Last updated: this policy applies to your use of OpenList247 (the "Platform"), a business discovery, listing and review service operated by Hisparadise Multilink Resources Limited ("OpenList247", "we", "us" or "our"). It explains what personal information we collect, why we collect it, how we use and share it, and the choices you have.
By creating an account, listing a business, leaving a review, funding a wallet, or otherwise using the Platform, you agree to the collection and use of information as described here. If you do not agree, please do not use the Platform. This policy should be read alongside our Terms and Conditions, Cookie Policy, and NDPR & Data Protection page, which covers your rights under Nigerian data protection law in more detail.
1. Information We Collect
Account information: when you register, we collect your full name, email address, phone number, and a securely hashed password. If you sign in with a social account, we receive the basic profile information that provider shares with us.
Business listing information: if you list, claim, or manage a business, we collect the business name, description, category, address, coordinates, contact details, opening hours, photos, services, products, pricing, certifications, and any other content you choose to add to the listing, including team member profiles and CAC registration numbers submitted for verification.
Reviews and messages: when you leave a review, reply to a review as a business owner, ask a question, send an inquiry to a business, or message another user, we store that content along with the timestamp and the account it's associated with.
Bookings and orders: if you book an appointment or place an order through a business's profile, we collect the details needed to fulfil that request — your name, phone number, email, and the specifics of what you booked or ordered.
Wallet and transaction data: if you fund your OpenList247 wallet or spend it (for example on an advertising campaign or a subscription), we record the transaction amount, type, reference, and resulting balance. We do not store full card numbers; payment processing details are handled by our payment partners.
Technical and usage data: we automatically collect information such as your IP address, browser type, device information, pages viewed, and how you interact with listings, searches and ads, to keep the Platform secure and to understand how it's used.
Communications: if we send you a notification, email, or WhatsApp message (for example a booking confirmation or an ad campaign update), we keep a record that the message was sent and its content, for support and audit purposes.
2. How We Use Your Information
We use the information we collect to: create and secure your account; display business listings, reviews, and related content publicly as intended by the Platform; connect customers with businesses through inquiries, bookings, and orders; process wallet transactions and advertising campaigns; send booking confirmations, order updates, review replies, and other service notifications by email, in-app notification, or WhatsApp; investigate and prevent fraud, abuse, or violations of our Terms and Conditions; respond to support requests; and improve the Platform based on how it is actually used.
We do not use your personal information to make automated decisions that produce legal or similarly significant effects on you without human involvement.
3. How We Share Information
Public listing and review content: your business listing content, and any review, reply, or question you post, is publicly visible on the Platform by design — that is the purpose of a public directory and review service. Do not include information in a public listing or review that you do not want visible to anyone.
With businesses you contact: when you send an inquiry, make a booking, or place an order, the name, phone number, email, and message you provide are shared with the business you contacted so they can respond to you.
Service providers: we share information with third parties who help us operate the Platform, including payment processors, SMS and WhatsApp messaging providers (Meta's WhatsApp Business Platform), hosting providers, and Google AdSense where a publisher account is configured for advertising. These providers only receive the information needed to perform their function and are not permitted to use it for their own purposes.
Legal requirements: we may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or safety of OpenList247, our users, or the public, or investigate fraud or security issues.
Business transfers: if OpenList247 or Hisparadise Multilink Resources Limited is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy continuing to apply.
We do not sell your personal information to third parties.
4. Cookies and Tracking
We use cookies and similar technologies to keep you signed in, protect against cross-site request forgery, remember basic preferences, and — where a Google AdSense publisher account is configured — to serve advertising. See our Cookie Policy for full detail on the cookies we use and how to control them.
5. Reviews and Public Content
Reviews, replies, questions, and any other content you choose to post are treated as public content once published, and may remain visible even if you later delete your account, unless removal is required for legal reasons or under our Review Policy. You can request removal of your own reviews by contacting us or using the tools available in your account.
6. Data Security
We take reasonable technical and organizational measures to protect your information, including hashing passwords, restricting internal access to personal data to what each role actually needs, and using secure connections for data in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain account, listing, review, and transaction data for as long as your account is active, and for a reasonable period afterward as needed for legal, security, tax, or dispute-resolution purposes. Wallet transaction records are retained for accounting and audit purposes even after an account is closed. After the applicable retention period, data is deleted or anonymized.
8. Children's Privacy
OpenList247 is not directed at children under 18, and we do not knowingly collect personal information from anyone under that age. If we become aware that we have collected personal information from a child without appropriate consent, we will delete it.
9. Your Rights
If you are in Nigeria, your rights under the Nigeria Data Protection Regulation and the Nigeria Data Protection Act 2023 — including the right to know what data we hold, correct it, request deletion, object to certain processing, and request a portable copy of your data — are described in full on our NDPR & Data Protection page. You can exercise these rights by contacting us using the details below.
10. International Data Transfers
Some of our service providers (such as cloud hosting or messaging platforms) may process data outside Nigeria. Where this happens, we require that appropriate safeguards are in place to protect your information consistently with this policy.
11. Third-Party Links
Business listings may include links to third-party websites, social media profiles, or ordering systems that we do not control. This policy does not apply to those third-party sites, and we encourage you to review their own privacy practices.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will update the "last updated" information shown on this page when we do. Continued use of the Platform after a change takes effect means you accept the revised policy.
13. Contact Us
If you have questions about this Privacy Policy or how your information is handled, please contact us through our Contact page, or submit a data request through the NDPR & Data Protection page.