Privacy Policy
Last updated: 23 July 2026
Urban Pumpkin ("we", "us", "our") operates serviced apartments in Lagos, Nigeria. This policy explains what we collect, why, and what you can ask us to do about it. It is written to describe this website as it actually works.
This website is a brochure. There is no account to create, no form to fill in, no newsletter signup and no payment taken on the site. Every enquiry reaches us through WhatsApp, email or the phone.
1. What we collect
When you contact us. If you message us on WhatsApp, email us, or call, we receive whatever you choose to send: usually your name, your contact details, the dates you are interested in, how many guests, and your messages.
When you book. To host you we collect the lead guest's name and contact details, the names or number of people staying, and a payment reference. Some buildings require guest identification at the gate, and where that applies we pass on only what the building asks for.
Payment details. We do not see or store full card numbers. Card payments go through a payment provider using a secure link. If you pay by bank transfer, we see the transfer reference in our own bank records.
When you browse. We use Google Analytics, which sets cookies and records pages viewed, approximate location at city level, device and browser type, and which site or link sent you here. It does not tell us who you are.
We do not run advertising or marketing trackers on this site.
2. Why we use it
- To answer your enquiry and give you a quote
- To confirm and run your stay, including check in details and access
- To take payment and return your deposit
- To meet tax, accounting and other legal obligations
- To understand which pages and guides people find useful, so we can improve them
We do not sell your personal information, and we do not send marketing emails from this website.
3. Legal bases
If you are in the UK or the EU, the UK GDPR and EU GDPR apply to you, and we rely on:
- Contract, to arrange and deliver a stay you have asked for
- Legitimate interests, to run and improve the website and prevent fraud
- Consent, for analytics cookies where consent is required
- Legal obligation, for tax and accounting records
If you are in Nigeria, we handle your data in line with the Nigeria Data Protection Act.
4. Who we share it with
- Google, for Analytics on this site and for our email (Google Workspace)
- Meta, if you choose to contact us on WhatsApp, under WhatsApp's own terms
- Our payment provider, to process card payments and issue refunds
- Building management or security, only where a building requires guest details for access
- Our accountants and, where required, the authorities, to meet legal obligations
5. Where your data goes
Google processes analytics and email data on servers outside Nigeria, including in the United States and the European Union. Those transfers rely on the safeguards Google puts in place as the processor.
6. How long we keep it
Enquiries that do not turn into a booking are kept while the conversation is live and for a reasonable period afterwards, in case you come back to us. Booking and payment records are kept for as long as tax and accounting law requires. Analytics data is retained according to the retention period set in Google Analytics.
7. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete your data, where we are not legally required to keep it
- stop using it for a particular purpose
Email hello@urbanpumpkin.com and we will respond. You also have the right to complain to your data protection regulator.
8. Cookies and how to refuse them
The only cookies this site sets are Google Analytics cookies, used to measure how the site is used. There are no advertising cookies.
Nothing is set before you choose. On your first visit a banner asks whether you accept analytics cookies. Google Analytics is not loaded into the page at all until you accept, so declining means no analytics cookie is ever created.
You can change your mind at any time using the Cookie settings link at the bottom of any page. If you decline after previously accepting, we delete the analytics cookies already on your device.
If your browser sends a Global Privacy Control signal, we treat that as a decline and do not ask.
You can also block or delete cookies in your browser settings, or install Google's own opt out add on at tools.google.com/dlpage/gaoptout. The site works normally either way.
9. Security
The site is served only over an encrypted connection (HTTPS). We do not store card details. Our email is on Google Workspace with its standard protections. No system is perfectly secure, but we take reasonable care.
10. Children
Our stays and this website are intended for adults. We do not knowingly collect data from anyone under 18.
11. Changes
If we change this policy, the "last updated" date above will change with it.
12. Contact
Urban Pumpkin, Lagos, Nigeria Email: hello@urbanpumpkin.com Phone: +234 912 333 5599