Your information
This notice says what this website keeps about you, why, on what lawful basis, for how long, who handles it for us, and what you can ask of us. It is written from the code that does the keeping, so it lists everything that code stores — and nothing it does not.
In force from 13 November 2026. If it changes, the new date goes here and the change is described at the foot of the page.
Who holds it
- Controller
- ILAN NEST LIMITED
- Company number
- 17430752, registered in England and Wales
- Registered office
- 41 Pentland Terrace BOLTON, BL1 3TA United Kingdom
- Questions and requests
- homes@ilannest.space, with “Your information” in the subject, or by post to the registered office
The company has not appointed a data protection officer; it is not required to, and the address above reaches the person who answers for this notice. The notice covers this website only. If a sale or a tenancy goes ahead, the papers for it say what is kept for it. The Ilan Nest app has its own privacy policy.
What is kept
The site stores things in one place: a key–value store on Cloudflare, the company that runs it. There are three kinds of entry in it, and the site writes nothing else.
| Kind | What is in it | Kept until |
|---|---|---|
A house put forwardstored as house:IL-… |
The street and postcode; the ward the postcode is in, as the public postcode list gives it; the kind of house, its bedrooms and cellar; the state you gave for the roof, walls, damp, windows, heating and wiring; when you need to move, who lives there, whose house it is; anything else you wrote, and notes added later with their dates; your name, email, telephone if you gave one, and how to reach you first; when it arrived and changed, and each stage it has reached; whether a copy was mailed. | Twelve months after the last change, or the moment you withdraw it |
A name on the list for a homestored as list:HL-… |
The bedrooms the household needs, how many people, the wards, when you would move, a pet, your note; your name and email; when you joined, changed it or said you were still looking, and the stage it has reached; whether a copy was mailed. | Twelve months after you joined, last changed it or said you were still looking, or the moment you leave the list |
The form keystored as secret:form-key |
A random key the site uses to sign the moment a form was opened. It holds nothing about anyone. | Until it is replaced |
Beside each house and each name, the store keeps a scrambled copy of the email address (a SHA-256 digest). It lets the site check that the email you give matches without reading your address back out. Your network address is never stored: to slow down automated sending, a scrambled form of it is handed to Cloudflare’s rate limiter, which counts sends for one minute and forgets.
Two tools never send anything at all. Will this wall get wet? and the party wall dates work their answers out in your browser; what you type into them stays there.
Why, and on what basis
| Use | Lawful basis |
|---|---|
| Reading a house you put forward, arranging a visit, writing our answer | Steps you ask us to take before a possible contract to sell it to us — Article 6(1)(b) |
| Keeping your name on the list and writing to you when a home fits | Steps you ask us to take before a possible tenancy — Article 6(1)(b) |
| Looking up the ward from the postcode | Part of the same steps — Article 6(1)(b) |
| The rate limiter, the signed time on each form, and the short technical logs | Our legitimate interest in keeping the site working and refusing automated junk — Article 6(1)(f). What it uses is the least that does the job: a scrambled address for a minute. |
| A copy of what you sent, mailed to the company’s inbox | The same purpose as the form it came from — Article 6(1)(b) |
The ticks at the end of each form are not the lawful basis. They are there so that nobody sends a form without having read how long it is kept and how to delete it.
Nothing here is used for marketing, sold, or matched against anything else about you. No decision about you is made by a machine. The only automatic step is the ward check, which will not send a postcode that is outside Bolton or not in the public list; you can still write to us instead.
Please leave out of your notes anything about health, religion, ethnicity or other special kinds of information. Nothing on this site needs it, and the forms never ask for it.
How long
By itself, after twelve months
Every entry is written with an expiry. Each change, and each “still looking”, sets it twelve months ahead again; when it passes, the store deletes the entry on its own.
At once, when you say
Withdrawing a house, or leaving the list, deletes the entry there and then, with the reference and the email you used. Writing to homes@ilannest.space from that email does the same.
The copy in the inbox
A copy of each house and each name is mailed to the company’s inbox when it arrives. We delete that copy when the entry is withdrawn, left or expires, unless a sale or a tenancy has gone ahead from it.
Letters to us
A letter to homes@ilannest.space or to the registered office is kept while the matter it is about is open, and for a year after it closes, so that a later question or complaint can be answered from it. Then it is deleted.
If a sale or tenancy goes ahead
What it needs moves into the papers for that sale or tenancy and is kept for six years after it ends, the time in which a claim about a contract can be brought under the Limitation Act 1980.
Who handles it for us
- Cloudflare, Inc.
- Runs this website, holds the store, runs the rate limiter, and carries the mail copies and the letters sent to homes@ilannest.space. It acts only on our instructions, under its data processing terms. Cloudflare keeps short technical logs of the requests the site answers for a few days, and asks your browser to report failed connections to it (network error logging).
- The company’s inbox, where the mail copies arrive, is hosted by Google. It acts only on our instructions, under its data processing terms.
- postcodes.io
- A public postcode service. The postcode you type, and nothing else, is sent to it to find the ward. It is not told who is asking.
- Nobody else
- We do not give or sell what you send to anyone. If a sale goes ahead, the solicitors acting for each side see what they need for it, which you will know about because you will have instructed one of them.
Cloudflare and Google may handle data outside the United Kingdom. Both do so under the safeguards UK law requires for such transfers: the UK Extension to the EU–US Data Privacy Framework, or contract terms approved for the purpose.
Your rights
| Right | The quickest way |
|---|---|
| To see what is kept | Check it with the reference and email: the page shows everything stored, exactly as stored. Or write and we send you a copy. |
| To have it corrected | The change form on the same page, or write to us. |
| To have it deleted | Withdraw the house, or leave the list. Or write to us. |
| To restrict or object | Write to us; we stop using it for anything but keeping it while we look at your request. |
| To take it elsewhere | Write to us; we send what you gave us in a common file format. |
| Not to be decided about by a machine | Nothing here does that; the ward check above is the only automatic step. |
We answer a written request within one calendar month, as the law requires, and there is nothing to pay for it. To make sure we give your information only to you, we ask for the reference and the email you used, or for the request to come from that email.
Cookies
No page and no form on this site sets a cookie, and nothing is stored in your browser’s own storage. That is why there is no cookie banner: there is nothing to agree to. The typefaces come from this site itself, not from a font service, and there are no counters, adverts or embedded maps from anyone else.
The regulator
If you are unhappy with how we have handled your information, tell us first and we will try to put it right: If something goes wrong says how. You can also complain to the Information Commissioner’s Office at any time, whether or not you have come to us.
- Helpline
- 0303 123 1113
- Post
- Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Changes: 13 November 2026 — first version as a full notice, written when the list for homes to rent opened. Before that, a shorter statement on the company page covered the one form the site then had.