Legal
Privacy notice
How we collect, use, share and protect personal data under the Nigeria Data Protection Act 2023 and UK GDPR.
Who we are
AfarHome Ltd operates AfarHome, a managed service arranging non-clinical support in Nigeria for customers living abroad. We act as data controller for the personal data described here.
What we collect
Account details (name, email, phone, country), beneficiary details you provide (name, address, contact, relationship, access notes), property details, booking and payment records, provider verification records, service reports and consented photographs, support messages, and technical logs needed to keep the platform secure.
Data minimisation
We deliberately do not collect diagnoses, treatment records or other detailed health information. Where a service involves an appointment, we record only the logistics needed to deliver accompaniment.
Lawful basis
We process data to perform our contract with you, to meet legal obligations, for our legitimate interest in operating a safe and auditable service, and — for photography, sensitive notes and marketing — on the basis of consent.
Consent and withdrawal
Beneficiaries consent to visits and, separately, to photography. Consent records are stored with a timestamp and can be withdrawn at any time, which stops future processing that relies on that consent.
Sharing
We share only what is necessary: an assigned provider sees the details required to deliver their assignment; payment providers process transactions; our operations, finance and safeguarding staff access data strictly within their role. We do not sell personal data.
Storage and security
Data is stored in access-controlled databases with row-level security. Evidence files are held in private storage and shared only through short-lived signed links. Critical actions are written to an immutable audit log.
Retention
Booking, payment and evidence records are retained for the period required by law and for dispute resolution, then deleted or anonymised. Retention periods are recorded against each record type.
Your rights
You may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Beneficiaries hold the same rights over their own data.
International transfers
Because our customers live abroad and our providers work in Nigeria, personal data may be transferred between jurisdictions under appropriate safeguards.
Exercising your rights
Submit a request through our data and consent requests page, or email support@afarhome.com.