NestReplyNestReplyNestReply (trading name of Chicnuit Ltd, UK company 15646867, 71-75 Shelton Street, London WC2H 9JQ) respects your privacy.
What we collect: your name, email, business name, Google Business Profile data (reviews and review responses) you connect via Google OAuth, and billing data handled by Stripe (we never store card numbers). For business prospects, we may collect professional contact details and information about their business from public sources, such as company websites and public business listings.
How we use it: to provide and improve the review-response service, manage your account, bill you, provide support, and communicate with customers and business prospects. We never sell your data.
Lawful basis for processing: we process customer account and service data because it is necessary to perform our contract with you or to take steps at your request before entering into a contract. We process business prospect data for our legitimate interests in promoting our B2B service, provided those interests are not overridden by your rights and interests. We send marketing emails that require consent only where you have given consent; you may withdraw it at any time by using the unsubscribe option or contacting us.
Google data: NestReply's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Controller and processors: Chicnuit Ltd is the data controller and decides why and how personal data is processed. We use carefully selected service providers as processors or sub-processors acting on our instructions, including our hosting provider, Stripe for payment processing, and Google APIs for connected Google Business Profile functionality. They process only the data needed to provide their services and are subject to appropriate contractual and security obligations.
Data retention: customer account and service data is retained while the account is active and deleted or anonymised within 30 days after account closure, unless a longer period is required by law. Billing, transaction, and other records needed for tax, accounting, fraud prevention, or legal claims may be retained for up to 6 years. Business prospect data is retained until you object or for no more than 24 months after our last meaningful interaction, whichever occurs first. Marketing consent records may be retained as necessary to demonstrate compliance and honour opt-outs.
Your rights: under UK data protection law, you may have the right to access your personal data, correct inaccurate data, request erasure, restrict processing, receive portable data, and object to processing, including direct marketing and processing based on legitimate interests. These rights may be subject to legal limitations. To exercise a right, email hello@nestreply.com. We may need to verify your identity and will normally respond within one month.
Right to complain: if you are unhappy with how we use your personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Contact: hello@nestreply.com