Privacy Policy

1. Who is responsible

Nest is operated from Malta under the trading name Nest ("Nest", "we", "us" or "our"). Nest is responsible as controller for the processing described here. Contact support@nest.com.mt for privacy questions and requests.

2. Information we collect

Depending on the features you use, we collect account and contact details; property addresses, characteristics, listing links and uploaded images; report inputs and outputs; selected agencies and contact preferences; support correspondence; request status; and records of your choices and agreements. Required fields are marked. Without required information, we may be unable to generate a report or arrange the contact you request. Optional photos and optional marketing choices are not required for unrelated core services.

We also process technical information necessary to operate and protect the service, such as IP addresses, request logs and device/browser information. With permission where required, analytics or advertising tools collect usage and campaign information described in our Cookie Policy.

We may collect property information from publicly accessible property listings, participating Agency Partners, property websites, information supplied by users and other lawfully accessible sources. This can include asking prices, property type, locality, dimensions, features, descriptions, images or image-derived attributes where lawful, and listing history and source references. We do not claim ownership of third-party listing content. Property information may be personal data if it identifies a person; contact us to correct information about you or exercise your rights.

3. Why we use information

• Create and manage accounts and generate requested reports — performance of the contract with you.
• Administer the agency introduction you request — performance of that requested service; disclosure of your contact and property details to the Agency Partners you select relies on your separate sharing consent.
• Respond to service enquiries — contract or steps you request before a contract; otherwise our legitimate interest in answering enquiries.
• Prevent fraud, control access and investigate technical incidents — our legitimate interests in a secure, reliable service, balanced against your rights.
• Use third-party listing information for comparisons — where it contains personal data, our legitimate interest in providing relevant comparisons, following a documented necessity and balancing assessment.
• Optional analytics — consent, including prior permission for non-essential device storage and access. Advertising technology on Nest is not currently active.
• Optional promotional messages — separate consent; you can unsubscribe at any time. Service messages are limited to the service you request.
• Keep legally required records — compliance with the relevant legal obligation.
• Handle disputes and establish or defend claims — our legitimate interests in resolving disputes and protecting legal rights.

4. Sharing with agencies

Generating an estimate does not, by itself, send your details to agencies. When you request an introduction, we show the named Agency Partners and ask separately for permission to share your request with the ones you select. This may include property locality, type, size, features, valuation-request information, relevant analysis and property photos you uploaded. If a selected Agency Partner accepts the request, we may also share the contact details you supplied (name, telephone number, email where supplied, preferred contact time and your message) so they can respond. Only the Agency Partners you select receive information through this flow, subject to applicable review and release steps.

Agency Partners may pay for introductions or completed business. The sharing you authorise supports their response to your request; it does not authorise unrelated marketing or onward sale of your information.

Once an Agency Partner receives your request, it generally acts as a separate controller for its own contact and professional services. Consult its privacy information where available. You can withdraw Nest's sharing consent by contacting support@nest.com.mt. Withdrawal stops future consent-based sharing and does not make earlier lawful processing unlawful. Ask a recipient Agency Partner about its own processing and retention; we will help identify recipients of your request.

5. Other recipients and overseas processing

Authorised staff and service providers may process data to run Nest. These include database, authentication, hosting and security infrastructure for accounts and stored information, Stripe for payment checkout and billing when you subscribe, Google when you choose Google sign-in, and service-communication delivery providers where needed. AI and automation infrastructure assists with listing extraction and property-report content. Consent-based analytics uses our measurement infrastructure when enabled. We may also disclose information to professional advisers or authorities where necessary and lawful. External providers process data under their applicable privacy terms.

We may advertise Nest through Google Ads and Meta platforms, including Facebook and Instagram. Placing an advert on those platforms is separate from running advertising tracking on Nest: at present we operate no advertising cookie, pixel or tag on this site, and we share no personal data with an advertising platform. Where we use optional advertising cookies or pixels on Nest, we will identify the active providers and purposes in our Cookie Policy and request your permission before activating them. This notice about possible future channels is not itself permission, and no existing cookie choice carries over to a new provider or purpose.

Service providers may process or access information outside Malta or the EEA. Where an international transfer requires safeguards, we rely on the mechanism applicable to that transfer, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards relevant to your information, subject to lawful redactions. An EU hosting region does not necessarily prevent overseas support access.

6. Retention

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, including providing the service, maintaining appropriate business and transaction records, preventing fraud, resolving disputes and complying with legal obligations. Accounts and reports, introduction requests and photos, security logs, consent records and billing records can require different retention periods.

Where legal obligations, disputes, establishing, exercising or defending legal claims, or fraud and security needs require longer retention, we retain only relevant information and restrict its use. We then delete or irreversibly anonymise it where appropriate. Merely removing your name does not necessarily anonymise property data. Each recipient agency has its own disclosed retention rules.

7. Automated estimates

Our tools compare supplied property characteristics with available listing data and apply valuation rules to produce indicative results and confidence labels. Automated and AI-assisted systems also help extract and structure listing information, analyse property inputs and produce explanatory report narratives. Where enabled, uploaded photos may inform the property analysis. Inputs, source coverage and assumptions affect the indicative result; these reports are not certified valuations.

The service provides information for your consideration; it does not decide whether you receive credit, insurance or a property, and Nest does not use a property score to make legal or similarly significant automated decisions about people. You can ask us to correct inaccurate inputs or explain an apparent error by contacting support@nest.com.mt.

8. Your choices and rights

Depending on the circumstances, you can request access, correction, erasure, restriction and portability of your personal data. You can object to processing based on legitimate interests and object at any time to direct marketing. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. Some rights are subject to legal exceptions.

Send requests to support@nest.com.mt. We may ask for proportionate identity verification. We normally respond within one month; if a lawful extension is needed, we will explain it within that period. You may complain to Malta's Information and Data Protection Commissioner at https://idpc.org.mt/, or another competent supervisory authority, without first contacting us.

9. Security, children and updates

We apply technical and organisational safeguards appropriate to the risks, including access restrictions and security controls. No online system can be guaranteed completely secure. Report suspected misuse to support@nest.com.mt.

The service is intended for adults. Do not submit children's personal information or photographs identifying children. If such information is submitted, contact us so that we can assess and remove it where appropriate.

We update this notice when our processing changes and provide additional notice or obtain new consent where required. The date and version appear above.