Privacy Policy

1. Who We Are

Business Name: Keystone Realty Growth

Owner / Data Controller: Joseph Oluwatobi

Registered Location: Abuja, Federal Capital Territory, Nigeria

Contact Email: [email protected]

Website: go.keystonerealtygrowth.com

2. What Information We Collect

We collect the following categories of personal information when you interact with our website or submit our forms:

Information You Provide Directly

• Full Name — to identify and address you correctly
• Email Address — to send confirmations, communications, and updates
• Phone Number / WhatsApp Number — to contact you regarding your enquiry (if provided)
• Business Information — including business type, goals, and current tools (where shared during discovery sessions)

Information Collected Automatically

• IP Address — collected automatically when you visit our website
• Browser and Device Information — type, version, and operating system
• Pages Visited and Time Spent — via analytics tools
• Referral Source — how you found our website

Information from Third Parties

If you connect with us via LinkedIn or other social platforms, we may receive basic profile information as permitted by those platforms and your privacy settings on those platforms.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your enquiries and schedule discovery calls
• To deliver the GoHighLevel CRM and automation services you have engaged us for
• To send you appointment confirmations, reminders, and follow-up communications
• To send marketing communications, service updates, and educational content — only where you have given explicit consent
• To comply with our legal obligations under Nigerian law and applicable international regulations
• To improve our website, services, and client experience based on usage data
• To protect against fraud, abuse, or misuse of our services

4. Legal Basis for Processing (GDPR)

For users located in the European Union or European Economic Area, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent — where you have given us explicit consent to process your data for a specific purpose (e.g. marketing communications)
• Legitimate Interests — where processing is necessary for our legitimate business interests, such as responding to enquiries and delivering services
• Contractual Necessity — where processing is required to fulfil a contract or pre-contractual arrangement with you
• Legal Obligation — where we are required to process data to comply with applicable law

5. How Long We Keep Your Data

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Lead and enquiry data — retained for up to 24 months from the date of last contact
• Client data — retained for the duration of the client relationship and up to 5 years thereafter for legal and accounting purposes
• Marketing consent records — retained for the duration of the consent and up to 3 years after withdrawal
• Website analytics data — retained for up to 26 months

After the applicable retention period, your data will be securely deleted or anonymised.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• GoHighLevel (HighLevel Inc.) — our CRM and automation platform, which processes data on our behalf as a data processor. GoHighLevel operates under its own Privacy Policy available at highlevel.com/privacy-policy
• Email and SMS service providers — used to deliver communications you have consented to receive
• Professional advisors — such as legal or accounting professionals, bound by confidentiality obligations
• Law enforcement or regulatory authorities — where required by law or to protect our legal rights

All third-party service providers we work with are required to handle your data securely and in accordance with applicable data protection laws.

7. International Data Transfers

As we use GoHighLevel and other cloud-based services, your data may be transferred to and processed in countries outside Nigeria, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms, to protect your personal information in accordance with applicable law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access — to request a copy of the personal data we hold about you
• Right of Rectification — to request correction of inaccurate or incomplete data
• Right of Erasure — to request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing — to request that we limit how we use your data
• Right to Data Portability — to receive your data in a structured, commonly used format
• Right to Object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to improve your experience and analyse website usage. Cookies are small text files stored on your device. We use the following types of cookies:

• Essential cookies — necessary for the website to function correctly
• Analytics cookies — to understand how visitors use our website (e.g. Google Analytics)
• Marketing cookies — to track the effectiveness of our advertising (only where consent is given)

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website.

10. Data Security

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted data transmission using HTTPS / SSL
• Access controls limiting who can view your personal data
• Use of secure, reputable third-party platforms with their own security certifications
• Regular review of our data handling practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will take prompt action to delete such data.

12. Marketing Communications and Opt-Out

We will only send you marketing communications where you have given your explicit consent. You can withdraw this consent and opt out of marketing communications at any time by:

• Replying STOP to any SMS or WhatsApp message we send
• Clicking the unsubscribe link in any email we send
• Contacting us directly at [email protected]

Withdrawal of marketing consent does not affect the lawfulness of communications sent before withdrawal, nor does it prevent us from contacting you for non-marketing purposes related to services you have requested.

13. Nigerian Data Protection Compliance

This Privacy Policy is designed to comply with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023. We are committed to processing personal data of Nigerian residents in accordance with these regulations and the guidelines issued by the Nigeria Data Protection Commission (NDPC).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 30 days of receipt.