1. Who We Are
This platform is a real estate marketplace connecting property buyers and agents in Malta. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Maltese data protection law.
2. What Data We Collect
- Account data: name, email address, and role (buyer or agent).
- Profile data: phone number, agency name, bio, and profile photo (if provided).
- Property data: listings, images, and related details submitted by agents.
- Lead data: buyer contact details and preferences entered by agents into their private CRM.
- Transaction data: subscription payments processed securely via Stripe.
- Usage data: pages visited, search queries, property views, and favourites.
- Communication data: messages exchanged between buyers and agents on the platform.
- Appointment data: viewing requests, dates, and status.
3. How We Use Your Data
- To provide and operate the platform's core features.
- To connect buyers with agents and facilitate property viewings.
- To send notifications about matching properties, appointment updates, and task reminders.
- To process subscription payments securely.
- To improve the platform through aggregated usage analytics.
- To comply with legal obligations.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contractual necessity: to provide the services you signed up for.
- Legitimate interests: to improve our platform and prevent fraud.
- Legal obligation: where required by applicable law.
- Consent: for optional communications and notifications.
5. Agent Lead Data — Your Data, Your Property
🔒 Your leads belong to you — always.
Any buyer lead data you enter into the platform — including names, contact numbers, email addresses, budgets, and preferences — is your exclusive property. We will never access, sell, share, monetise, or transfer your lead data to any third party, including other agents on the platform.
- Lead records are private by default and visible only to you. No other agent or platform administrator can view the individuals in your pipeline.
- We do not use your lead data for advertising, profiling, or any commercial purpose.
- If you choose to close your account, you can request a full export of your lead data before deletion.
- Lead data is processed solely to power the CRM tools you use within your own dashboard.
6. Data Sharing
We do not sell your personal data. We may share data with:
- Stripe: for secure payment processing.
- Email service providers: to deliver platform notifications.
- Other users: agents see buyer contact details for viewings they have accepted; buyers see agent profiles and contact details on listings.
- Legal authorities: where required by law.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us.
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain processing activities.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at the email address below.
9. Cookies
We use essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising cookies. By using the platform, you consent to our use of essential cookies.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled exclusively by Stripe and is never stored on our servers.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
info@est-flo.com