Privacy Policy

Last updated: December 17, 2025

ND Holdings Limited t/a ND Estates ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit www.ndestates.com or use our services.

We are the data controller. Our registered office is First Floor, Tower House, Bellozanne Road, St Helier, Jersey. Contact us at dpo@ndestates.com or via the contact form.

Data We Collect

Contact details (name, email, phone, address) from enquiries/forms.
Property preferences and correspondence.
Financial/ID details for transactions/tenancies (e.g., proof of funds, source of wealth, ID verification).
Usage data (IP address, browser, device via cookies/trackers – see Cookie Policy).

How We Use Your Data

We process data to:

Provide real estate services (sales, lettings, viewings).
Respond to enquiries.
Comply with legal obligations (e.g., anti-money laundering).
Improve our website (anonymized analytics).
Send marketing (with consent, via Mailchimp).

Legal bases: Contract performance, legitimate interests (e.g., site improvement), legal obligations, consent (marketing).

Anonymization & Security

We anonymize analytics data (e.g., IP masking in Google Analytics – no full IPs stored). Data sent to third-parties (Google, Facebook) is anonymized where possible and transmitted encrypted (HTTPS/TLS). We use secure processors with adequate safeguards.

Sharing & Transfers

We share data with:

Service providers (lawyers, Mailchimp for emails – US-based with EU Standard Contractual Clauses).
Analytics/ad partners (Google, Facebook – anonymized data).
Authorities if required.

No selling of data. International transfers (e.g., US) use Standard Contractual Clauses or adequacy decisions.

Cookies & Tracking

See our Cookie Policy. Analytics/marketing data is anonymized/encrypted.

Your Rights (GDPR/UK GDPR)

You have rights to access, rectify, erase, restrict, object, portability. Withdraw consent anytime. Complain to ICO (UK) or equivalent.

Requests: Contact us at [insert your email].

Retention

Inquiry data: As needed for services/legal (up to 10 years for transactions). Marketing: Until unsubscribe.

Changes

We may update this policy – check regularly.