: July 2026

Resídium (“Residium”, “we”, “us”) is a compliance and operations platform for gated communities in Nigeria. This policy explains what personal data we collect, how we use and protect it, and the rights you have. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).

1. Information we collect

We collect only what we need to run the service:

  • Account details — your name, email address, and phone number.
  • Estate details — your unit, role (chairman, admin, resident, staff), and membership status, where you belong to an estate.
  • Payment and wallet records — the fees, contributions, and bill payments you make, and your Residium wallet balance and history. Card and bank details are handled by our payment provider (see section 6), not stored by us.
  • Device and security information — device identifiers, browser, and approximate location, used to recognise your devices and keep your account secure.
  • Usage and support information — how you use the platform, and any messages you send us.

2. How we use your information

  • To provide the platform — manage estates, residents, fees, access control, and bill automation.
  • To process payments and run the automations you set up, through our payment provider.
  • To verify identity and compliance status at the gate and within the app.
  • To communicate with you — verification codes, receipts, notifications, and support.
  • To keep the platform secure and prevent fraud or abuse.
  • To meet legal, regulatory, and accounting obligations.

3. Our legal basis for processing (NDPA)

Under the NDPA, we process your personal data on one or more of these bases:

  • Your consent — for example, when you create an account or opt into a bill automation.
  • Performance of a contract — to provide the service you signed up for.
  • Legal obligation — where the law requires us to keep certain records, such as financial records.
  • Legitimate interests — such as securing the platform and preventing fraud, balanced against your rights.

4. How we share your information

We do not sell your personal data. We share it only as needed to run the service:

  • With your estate — relevant administrators can see the records tied to your unit and membership (for example, whether your dues are paid).
  • With our payment provider — to process payments and provision wallets (see section 6).
  • With service providers — such as SMS, email, and secure cloud hosting, under written data-processing agreements.
  • For legal reasons — where required by law, regulation, or a valid request from a competent authority.

5. Where your data is stored and protected

We protect personal data using modern, industry-standard safeguards: encryption in transit and at rest, access controls, and secure, actively-maintained backend infrastructure. Access to personal data is limited to what each person needs to do their job.

6. Payments and financial data

Payments and wallets on Residium are processed by Nomba, a payment service provider licensed and regulated by the Central Bank of Nigeria (CBN). When you pay or fund a wallet, your card, bank, and transaction details are handled securely by Nomba under their own regulated controls. Residium does not store your card numbers or full bank credentials.

7. How long we keep your data

We keep personal data for as long as your account is active and as long as we need it to provide the service. We may retain certain records for longer where the law or a regulator requires it (for example, financial and transaction records), after which we delete or anonymise it.

8. Your rights

Under the NDPA, you have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate or out of date.
  • Request deletion of your data, subject to our legal obligations.
  • Object to or restrict certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting processing already carried out.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us at support@residium.io.

9. Data breaches

If a breach affects your personal data, we will act to contain it and, where the NDPA requires, notify the Nigeria Data Protection Commission and affected users without undue delay.

10. Children

Residium is not directed at children under 18, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email.

12. Contact us

Questions about this policy or your data? Reach us at support@residium.io or through our contact page. Residium operates in Lagos, Nigeria, and this policy is governed by Nigerian law.