1. Who we are
KGL Realty Pro (“we”, “us”, “our”) is a licensed real-estate agency registered in Nigeria and operating in Lagos, Abuja, Dubai (UAE), and the United Kingdom. We are the data controller for personal information collected through this website (kglrealtypro.com).
Contact our data officer: [email protected]
2. What information we collect
We collect personal information only when you actively provide it or when it is generated by your use of our services:
- Enquiry & lead forms — name, phone number, email address, property interest, and budget.
- Viewing requests — name, phone, email, preferred date and time, and the property slug.
- AI concierge conversations — the text of messages you send to our concierge chat. These are processed by Anthropic (see section 5) and may be used to trigger lead capture or tour scheduling on your behalf.
- Usage data — standard server logs including IP address, browser type, referral URL, and pages visited. This data is not linked to your identity.
3. How we use your information
We use the information we collect to:
- Respond to property enquiries and schedule private viewings.
- Connect you with an appropriate agent or consultant.
- Send you property alerts or market updates, if you have opted in.
- Prevent fraud and abuse of our online services.
- Comply with legal obligations under Nigerian law (including the Nigeria Data Protection Act 2023) and, where applicable, the UK GDPR and UAE data protection regulations.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
4. Legal basis for processing (GDPR / UK GDPR)
For users in the UK or European Economic Area, our legal bases are:
- Contract performance — processing your enquiry or tour request.
- Legitimate interests — responding to enquiries, preventing abuse, improving our services.
- Consent — marketing communications (you may withdraw at any time).
5. Third-party service providers
We share limited data with the following providers, each bound by appropriate data processing agreements:
- Anthropic, Inc. — powers our AI concierge. Conversation content is transmitted to Anthropic's API for processing. Anthropic's privacy policy is available at anthropic.com/privacy.
- Vercel, Inc. — hosts this website and processes request logs.
- Google LLC (Gmail) — used to deliver agent notification emails.
- Cloudflare, Inc. — provides bot-protection challenges (Turnstile). Cloudflare may process IP addresses to verify requests.
- Namecheap, Inc. — hosts our database on cPanel-managed infrastructure.
6. Data retention
- Leads and enquiries — retained for 24 months from the date of submission, then deleted unless a transaction is in progress.
- Tour requests — retained for 12 months.
- Server logs — retained for 90 days.
- You may request earlier deletion at any time (see section 8).
7. Cookies
This website uses only functional cookies: a currency preference cookie (stored in localStorage, not transmitted to our servers) and a theme preference cookie. We do not use advertising, tracking, or analytics cookies. No consent banner is required for strictly necessary functional cookies.
8. Your rights
Under the Nigeria Data Protection Act 2023 and, where applicable, the UK GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate data.
- Request deletion (“right to be forgotten”).
- Restrict or object to processing.
- Data portability (receive your data in a machine-readable format).
- Withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email us at [email protected] with the subject line “Data Request”. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. Passwords (admin accounts) are stored as bcrypt hashes. Payment processing is not handled on this website.
10. International transfers
Because we operate in Nigeria, the UAE, and the UK, and use global cloud providers (Vercel, Anthropic, Google), your data may be processed outside your country of residence. Where data is transferred outside the UK or EEA, we rely on standard contractual clauses or adequacy decisions as the transfer mechanism.
11. Children's privacy
Our services are intended for adults. We do not knowingly collect personal data from anyone under the age of 18.
12. Changes to this policy
We may update this policy periodically. The “Last updated” date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the revised policy.
13. Contact & complaints
For any privacy-related questions, contact us at [email protected].
UK users who are unsatisfied with our response may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Nigerian users may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.