Legal
Privacy Policy
Version 1.0 · Last updated 2026-04-30
The short version.
We do not sell your data. We do not syndicate your leads. We do not pass
your contact details to bond originators or anyone else without your
explicit consent. You can request deletion at any time by emailing
hello@nestquestsa.com.
Beta notice.
This is a v1.0 working policy that reflects our actual data practices.
It will be reviewed by a South African attorney before our commercial
launch. Last reviewed: not yet.
1. Who we are
NestQuestSA (the "Service", "we", "us") is a South African property
portal operated from Pretoria, South Africa. For purposes of the
Protection of Personal Information Act, 2013 ("POPIA"), the responsible
party is NestQuestSA. Our information officer can be reached at
hello@nestquestsa.com.
2. What we collect
We collect only what's necessary to operate the Service:
- Account information you provide (email, username, optional profile photo).
- Property-related preferences you save (search filters, alerts).
- Messages you send to listing agents through the Service.
- "Notify me" email submissions on Coming Soon pages, scoped to the topic.
- Server logs (IP address, user agent, request path) for security and abuse prevention.
3. What we do with it
- Show you matching listings and alert you when new matches appear.
- Connect you with the listing agent (and only that agent) when you make an enquiry.
- Notify you when a feature you opted into goes live.
- Detect and prevent fraud, abuse and bot activity.
- Comply with our legal obligations.
4. What we do not do
- We do not sell your personal information to anyone.
- We do not syndicate your enquiries to multiple bond originators or agents.
- We do not share your contact details with third parties for marketing without your explicit, separate, opt-in consent.
- We do not use dark patterns to harvest data you didn't intend to give us.
5. Cookies
We use the minimum cookies necessary to keep you logged in, remember your
search filters, and protect against cross-site request forgery. We do
not use third-party advertising cookies. We use minimal first-party
analytics (page views, errors). You can clear cookies in your browser
at any time.
6. Sharing with third parties
The only third parties that ever touch your data are infrastructure
providers strictly necessary to run the Service:
- Hosting (servers and database) — located in South Africa where possible.
- Email delivery — for transactional and notification email.
- Maps (Google Maps) — only when you actively view the map.
None of these providers are given your data for any purpose other than
delivering the service we contracted them for.
7. Your POPIA rights
You have the right to:
- Know what personal information we hold about you.
- Request a copy of that information.
- Correct any information you believe is wrong.
- Request that we delete your information ("right to be forgotten").
- Object to the processing of your information.
- Lodge a complaint with the Information Regulator
(inforegulator.org.za).
To exercise any of these rights, email
hello@nestquestsa.com from
the address on your account. We aim to respond within 7 business days.
8. Retention
We keep account data for as long as your account is active, plus 12
months after you delete it for fraud-prevention purposes. Coming Soon
email captures are kept until 30 days after the relevant feature
launches and we've notified you, then deleted.
9. Changes to this policy
If we materially change how we handle your data, we will email you and
update the version number and date at the top of this page before the
change takes effect.
Questions? Contact us
or email hello@nestquestsa.com.