Privacy & Cookie Policy


WHO WE ARE
When this Privacy Policy mentions “New Square Property” “we,” “us,” “our,” or “Data Controller” it refers to New Square Property.

This Privacy Policy sets out how we collect, process and protect any information (including personal data) that you give when you use this website, or communicate with us in any way.

This Privacy Policy applies to all users of our website and service, including property Owners or agents who advertise with us (“Owners”), website visitors who have registered for an account (“Web users”) and website visitors who have not registered for an account (“Visitors”).

Use of this website is in accordance with our Terms of Use. By using our site you indicate that you agree to our Terms of Use and this Privacy Policy.

You must be over 18 years old to use our site and to make booking enquiries with Owners. By using our site you confirm that you are over 18 years of age.

If you have any questions about your personal data and this Privacy Policy you can contact us for more information any time by emailing info@newsquareproperty.com.


OUR PRIVACY PROMISE
We promise to keep your personal data safe and private, not to sell your personal data, and to give you a simple way to view and manage your marketing and communication choices at any time.


THIS POLICY AND THE GDPR
GDPR stands for the General Data Protection Regulation, a European privacy law approved by the European Commission in 2016. The GDPR will replace a prior European Union privacy directive known as Directive 95/46/EC (the “Directive”), which has been the basis of European data protection law since 1995.

The GDPR is an attempt to strengthen, harmonize, and modernize EU data protection law and enhance individual rights and freedoms, consistent with the European understanding of privacy as a fundamental human right. The GDPR regulates, among other things, how individuals and organizations may obtain, use, store, and eliminate personal data. It applies to any organisation processing personal data of EU citizens.

Personal data will now include not only data that is commonly considered to be personal in nature (e.g. names, physical addresses, email addresses), but also data such as IP addresses, behavioral data, location data, financial information, and more.

The GDPR was adopted in April 2016, but has been officially enforceable on 25th May 2018.

This Privacy Policy has been designed to comply with these new regulations. It will inform you about what kind of information we may collect, how we collect it, why we collect it, the legal basis for collecting it and your rights under the GDPR.


CHANGES TO THIS POLICY
We may change this Privacy Policy from time to time by updating this page. Any changes will be effective immediately upon notice which we may give by any means, including updating this page. You should revisit this page regularly to stay informed of the most up to date Privacy Policy.

This Privacy Policy was last updated 27th September 2021.


INFORMATION WE COLLECT
There are three categories of information we collect:

1. Information you give to us
a) Information necessary for use of the site.
We ask for this information when you use the site as it is required for the proper performance of our contract with you.
i) Account information - When you register with us such as first name, last name and email address.
ii) Communications - If you contact us we collect information about the communication and any other information you choose to provide in that communication.

2. Information you choose to give us.
You can choose to give us additional information that is not essential for use of the site but will enhance your experience and help us provide a better service to you. This information is processed based on your consent.
i) Additional account information - such as a Twitter username, Facebook page or username, Instagram username.
ii) Review information - If you submit a review on the site we will collect this information and any personal data you may include in the review and this will be publicly available on the site (once published). We will also publish your name on the review but we give you the option of entering a public profile name that can be different to your full legal name.
iv) Other information - If you fill out any form on the site or third party sites we may direct you to such as Typeform, you are choosing to give us this information.

3. Information we automatically collect from your use of the website
When you use the website we automatically collect information, including personal data. This information is necessary for the performance of the contract between you and us, as well a given our legitimate interest to improve the functionality of the site and provide you with a good service.
i) Site Usage Information - We collect information about pages you visit, your searches, enquiries you make, things you save to your wishlists, and other actions.
ii) Geolocation information - We collect information that includes your IP address and this can be used to determine your approximate location.
iii) Log data and device information - We collect log data and device information for when you use the site, even if you are not logged in or registered for an account with us. This information is vital to us for to prevent fraudulent or malicious use of the site.
iv) Cookies - We use cookies and similar tracking technologies on the site and in our emails, such as pixels and web beacons, to analyse trends and movements around the site, serve targeted advertisements, gather demographic information about our user base as a whole, and to tell us when emails we send have been delivered or viewed and links in them clicked. We also partner with third parties to display advertising on our website or to manage and serve our advertising on other sites. You can control the use of cookies on your browser, including disabling use of cookies, but please note that since uniform standards for “Do Not Track” or “DNT” signals have not been adopted, our website do not currently process or respond to “DNT” signals. Our third party partners may use cookies or similar tracking technologies in order to provide you advertising or other content based upon your browsing activities and interests. If you wish to opt out of interest-based advertising click http://www.youronlinechoices.eu/.

4. Information we collect from third parties
We may collect personal data that other site users may submit to us when they use the website and communicate with us, or we may obtain information from other third parties as detailed below. We have no control how these third parties may themselves control or process this information and any information request relating to the data they might provide to us must be directed to that third party.
i) Third party services - if you login or connect to us using Facebook, they may send us information such as your registration and profile information. This information is controlled by Facebook and you authorise its processing by us when you connect using their service and via the privacy settings in your Facebook account.


