Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Last Updated: October 19, 2025

Houzzley Technologies Limited, trading as HSF Direct ("we," "us," or "our"), operates the HSF Direct platform. We are committed to protecting your privacy and complying with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable data protection laws.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our home loan origination platform. By using HSF Direct, you consent to the practices described in this policy.

1. Information We Collect

1.1 Personal Information

When you use HSF Direct, we collect personal information including but not limited to: name, email address, phone number, date of birth, residential address, employment information, income details, and identification documents (BVN, NIN, passport, driver's license).

1.2 Financial Information

We collect financial information necessary for mortgage pre-approval and processing, including bank statements, credit reports, tax information, asset documentation, and employment verification.

1.3 Technical Information

We automatically collect information about your device and how you interact with our platform, including IP address, browser type, operating system, pages visited, time spent on pages, and referring website addresses.

2. How We Use Your Information

2.1 Service Provision

We use your information to process mortgage applications, verify your identity and creditworthiness, match you with suitable properties and lenders, communicate about your application status, and provide customer support.

2.2 Platform Improvement

Your data helps us improve our services, develop new features, analyze platform usage patterns, and enhance user experience.

2.3 Legal Compliance

We use your information to comply with Nigerian laws and regulations, including Central Bank of Nigeria (CBN) directives, Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) regulations, and tax reporting obligations.

3. Data Security

3.1 Security Measures

We implement industry-standard security measures including encryption of data in transit and at rest, secure access controls and authentication, regular security audits and penetration testing, and employee training on data protection.

3.2 Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Financial records are maintained for a minimum of 7 years as required by Nigerian law.

4. Information Sharing

4.1 Third-Party Sharing

We share your information with: partnered lenders and financial institutions for loan processing, property developers for transaction facilitation, credit bureaus (CRC Credit Bureau) for credit checks, verification service providers, and legal authorities when required by law.

4.2 Data Protection

All third parties with whom we share your data are contractually obligated to maintain confidentiality and comply with the Nigeria Data Protection Regulation (NDPR).

5. Your Rights

5.1 Access and Control

Under the NDPR, you have the right to: access your personal data, request correction of inaccurate data, request deletion of your data (subject to legal obligations), object to processing of your data, withdraw consent at any time, and port your data to another service.

5.2 Exercising Your Rights

To exercise these rights, please contact our Data Protection Officer at [email protected] or through your account settings.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform. For detailed information about our cookie practices, please refer to our Cookie Policy.

7. International Data Transfers

Your data is primarily stored and processed within Nigeria. In cases where we use international service providers, we ensure adequate safeguards are in place to protect your information in accordance with NDPR requirements.

8. Children's Privacy

HSF Direct is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of HSF Direct after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Officer

Email: [email protected]

Phone: +234 817 4224 060

Address: 1610 Adeola Hopewell, Victoria Island, Lagos, Nigeria