Privacy Policy
Exidia Ltd, trading as Nestful Services, is the data controller for personal data collected through this website and our services (ICO registration no. [ ]). Contact: Exidia.ltd@gmail.com, 61 Bridge Street, Kington, HR5 3DJ.
What we collect
- Contact details: name, email, phone, address.
- Investor profile: budget, strategy, timeline, mortgage status, proof of funds.
- Identity and anti-money-laundering documents: photo ID, proof of address, source of funds.
- Website data: technical information such as IP address and browser (see our Cookie Policy).
- Communications: emails, WhatsApp messages and call notes.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Answering enquiries and applications | Steps before entering a contract |
| Providing sourcing, refurbishment and lettings services | Contract |
| Identity, anti-money-laundering and fraud checks | Legal obligation |
| Sending deal alerts and newsletters | Consent (unsubscribe at any time) |
| Improving our website and services | Legitimate interests |
Who we share it with
Solicitors, brokers, surveyors, contractors and lettings staff involved in your deal; identity-check providers; our IT, CRM and email providers; HMRC, the police or regulators where the law requires. We never sell your data.
International transfers
Some providers may store data outside the UK. Where they do, we rely on UK adequacy regulations or approved contract clauses to protect it.
How long we keep it
- Anti-money-laundering records: 5 years after our business relationship ends, as the law requires.
- Client files: 6 years after the last service, in case of legal claims.
- Enquiries that do not become clients: 2 years.
- Marketing list: until you unsubscribe.
Your rights
You can ask to access, correct, delete or restrict your data, object to its use, or move it to another provider. Email Exidia.ltd@gmail.com. We reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Security
Access is limited to staff who need it, and we use secure, password-protected systems.