HOW WE USE THIS INFORMATION
We may use and disclose personal data only for the following purposes:

1. To communicate with Web users and provide customer support.
2. To send you information and promotional material to you by email. You will only receive this information if you have positively opted in and you can stop receiving this content at any time.
3. To send you alerts and notifications by email based on transactions you make on the site - such as making an enquiry or leaving a review. These are essential for the performance of our contract and you cannot opt out of receiving these messages, but you will only receive them if you make such transactions.
4. To provide, support and improve the website and service to you. This may include sharing your personal data with third party service providers to provide and support our service and make certain features available to you. We ensure your data is protected by ensuring all third parties we may use have entered into a contract to only use your data as is necessary and in a manner that is consistent with this Privacy Policy.
5. To provide suggestions to you. We use data to suggest properties or other content that we think will be of interest to you.
6. To enforce compliance with our Terms of Use and applicable law. This includes storing server log data that help us prevent site misuse and violation.
7. To protect the rights and safety of our customers, site visitors and third parties.
8. To meet legal requirements, comply with the law, court orders, respond to legal requests or an official investigation.
9. To provide information to our advisors or agents, such as lawyers and accountants.
10. We may share your data with a third party if we choose to sell, transfer or merge part or all of our business - or we we seek to acquire another business or merge with them. We will only share your data with a third party in this case if they agree to keep your data safe and private and have the appropriate safeguards in place. In any such event we will notify you of the change either by sending you an email or posting a notice on our Website.


THIRD PARTY LINKS
New Square Property includes links to third party websites including property Owner websites, affiliate partner websites, social media sites (such as Facebook or Instagram) and other websites. We do not control these sites and when you visit them you may be providing personal data to the third party. The third party’s use of your information will be governed by their own Privacy Policy which we recommended you review. We do not accept any responsibility or liability for their policies whatsoever.


RECIPIENTS OF THE YOUR DATA (WHO WE MAY SHARE IT WITH)
1. Other Site Users:
Leaving a review - we will publish your “public name” which is your name as provided to us on registration or a pseudonym if you choose to change it (your “public name”). We will also publish the star rating and any other information you choose to provide. By leaving a review you acknowledge and agree that this information is provided and may be published with you consent.


2. Our Employees and Contractors:
You data will be shared with our employees, contractors and agents who all enable us to provide the service. We need to share this information in order to ensure the adequate performance of our contract with you. Such recipients will have entered into a contract to keep your data safe and private and in a manner that is consistent with this Privacy Policy.

3. Service Providers:
Third Party Processors - We use a variety of third party data processors to help us provide and support our services. We need to share information with them in order to ensure the adequate performance of our contract with you. These would be classed as “data processors” under GDPR. Examples include payment processors, hosting providers, email delivery systems, site usage analysis services, helpdesk systems and content delivery services. All third party processors we use enter into a contract that requires them to use your personal data only for the provision of services to us and in a manner that is consistent with this Privacy Policy.

4. Other Third Parties:
We may share your data with a third party if we choose to sell, transfer or merge part or all of our business - or we we seek to acquire another business or merge with them. We will only share your data with a third party in this case if they agree to keep your data safe and private and have the appropriate safeguards in place.


TRANSFERS TO THIRD PARTY PROCESSORS AND OUTSIDE THE EU
We use a number of Third Party Processors (TPPs) to enable us to provide and support the website and service to Web users and Visitors. Some of these TPPs are based outside the European Economic Area (EEA) and data is processed on servers located outside the EEA. These TPPs have limited access to your information and perform process on our behalf. We only use TPPs who we are confident have the appropriate safeguards in place and they are contractually bound to protect and use it only for the purposes for which it was transferred, consistent with this Privacy Policy.

Examples of TPPs we use include (but are not limited to):
Hosting - Squarespace
Email - Mailchimp
SaaS - Zapier, Typeform, Hotjar

Safeguards - EU-US Privacy Shield
The EU-US Privacy Shield is a framework that protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. Our TPPs are certified and comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework. They comply with the Privacy Shield Principles for all transfers of personal data from the EU and Switzerland. Where appropriate we have signed Data Processing Addendums with TPPs to be confident that any data from the EEA that is being transfered outside of the the EEA will be subjected to the same high levels of security, privacy control, and data protection that it would receive in the EU.


YOUR RIGHTS
The GDPR provides the following rights for individuals:

1. Right to be informed
You have the right to be informed about the collection and use of personal data. This Privacy Policy should contain all the information you need for you to exercise this right.

2. Right of access
You have the right to access your personal data and supplementary information. You can access and update some of your personal data through your account settings.

3. Right to rectification
You have the right to ask us to have inaccurate personal data rectified, or completed if it is incomplete, where you cannot do this yourself in your account settings.

4. Right to erasure
You have a right to have your personal data erased. This is also known as the “right to be forgotten”. You can ask us to delete your data by emailing us at info@newsquareproperty.com. We will respond to a request for erasure within one month. We may ask you to verify your identity.

5. Right to restrict processing
In certain circumstances, you have a right to restrict the way we may process your personal data, as an alternative to erasing it, if you have a particular reason for wanting it restricted

6. Right to data portability
Your right to data portability entitles you to obtain personal data you have provided to us - in a commonly used, structured format - and request that we send it to another another service provider (if technically feasible).

7. Right to object or withdraw consent
You have the right to object to our processing of your personal data where the use is based on our legitimate interests (including profiling), or where it is used for direct marketing. You may at any time ask us to stop processing of your information for direct marketing purposes, by emailing us at info@newsquareproperty.com or by changing the email preference settings in your account.


HOW LONG WE MAY KEEP YOUR DATA
We generally retain your information for as long as your account is active or as long as necessary to provide you with our service. We may also retain and use your information in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our Agreements.


SECURITY
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.