privacy policy
Effective Date: October 8, 2026 | Last Updated: October 8, 2026
Privacy Policy
1. Who We Are
Bedrock Residencies (RC: 1839912), alongside its parent entity and affiliates including Bedrock Travels, Choco’s Bistro, and Bedsoft (collectively, “Bedrock Group”, “we”, “us”, or “our”), operates short-let accommodations, dining establishments, travel solutions, and property management technologies.
Our primary website domain is https://bedrockgroup.ng, alongside our property management, booking, and dining portals operated under Bedsoft and affiliated Bedrock Group platforms.
This Privacy Policy describes how we collect, use, consult, store, and process Personal Data across our physical properties, websites, mobile interfaces, and digital services.
2. The Scope of Our Digital Services & Software (Bedsoft PMS)
We operate Bedsoft, a proprietary Property Management System (PMS) and booking engine. Bedsoft powers:
- Direct booking engines for Bedrock Residencies and partner properties.
- Central reservation management, channel management, and guest folios.
- Apartment and property listings management for short-let hosts and corporate stays.
- Dining reservations and order management for Choco’s Bistro.
When you make a booking, list a property, or place an order via Bedsoft, Bedrock Group processes your data as a Data Controller. Individual partner properties listed on Bedsoft may also process your data as joint or independent Controllers for local stay administration.
3. Personal Data We Collect & How We Collect It
We collect Personal Data directly from you, automatically via web interaction, and through third-party channels (such as Travel Agents, OTAs, and corporate bookers).
A. Direct Interactions & Bookings (Bedrock Residencies, Travels & Bedsoft)
- Identity & Contact Data: First name, last name, title, email address, physical address, phone number, national identification/passport details (for travel and mandatory guest verification).
- Booking & Travel Details: Arrival/departure dates, room/apartment selection, flight details, itinerary preferences, travel insurance details, and guest passenger manifest details.
- Property Listing Data (Hosts/Owners): Property ownership proof, bank account details, apartment photos, location coordinates, pricing rules, and listing specs managed via Bedsoft.
- Financial & Payment Data: Credit/debit card numbers, expiration dates, billing addresses, and payment transaction logs processed securely via compliant payment gateways.
B. Dining & Event Data (Choco’s Bistro)
- Table Reservations & Orders: Name, contact details, preferred dining dates/times, party size, special occasions, and dietary/allergy requirements.
- Loyalty & Billing: Consumption history, payment details, and feedback.
C. Automated Website & Interactive Data
- Comments & Posts: When visitors leave comments, we collect data shown in the comment form, plus visitor IP address and user agent string to aid spam detection.
- Media Uploads: If uploading images to Bedsoft or website forms, avoid embedding location data (EXIF GPS). Visitors can download and extract location data from public images.
- Cookies & Tracking:
- Comment Cookies: Option to save name/email in cookies for convenience (expires in 1 year).
- Login Cookies: Temporary cookies set on login to check browser compatibility (discarded on browser close). Active login cookies last 2 days; display setting cookies last 1 year. “Remember Me” keeps logins for 2 weeks.
- Publishing Cookies: Indicates post ID of edited articles (expires in 1 day).
- Analytics & Ad Cookies: Used to track site performance, conversion rates, and abandoned carts.
D. Embedded Content from External Platforms
Articles or pages on our sites may include embedded content (videos, maps, payment widgets). Embedded content from other websites behaves exactly as if you visited the third-party site directly. These sites may collect data, use cookies, embed additional tracking, and monitor interaction.
4. Lawful Grounds & Purposes of Data Processing
Processing Purpose | Data Categories Included | Lawful Basis |
Short-Let & Travel Bookings (Residencies, Travels, Bedsoft) | Name, contact info, payment details, ID, dates, booking ref | Contractual Necessity (performing your booking) |
Abandoned Cart Recovery (Bedsoft Online Engine) | Email, contact info, selected dates/property | Legitimate Business Interest (re-marketing incomplete stays) |
Guest Check-In, Keycard & Credit Limit Audits | ID, credit card guarantee, room log, arrival/departure | Contractual Necessity & Financial Security |
Dining Reservations & Tailored Stays (Choco’s Bistro & Residencies) | Dietary rules, preferences, consumption history, room choices | Legitimate Interest & Customer Consent |
Host Listing & Inventory Management (Bedsoft PMS) | Owner identity, property address, payouts, inventory details | Contractual Necessity |
Service Emails & Satisfaction Surveys | Email, click/open metrics, survey ratings | Legitimate Interest (service quality improvement) |
5. Third-Party Data Sharing & Transfers
We do not sell your personal data. We share data only with necessary third parties under strict confidentiality standards:
- Internal Affiliates: Between Bedrock Residencies, Bedrock Travels, Choco’s Bistro, and Bedsoft support teams to deliver seamless hospitality and technology services.
- Third-Party Service Providers: IT hosts, payment processors, automated spam detection tools, email marketing engines, and analytics services.
- Property Hosts & Travel Vendors: Relevant short-let hosts, airlines, or transport partners linked to your Bedsoft reservation or travel package.
- Legal & Regulatory Authorities: When required by law, security audits, or financial compliance in accordance with NDPA regulations.
6. Data Retention & Security
- Comments & Metadata: Retained indefinitely to auto-approve follow-up comments.
- User Accounts (Bedsoft / Residencies): Stored while your account remains active. All registered users can see, edit, or delete personal info anytime (username changes excluded).
- Booking & Financial Logs: Retained for statutory tax, legal, and operational audit periods (typically 6–7 years).
- Security: Technical measures, encryption protocols, and access controls are maintained in Bedsoft and web servers to prevent unauthorized data access, loss, or misuse.
7. Your Data Protection Rights
Under applicable data protection laws (including NDPA), you possess the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction/Rectification: Request updates to inaccurate or incomplete records.
- Erasure (“Right to be Forgotten”): Request deletion of your personal data, excluding data we must keep for legal, security, or administrative reasons.
- Unsubscribe / Opt-Out: Cancel subscription to pre-arrival emails, service analytics, or marketing updates via the “Unsubscribe” link in sent emails.
8. Updates to This Privacy Policy
We reserve the right to modify this policy as our operational verticals (including Bedsoft, Travels, and Bistro features) grow. Updates will be published on https://bedrockgroup.ng with an updated effective date.
9. Contact Us
For questions regarding this Privacy Policy, your data rights, or Bedsoft data practices:
- Email: marketing@bedrockgroup.ng
- Website: https://bedrockgroup.ng
