Privacy Policy

1. Introduction

NotForSale.ie ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using NotForSale.ie, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, and password
• Property Information: Property addresses, descriptions, photos, and pricing details when you list a property
• Transaction Data: Payment information for listing fees (processed securely through Stripe)
• Communications: Messages sent through our platform and email correspondence

2.2 Automatically Collected Information

• Usage Data: Pages viewed, time spent on pages, and navigation patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Cookies: See our Cookie Policy for detailed information

3. How We Use Your Information

We use your information for the following purposes:

• To create and manage your account
• To process property listings and facilitate offers
• To process payments for listing fees
• To send transaction-related emails (offer notifications, payment confirmations)
• To connect buyers with sellers and facilitate property viewings
• To connect sellers with estate agents
• To improve our platform and user experience
• To prevent fraud and ensure platform security
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contractual Necessity: To provide our services and fulfill our agreement with you
• Legitimate Interests: To improve our platform, prevent fraud, and ensure security
• Legal Obligation: To comply with Irish and EU laws
• Consent: For marketing communications (you can withdraw consent at any time)

5. How We Share Your Information

We may share your information with:

• Other Users: Property details are visible to registered buyers. Full addresses are only shown to verified users.
• Estate Agents: When you accept an offer and select an agent, we share relevant property and contact information
• Service Providers:
  • Stripe (payment processing)
  • Uploadthing (image hosting)
  • Resend (transactional emails)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Your Rights Under GDPR

As an EU/Irish resident, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: For processing based on consent

To exercise these rights, visit your profile page or contact us at [email protected]

7. Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 30 days; some data retained for legal/accounting purposes (up to 7 years)
• Transaction Records: Retained for 7 years for tax and legal compliance

8. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/SSL)
• Secure password hashing with bcrypt
• Payment processing handled by PCI-DSS compliant Stripe
• Regular security audits and updates
• Access controls and authentication

9. International Data Transfers

Your data is primarily stored in EU data centers. When we use service providers based outside the EU (such as Stripe), we ensure appropriate safeguards are in place through Standard Contractual Clauses or other approved mechanisms.

10. Children's Privacy

Our platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Your continued use of NotForSale.ie after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at www.dataprotection.ie