Privacy Policy
Privacy Policy (NDPA Compliant)
Effective Date: 17th January 2026
Otellux (“we”, “us”, or “our”) is committed to protecting your personal data in line with the Nigeria Data Protection Act (NDPA) 2023 and applicable regulations issued by the Nigeria Data Protection Commission (NDPC).
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website and services.
1. Who We Are (Data Controller)
Otellux is a hotel management and booking platform that provides tools for hotel operations, reservations, payments, and guest engagement.
Website: https://otellux.ng
Otellux acts as the Data Controller for personal data collected through this website and related services.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Contact details (name, email address, phone number)
Login and account information
Hotel, booking, and transaction-related information
IP address, browser type, device information
Comments and feedback submitted on the website
Usage and analytics data
We only collect personal data that is necessary, relevant, and lawful for the purposes stated in this policy.
3. Lawful Basis for Processing (NDPA)
Under the NDPA, Otellux processes personal data based on one or more of the following lawful grounds:
Your consent
Performance of a contract or service request
Compliance with legal obligations
Legitimate interests of Otellux, provided such interests do not override your rights and freedoms
4. Comments
When visitors leave comments on the website, we collect the data shown in the comments form, along with the IP address and browser user agent string to help detect spam and abuse.
An anonymized string (hash) created from your email address may be shared with the Gravatar service. Gravatar’s privacy policy is available at: https://automattic.com/privacy/.
Once approved, your comment and profile image (if applicable) may be publicly visible.
5. Media Uploads
If you upload images to Otellux, please avoid including embedded location data (EXIF GPS). Visitors may download and extract metadata from publicly accessible images.
6. Cookies and Tracking Technologies
Otellux uses cookies to improve user experience, security, and performance.
Cookies may be used to:
Save user preferences
Enable login functionality
Analyze site traffic and usage
Improve service delivery
You may control or disable cookies through your browser settings. Some features of the website may not function properly without cookies.
7. Payments & Third-Party Integrations
Otellux integrates with trusted third-party service providers to deliver essential services, including:
a. Payment Gateways
We work with licensed Nigerian and international payment gateway providers to process payments securely. Payment data such as card or bank details are processed directly by the payment provider and are not stored on Otellux servers.
These providers comply with:
NDPA requirements
PCI-DSS security standards (where applicable)
b. SMS and Communication Providers
Otellux may integrate with SMS and communication gateway providers to send:
Booking confirmations
Transaction alerts
System notifications
Only the minimum required data (such as phone numbers and message content) is shared with these providers for service delivery.
c. Other Third-Party Services
We may also use third-party tools for:
Website analytics
Security and spam detection
Cloud hosting and infrastructure
All third-party processors are contractually required to:
Process data only on Otellux’s instructions
Implement appropriate security safeguards
Comply with NDPA and applicable data protection laws
8. Embedded Content from Other Websites
Pages on Otellux may include embedded content (videos, images, articles, etc.) from third-party websites. Such content behaves as if you visited the external website directly.
These third-party sites may collect data about you, use cookies, or track your interaction, especially if you are logged into their platforms.
Otellux does not control third-party privacy practices.
9. Data Retention
We retain personal data only for as long as necessary to:
Provide services
Meet contractual and legal obligations
Resolve disputes
Enforce our policies
Comments and related metadata may be retained indefinitely unless deletion is requested.
User account data is retained while the account remains active or as required by law.
10. Your Rights Under the NDPA
Under the Nigeria Data Protection Act, you have the right to:
Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Withdraw consent at any time
Object to certain data processing activities
Request data portability, where applicable
Requests can be made by contacting us using the details provided below.
11. Data Security
Otellux implements appropriate technical and organizational security measures to protect personal data against:
Unauthorized access
Loss or misuse
Alteration or disclosure
Access to personal data is restricted to authorized personnel only.
12. Where Your Data Is Sent
Visitor comments may be checked through automated spam detection services.
Some data may be processed or stored on secure servers outside Nigeria, where adequate data protection safeguards are in place in accordance with NDPA requirements.
13. Changes to This Privacy Policy
Otellux may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Updates will be posted on this page with a revised effective date.
14. Contact Information
For questions, concerns, or data protection requests, please contact:
Data Protection Officer (DPO)
Otellux
Website: https://otellux.ng
Email: admin@otellux.ng