Privacy Policy

NestDeck ("we") is responsible for the personal data processed through nestdeck.com. This policy explains which data we process, why, for how long, and what your rights are. We follow applicable data protection law, including the GDPR for visitors from the European Union.

What we collect

• Account: name, email address, phone number, password (stored encrypted), language preference and, if you turn it on, two-factor authentication data.
• Bookings: dates, number of guests, your message to the owner, amounts and the booking status.
• Payments: amount, payment method and transaction reference. Card details are processed directly by Stripe; we never see or store your card number.
• Messages and chat: messages between you and the host, and conversations in the website chat, including the name and email you give there.
• Reviews: your rating, text, display name and location.
• Forms: data from the contact form, corporate inquiries, property submissions and the newsletter.
• Technical: IP address and browser data to keep the platform secure. Your cookie choice is stored with a hashed (non-reversible) IP address as proof of consent.

Why, and on what legal basis

• Performing a contract: your account, bookings, payments, refunds and contact with the host.
• Legitimate interest: security, fraud prevention, answering questions and improving our service.
• Consent: the newsletter (double opt-in) and analytics and marketing cookies. You can withdraw consent at any time.
• Legal obligation: keeping financial records.

Who we share data with

We never sell your data. We only share it when needed:

• with the owner (host) of the property you book: your name, contact details, dates and your message;
• with Stripe for card payments and refunds;
• with our email and hosting providers, who process data only on our instructions;
• with Google Analytics and Meta, but only if you allow those cookies.

Some of these providers are located outside your country or outside the EU. We choose providers that offer appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep data

• Account data: as long as your account exists. You can delete your account yourself under Profile.
• Bookings, payments and invoices: 7 years, because of legal record-keeping duties.
• Chat conversations and messages: 2 years after the last message.
• Leads and form submissions: 2 years after the last contact.
• Proof of cookie consent: 3 years.
• Newsletter: until you unsubscribe.

Cookies

Which cookies we use and how to change your choice is explained in our cookie policy.

Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing. Send your request to hello@nestdeck.co; we reply within 30 days. If you disagree with how we handle your data, you can complain to the data protection authority in your country.

Security

Passwords are stored encrypted, connections use HTTPS, administrators use two-factor authentication and we make daily backups.

Contact

Questions about this policy? Email us at hello@nestdeck.co.