Legal
Privacy policy
What we collect, why, and your rights. Last updated October 2026.
What we collect
When you book: your name, email, phone number, booking dates and number of guests. When you list a property: your name, contact details, ID, property details and bank account for payouts. We also collect basic site data such as pages visited and device type.
Why we use it
To take and confirm bookings, pass the details a property needs to host you, pay partners, prevent fraud, answer support requests, and send booking messages by email or WhatsApp.
Payments
Card, transfer and USSD payments are handled by Paystack. We do not store your full card details.
Who we share it with
The property you book, our payment provider, and service providers that help us run the site (hosting and email). We do not sell your personal data.
How long we keep it
Booking and payout records are kept for as long as the law requires for tax and accounting. Other data is deleted when it is no longer needed.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to: show you the data we hold, correct it, delete it, limit how we use it, send it to you or another company in a common format, or stop using it. You can also object to decisions made only by a computer. Email info@tourbolts.com. We will reply within 30 days and may ask you to prove who you are first.
Cookies
We use cookies to keep you signed in, hold your booking in the cart and keep the site secure. These are needed for the site to work. We also use analytics cookies to see which pages people use, so we can improve them. You can block or delete cookies in your browser settings. If you block needed cookies, booking may not work.
Our legal reasons for using your data
We use your data to carry out your booking or partner agreement, to meet legal duties such as tax records, to protect against fraud (our legitimate interest), and with your consent for marketing. You can withdraw consent at any time. This does not affect what we did before.
Data sent outside Nigeria
Some of our service providers, such as hosting and email, may store data outside Nigeria. When that happens, we only use providers that protect your data to the standard the Nigeria Data Protection Act 2023 requires.
Keeping your data safe
We use secure connections (HTTPS), limit who on our team can see your data, and keep partner ID documents private. If a data breach puts your rights at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
Children
Tourbolts is for adults. We do not knowingly collect data from anyone under 18 except names of children travelling with an adult who books.
Marketing messages
We only send offers if you agree. Every marketing email has an unsubscribe link, and you can reply STOP on WhatsApp. Booking messages are not marketing and will still be sent.
Deleting your account
See our data deletion page at tourbolts.com/user-data-deletion or email info@tourbolts.com with the subject "Delete my data".
Complaints
If you are unhappy with how we handle your data, contact us first. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is important, we will tell you by email.
Contact
Tourbolts Hospitality and Tourism, info@tourbolts.com, WhatsApp +234 818 826 9466.