Privacy Policy

This policy explains what personal data Nestraq collects, why, and the rights you have under UK GDPR and the Data Protection Act 2018. Nestraq is the data controller for your account and the home specs you create. Questions or requests: hello@nestraq.com.

What we collect

Account data — your email address and authentication details. Your home specs — the areas, budget, bedrooms, tenure and must-haves you set, plus saved properties and alert preferences. Usage & device data — basic, privacy-preserving information needed to run and secure the service (e.g. app version, error diagnostics). We do not use advertising trackers. The property and market data shown in the app is licensed from data providers and public registers; it is information about homes, not personal data about you.

Our lawful bases (UK GDPR)

We rely on contract (to provide the monitoring, scoring and alerts you sign up for), legitimate interests (to secure, debug and improve the service, balanced against your rights), and consent where required (e.g. optional marketing emails, which you can withdraw at any time).

How we use your data

To run your monitoring, compute matches and deal-scores, send the alerts you ask for, provide support, take payment, and keep the service secure. We do not sell your data, and we do not use it to train third-party advertising profiles.

Who we share it with

Only the processors needed to run Nestraq: our hosting and infrastructure provider, and our payment processors — Apple for in-app subscriptions (Apple handles your payment details; we never see your card) and our card processor for any web billing. Each acts under a data-processing agreement. We may disclose data where legally required.

Storage & retention

Your account and specs are stored on servers in the UK/EU. We keep them while your account is active and for a short period afterwards to meet legal and accounting obligations, then delete or anonymise them. You can ask us to erase your account at any time.

Cookies & device storage

Nestraq sets no advertising or cross-site tracking cookies, so there is no cookie banner to click through. Under UK PECR and the Data (Use and Access) Act 2025 we only use storage that is exempt from consent — strictly necessary, appearance/preference, or privacy-first statistics:

Essential local storage keeps you signed in and remembers the home spec you build — strictly necessary to provide the service you asked for. Cloudflare Turnstile protects our forms from bots (a security measure). Cloudflare Web Analytics gives us aggregate visit counts only: it sets no cookies, stores nothing on your device and never tracks you across other sites, so there is no individual profile to opt out of. A small first-party experiment flag may be stored locally to keep page wording consistent while we test it — never shared, never used for advertising.

You can clear all of this any time by clearing site data for Nestraq in your browser, and you can block the analytics beacon with any content blocker. The beacon is a counter we host ourselves: it sets no cookie, writes nothing to your device, and the request never leaves this domain. It records which page was viewed, roughly where in the world the request came from, and which version of a page you were shown — enough to tell whether a change helped, and not enough to identify you. We use no Google Analytics, no advertising pixels and no third-party marketing trackers. If that ever changed, we would ask for your consent first and update this page.

Your rights

You have the right to access, correct, export, restrict, object to, and erase your personal data. To exercise any of these, email hello@nestraq.comand we will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Location data

Nestraq works from the areas you type into your spec and does not require your device location. If a future feature offers location-based search, it will ask for permission first and you can turn it off at any time in your device settings.

Photos & third-party content

We deep-link to source portals for listing photos and floorplans rather than hosting them. Where an agent connects their own listings, that media is provided under their licence and warranty. Mapping shows the approximate area, not your exact address.

Security

Passwords are hashed, traffic is encrypted in transit, and access to systems is restricted. No service can promise perfect security, but we take reasonable technical and organisational measures to protect your data.

Children

Nestraq is intended for adults (18+) and is not directed at children.

Changes

We may update this policy as the service evolves. Material changes will be posted here with a new “last updated” date, and we will notify account holders where appropriate.