Privacy Policy

1. Introduction

1.1This Privacy Policy explains how NeuNest Ltd (“NeuNest”, “we”, “us”, or “our”), registered in England and Wales, collects, uses, stores and protects your personal data when you interact with our website and services.

1.2 We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.3 Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

2.1 NeuNest Ltd is the data controller for all personal data collected through this website and our services.

2.2 For all data protection enquiries, please contact us at: neunest.information@gmail.com

2.3 For all data protection enquiries, please use the contact details in Section 12.

3. What Data We Collect

3.1 Personal Information:

• Full name, email address and telephone number
• Investment experience status (first-time investor or not)

3.2 Investment Preferences and Specifications:

• Property types, preferred locations and postcode areas
• Budget range, purchase method and mortgage status
• Target yield, BMV percentage, condition and age preferences
• Investment strategy, timeframe and additional notes

3.3 Website Usage Data:

• Pages visited, time on site, referral sources
• Device type, browser type and IP address (anonymised where possible)
• Cookie data (see Section 11)

4. How We Collect Data

4.1 Directly from you: When you complete our Property & Investment Specifications form, contact us by email, or otherwise provide your information to us.

4.2 Automatically: When you browse our website, we may collect technical data automatically via cookies and analytics tools. This data is used in aggregated, anonymised form to improve our website.

5. Legal Basis for Processing

5.1 Consent: Where you have submitted our specifications form, you have consented to us processing your data for the purposes of finding matching properties. Where you have opted in to marketing, we process your data on the basis of that consent.

5.2 Legitimate Interests: We may process certain data where it is in our legitimate business interests to do so, for example to improve our service, to communicate with prospective clients and to ensure the security of our systems.

5.3 Contractual Necessity: Where you engage our property sourcing service, we process your data as necessary to fulfil that service.

6. How We Use Your Data

• To search for and source properties matching your submitted specifications
• To contact you about matched deals, progress updates and service communications
• To improve and personalise our service based on your preferences
• To send marketing communications, only where you have provided explicit consent
• To comply with our legal obligations under UK law
• To prevent fraud, ensure security and protect our legitimate business interests

7. Data Storage & Security

7.1Your data is stored securely via Google Workspace (Google Sheets), which employs encryption in transit (TLS) and at rest. Google's infrastructure is certified to internationally recognised security standards including ISO 27001.

7.2 Access to your personal data is restricted to authorised NeuNest personnel only, on a strict need-to-know basis.

7.3 We conduct regular reviews of our data security practices and update them as necessary to maintain appropriate protections.

8. Data Sharing

8.1 We do not sell, rent, or trade your personal data to any third parties.

8.2 We may share your data in the following limited circumstances:

• Trusted service partners (e.g. solicitors, mortgage brokers), but only with your explicit consent and only where necessary to provide the service you have requested
• Analytics providers: only anonymised, aggregated data with no personal identifiers
• Legal/regulatory authorities: where required by law, court order, or regulatory obligation

9. Data Retention

9.1 We retain your personal data for 24 months from the date of your last interaction with us, after which it is securely deleted.

9.2 You may request deletion of your data at any time by contacting us at neunest.information@gmail.com. We will action your request within 30 days.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (“right to be forgotten”)
• Right to Restriction: Request that we limit processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw any consent given at any time

To exercise any of these rights, contact us at neunest.information@gmail.com. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Cookies

11.1 We use cookies and similar technologies to operate and improve our website. Cookies are small text files stored on your device.

11.2 We use the following types of cookies:

• Essential cookies: Required for the website to function. Cannot be disabled.
• Functional cookies: Remember your preferences (e.g. cookie consent).
• Analytics cookies: Help us understand how visitors use our site (anonymised).

11.3 You can manage your cookie preferences via the cookie consent banner on our website, or through your browser settings.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

13. Children's Data

Our service is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

14. International Transfers

Where your data is processed outside the UK (for example, via Google's global infrastructure), we ensure appropriate safeguards are in place, including standard contractual clauses and Google's data processing terms, which provide equivalent protections to UK GDPR.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via our website. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.