Who is responsible and how to contact us
Nestra is responsible for personal information collected through this website. If you enter into a service agreement, that agreement identifies the contracting Nestra entity, registered details and any additional privacy contact that applies to your market.
To ask a privacy question or exercise a right, use Contact us on the home page and begin your message with “Privacy request.” Please do not send identity documents with your first message.
Personal information we collect
Depending on your relationship with Nestra, we collect:
- identifiers and contact details, including your name, email address, telephone number and communication preferences;
- property and commercial information, including address, property type, bedrooms, availability, ownership status, rental goals and estimated or actual performance;
- enquiry and correspondence content, including questionnaire answers and messages to our team;
- booking, guest-message, channel, payout and service records when we operate a listing for you;
- technical information such as device and browser type, IP address, approximate location, referral data, security logs and privacy choices; and
- compliance information reasonably needed to confirm authority, prevent fraud and meet legal obligations.
Please do not include sensitive personal information in the estimate or general contact forms.
Sources of personal information
We receive information directly from you; from a co-owner or representative you authorise; from guests and booking channels used for your listing; from payment, fraud-prevention and communications providers; and from lawful public sources such as business or property records.
Purposes and legal bases
We use personal information to:
- respond to enquiries and prepare a tailored estimate or proposal at your request;
- create and optimise listings, coordinate booking channels, set pricing, communicate with guests and report performance;
- administer agreements, accounts, payouts, support and business records;
- operate, secure, troubleshoot and improve our website and services;
- prevent fraud, enforce agreements, protect rights and comply with legal obligations; and
- send service communications and, where permitted, marketing that you can opt out of at any time.
For people in the EEA or UK, we rely as appropriate on steps requested before entering a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the business, and consent where the law requires it. When we rely on legitimate interests, we consider the impact on your rights.
Estimates and automated processing
The website does not display an instant earnings figure or make a decision that produces legal or similarly significant effects. Questionnaire answers, market data and comparable bookings may support an estimate, but a person reviews the relevant information before the estimate is sent.
When we disclose personal information
We disclose information only where reasonably necessary to:
- cloud hosting, customer-management, communications, analytics, security, payment and professional advisers acting under appropriate terms;
- booking channels and related technology providers used to distribute and operate your listing;
- authorities, courts, advisers or affected parties when required by law or necessary to protect rights and safety; or
- a buyer, investor or successor in a genuine corporate transaction, subject to appropriate safeguards.
Nestra does not sell personal information. We do not currently share personal information for cross-context behavioural advertising or use it for targeted advertising.
International transfers
Our providers and booking channels may process information in countries other than your own. Where transfer restrictions apply, we use an available lawful mechanism, such as an adequacy decision or approved contractual clauses, and assess additional safeguards where required.
How long we keep information
We retain information only for the purpose collected and for legal, accounting, security and dispute requirements. Our standard periods are:
- unconverted enquiries and estimate requests: up to 24 months after the last meaningful interaction;
- customer, booking, payout and tax records: for the agreement and up to seven years afterwards where needed for legal or financial records;
- privacy requests, consent and suppression records: up to five years so we can demonstrate and respect your choice; and
- routine security logs: up to 12 months, unless a longer period is needed to investigate an incident or claim.
We may delete or anonymise information sooner where it is no longer needed.
Your EEA and UK rights
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability; object to processing based on legitimate interests or to direct marketing; and withdraw consent without affecting earlier lawful processing. You may complain to the supervisory authority where you live, work or believe an infringement occurred. We may need proportionate information to verify your identity and authority.
U.S. state privacy rights
Depending on your state and whether the relevant law applies, you may have rights to know or access, correct, delete and obtain a portable copy of personal information, and to opt out of sale, targeted advertising, certain sharing or qualifying profiling. We will not unlawfully discriminate against you for exercising a right. Some states permit an authorised agent and an appeal of a denied request.
Visit Your Privacy Choices. We process a recognised Global Privacy Control signal as an applicable opt-out request for that browser.
Security, children and updates
We use administrative, technical and organisational safeguards appropriate to the nature and risk of the information. No transmission or storage system can be guaranteed completely secure.
Our services are intended for adults and are not directed to children. We do not knowingly collect children's personal information through this website.
We may update this notice when our practices, services or legal obligations change. We will post the revised date and give additional notice where required.