Privacy Policy

1. Personal data we collect

Identity & contact data: full name, email, international telephone number, country of residence, and preferred language. Enquiry data: property or service interest, message content, intent and preferences. Professional data: company details, VAT/tax/licence identifiers, verification documents. Technical data: IP address, device and browser information, and a browser identifier. Usage & attribution data: pages viewed, referring page, campaign and UTM parameters. Transaction data (Professionals): plan, billing status and invoices (card details are handled by our payment provider, not stored by us).

2. Sources

We collect data directly from you (for example when you submit an Enquiry or create an account), automatically through your use of the Platform, and from Professionals or partners where you interact with them through the Platform.

3. Purposes & legal bases

We process personal data to: (a) facilitate and route your Enquiries to the relevant Professional and store them in our systems — legal basis: performance of a contract / steps at your request and our legitimate interests in operating the marketplace; (b) provide, secure and improve the Platform — legitimate interests; (c) comply with legal, tax, anti-fraud and regulatory obligations — legal obligation; (d) send marketing communications where you have opted in — consent; and (e) establish, exercise or defend legal claims — legitimate interests.

Operational processing of your Enquiry is independent of marketing consent. Marketing consent is never pre-selected and can be withdrawn at any time.

4. Disclosure of personal data

We share Enquiry data with the recipient Professional so they can respond to you. We also disclose data to service providers acting on our behalf (hosting, email delivery, payment processing, analytics), to authorities where required by law, and to advisers or acquirers in the context of a corporate transaction, in each case subject to appropriate safeguards. We do not sell your personal data.

5. International transfers

Your data may be processed in countries other than your own. Where we transfer personal data across borders, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful transfer mechanisms recognised under applicable law.

6. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, to comply with legal, accounting or reporting obligations, and to resolve disputes. Enquiry and CRM records are retained for the period necessary to support the relationship and applicable limitation periods, after which they are deleted or anonymised.

7. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, including access controls, tenant isolation between organisations, encryption in transit, and restricted handling of verification documents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Where processing is based on consent, withdrawal does not affect prior lawful processing. To exercise your rights, contact us using the details below; we will respond within the timeframe required by applicable law and may need to verify your identity.

9. Regional supplements

EEA/UK (GDPR): you have the right to lodge a complaint with your supervisory authority (for example, your national Data Protection Authority or the UK ICO). Our lawful bases are set out above.

UAE (PDPL): you have rights of access, correction, deletion, restriction, portability and objection, and the right to withdraw consent, subject to the PDPL and the oversight of the UAE Data Office.

USA — California (CCPA/CPRA): you have the right to know, delete, correct and opt out of the “sale” or “sharing” of personal information and to limit use of sensitive personal information. We do not sell personal information. You may exercise these rights without discriminatory treatment.

Asia-Pacific (e.g., Singapore PDPA, PRC PIPL): you have rights of access and correction, and processing is based on consent or other lawful grounds; cross-border transfers are subject to applicable safeguards and, where required, separate consent.

10. Automated processing & AI

We use AI-assisted tools to help Professionals draft content, summarise Enquiries and prioritise follow-up. These tools produce editable drafts that require human review; they do not make legally or similarly significant decisions about you automatically, do not use sensitive personal attributes for scoring, and do not autonomously approve or reject professional verification.

11. Children

The Platform is not directed to children and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

12. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Severability & local-law adaptation

Each provision of this document is severable. If any clause, or part of a clause, is held to be invalid, unlawful or unenforceable under the mandatory law of any jurisdiction, that clause (or the affected part) shall be deemed modified to the minimum extent necessary to be valid and enforceable, and all remaining provisions shall continue in full force and effect.

Where a mandatory statutory right, disclosure or protection applicable to you in your country or region is not expressly reflected in this document, that right shall nonetheless apply to the extent required by law, and the remainder of this document shall remain valid and effective.

Where you believe that a specific term, condition, data-handling practice or consumer protection required by your local or regional law is not yet addressed here, please contact us at hello@luxnova.estate with an enquiry. We will review your request and, where appropriate, incorporate the required provision on a jurisdiction-specific basis while all other provisions continue to apply.

14. Contact

For privacy enquiries or to exercise your rights, contact our privacy team at hello@luxnova.estate. We may update this Policy from time to time; the current version is always published on the Platform.