Privacy

Privacy policy

Travel, Leisure & Destination Company (“TLD”, “we”). Effective 2 November 2026. This notice explains how we handle personal data under the Nigeria Data Protection Act 2023 (NDPA).

Who is responsible

TLD, based in Lagos, Nigeria, with hotel offices by appointment, is the controller for enquiries and client records we create. Write to info@tldcompany.ng with the subject “Privacy”. Clinical records created during a Minaret health assessment are controlled by the hospital, not by TLD.

What we collect

  • Identity and contact details: name, phone, email, and the way you prefer to be reached.
  • Journey details: purpose, dates, destination, party size, budget guide and notes you choose to give.
  • Later, if you engage us: traveller names, passport and visa data, preferences, payment references and correspondence.
  • For Minaret, with separate consent: the fact of a health assessment, appointment logistics and any mobility needs. Test results stay with the hospital unless you ask for a copy to be shared.
  • Technical data such as a standard server log of this website. We do not run advertising trackers on these pages.

When you submit the journey form, TLD emails the brief to info@tldcompany.ng. Where the concierge database is switched on, a copy is also stored so the desk can reply and keep a record of your consent. The form does not ask for passport numbers, card details or medical results. Do not include them.

Why we use it

  • To answer an enquiry and design a journey you have asked for.
  • To perform a contract once you approve a plan, including supplier bookings you have authorised.
  • To meet legal duties: customer due diligence, sanctions screening where required, tax and accounting, and complaint handling.
  • To keep a record of consent, and of any withdrawal.
  • With a further consent, to remember preferences for a future journey or to send occasional notes about services. You can refuse this and still travel with us.

Who we share it with

We share the minimum needed with airlines, hotels, destination managers, ground handlers, insurers, education or relocation partners, and licensed pilgrimage operators, and only for the journey you approved. For Minaret, logistics may be shared with Saudi German Hospital or another appointed provider. Health data shared for that purpose is a separate consent, and the clinical file remains with the hospital.

Some of those parties are outside Nigeria, including in the United Kingdom, the United Arab Emirates and Saudi Arabia. Where a transfer is needed to deliver the trip, we tell you which country and which role, and we rely on your instructions for the booking together with appropriate contractual safeguards.

We do not sell personal data.

How long we keep it

Enquiry records that do not become a booking are kept only as long as needed to reply and to record that we replied, then deleted or reduced. Booking records, invoices and due-diligence files are kept for the period required by Nigerian financial, tax and regulatory rules. Passport copies, where we hold them, are deleted within twelve months of your return unless a longer period is required by law or by an open complaint. You may ask us to confirm the period that applies to you.

Your rights

Subject to the NDPA, you may ask us to:

  • confirm whether we hold data about you, and for a copy;
  • correct data that is inaccurate;
  • delete data we no longer have a reason to keep;
  • restrict or object to certain uses;
  • withdraw consent, without affecting use that was already lawful;
  • complain to the Nigeria Data Protection Commission.

Send requests to info@tldcompany.ng. We may need to confirm your identity before we release a file.

Security

Access to client records is limited to people who need them for the engagement. The website form is sent over the hosting provider’s connection and stored, when enabled, in a MySQL database on that host. We do not ask for card numbers, passwords or one-time codes on this website or by unexpected message. Document exchange after you appoint us happens on a channel your concierge names, not as an open upload here. More is set out in the terms of use and security note.

Children

We plan travel for families, including children, on the instructions of a parent or legal guardian. We do not market directly to children.

Changes

If this notice changes in a way that affects a journey already in progress, we will tell the clients it affects. The date at the top is the current version.