VATERRA House Lagos
Last updated: 13 September 2026
Who we are
VATERRA HOUSE HOSPITALITY NIGERIA LIMITED, company number RC 9211739, trading as VATERRA House Lagos, is responsible for the personal data described in this policy. Our address is Eleganza Gardens Estate, opposite VGC, Lekki-Epe Expressway, Lagos, Nigeria. In this policy, “VATERRA”, “we”, “us” and “our” refer to that company.
This policy applies when you visit vaterrahouse.com, submit an enquiry, use our booking links, contact our reservations team or otherwise interact with our website and online reservation services.
Personal data we collect
Depending on how you interact with us, we may collect:
- identity and contact details, such as your name, email address and telephone or WhatsApp number;
- reservation and stay information, such as arrival and departure dates, room preference, number of rooms, number and ages of guests, booking reference and requests you choose to provide;
- business-enquiry information, such as company name, booking requirements and correspondence;
- transaction information, such as payment status and limited payment references supplied by a booking or payment provider;
- technical and usage information, such as IP address, browser, device, pages viewed, links selected, referral source and cookie identifiers, where applicable; and
- records of your choices and communications, including cookie preferences, marketing preferences, enquiries, complaints and support requests.
Please do not send full payment-card details through an enquiry form, email or WhatsApp.
How we obtain personal data
We collect personal data directly from you and, where applicable, from people booking on your behalf, our booking-engine provider, travel agents, online travel agencies, payment providers and technical service providers. If you provide another person’s data, you must be authorised to do so and ensure that the person receives this policy.
Why we use personal data
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Respond to enquiries and take requested pre-booking steps | Contact and enquiry details | Steps requested before a contract; legitimate interests where appropriate |
| Create, administer and support reservations | Identity, contact, stay and transaction information | Contract |
| Provide guest support and communicate service information | Contact, booking and correspondence records | Contract; legitimate interests |
| Comply with accounting, tax, security and other legal requirements | Booking, transaction and legally required records | Legal obligation |
| Protect the website, guests and business from misuse, fraud and security threats | Technical, usage, booking and communication records | Legitimate interests; legal obligation where applicable |
| Measure website use and campaign performance | Cookie and usage information | Consent where required |
| Send marketing communications | Contact details and marketing preferences | Consent |
| Establish, exercise or defend legal claims | Relevant booking, transaction and communication records | Legal obligation or legitimate interests, as applicable |
Where we rely on legitimate interests, we assess whether the processing is necessary and whether your rights and interests override our purpose. You may ask for information about that assessment.
When information is required
Some information is required to answer an enquiry, create a reservation or meet a legal obligation. If required information is not provided, we may be unable to respond, complete the booking or provide the requested service. Optional fields will be identified as optional.
Who receives personal data
We may disclose personal data only where necessary to:
- authorised VATERRA staff and service personnel who need the information for their work;
- website hosting, form, email, booking, payment, customer-support, analytics, advertising and consent-management providers acting under appropriate terms;
- travel agents, online travel agencies or corporate bookers involved in your reservation;
- professional advisers, auditors, insurers and prospective transaction advisers where confidentiality safeguards apply; and
- regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.
We do not sell personal data.
International transfers
Some technology or booking providers may process personal data outside Nigeria. Before transferring personal data internationally, we will identify and document an applicable transfer ground and use appropriate safeguards required by the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Act General Application and Implementation Directive 2025. You may contact us for information about the safeguards relevant to your data.
Retention
We keep personal data only for as long as needed for the purpose for which it was collected, to meet legal, accounting and operational requirements, and to establish or defend claims. An enquiry that does not result in a contract will ordinarily be deleted within six months unless a lawful reason requires longer retention. Booking and transaction records may be kept for the period required by applicable law and our approved retention schedule. Cookie retention periods are listed in the Cookies Policy after the production cookie scan.
Security
We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Access is limited according to role. No internet transmission or storage system can be guaranteed to be completely secure.
Your rights
Subject to the Nigeria Data Protection Act 2023 and any lawful limitations, you may have the right to:
- receive clear information about our processing;
- request access to your personal data;
- ask us to correct inaccurate or incomplete data;
- withdraw consent where processing depends on consent;
- object to certain processing, including direct marketing;
- request erasure or restriction in applicable circumstances;
- request data portability where applicable;
- request human intervention where a decision with legal or similarly significant effects is based solely on automated processing; and
- lodge a complaint with the Nigeria Data Protection Commission.
To exercise a right, contact reservations@vaterrahouse.com. We may request information needed to verify your identity and protect your data. We will respond within the period required by applicable law.
Children
Our website and online enquiry services are intended for adults. A reservation involving a child must be made by an adult with authority to provide the required information. We do not use a child’s personal data for marketing without the legally required authorisation or consent.
Cookies and tracking
We use necessary cookies to operate and secure the website. Analytics, advertising and other non-essential cookies or tracking tools will operate only after the required consent. See the Cookies Policy and use Cookie Settings to change your choices.
Third party links
Our website links to external services, including our booking portal, Google Maps and social-media platforms. Those services control their own processing. Review their privacy information before providing personal data.
Complaints and contact
For a privacy question, request or complaint, email reservations@vaterrahouse.com, call +234 911 323 7566, or write to VATERRA HOUSE HOSPITALITY NIGERIA LIMITED at Eleganza Gardens Estate, opposite VGC, Lekki-Epe Expressway, Lagos, Nigeria. We will investigate and respond as required by law. You may also complain directly to the Nigeria Data Protection Commission at ndpc.gov.ng.
Changes to this policy
We may update this policy to reflect changes to our services, providers or legal obligations. The date at the top will show when the policy was last updated. We will provide an additional notice where a change materially affects how we use personal data.