Privacy Policy

1. Who we are and what this notice covers

Vestra operates a digital real-estate platform that may support property discovery, property listings, buying and selling eligible interests, investment participation, marketplace interactions, account services and related education or support. The precise services available to you depend on your location, account status, property and transaction.

This notice explains how information is collected, used, shared, stored and protected when you browse Vestra, create an account, verify your identity, list or explore property, make an offer, invest, sell an eligible interest, contact support or use related services.

2. Information we collect

We collect information you provide, information created through your use of Vestra, and information received from service providers where permitted by law. The information collected depends on the features you use.

• Identity and contact information such as name, email, phone number, address, date of birth and account credentials.
• Verification and compliance information, which may include identity documents, proof of address, beneficial ownership, source-of-funds information and screening results.
• Property and transaction information such as listing details, offers, ownership or interest records, investment instructions, funding and payout records, fees and transaction history.
• Profile preferences, saved properties, support messages, referrals, learning progress and other account activity.
• Technical information such as device/browser data, security logs, IP address, session information, cookie choices and diagnostics needed to operate and protect the platform.

3. How we use information

We use information to provide the service you request, protect users and the platform, comply with legal obligations and improve the reliability of Vestra.

• Create and administer accounts, authenticate users and secure sessions.
• Display property information, facilitate eligible listing, offer, purchase, sale and investment workflows, and maintain transaction records.
• Process funding, payouts or other payment-related steps through supported providers; payment providers may process information under their own terms.
• Perform identity, sanctions, fraud, anti-money-laundering and other compliance checks.
• Respond to support requests, send service/security notices, administer referrals and education features, and resolve disputes.
• Detect misuse, maintain audit trails, test and improve platform reliability, and meet reporting or recordkeeping requirements.

4. Property, marketplace and transaction data

When you use property discovery, buying, selling or marketplace features, we process information necessary to show listings, record interest or offers, communicate status, verify participants and maintain an auditable transaction history. A listing, offer or displayed property metric is not by itself proof of title, an independent valuation or a guarantee that a transaction will complete.

Depending on the service and applicable agreements, relevant information may be shared with counterparties, property owners or operators, payment providers, verification vendors, professional advisers or competent authorities when necessary to complete a transaction, investigate a dispute or comply with law.

5. Legal bases and permissions

Where data protection law requires a legal basis, processing may be necessary to perform a contract or steps you request before a contract, comply with a legal obligation, protect legitimate interests such as security and fraud prevention, or rely on your consent for a specific optional purpose. Where consent is used, you can withdraw it without affecting processing that lawfully occurred before withdrawal.

6. When information is shared

We do not make personal information available to everyone. We share it only where reasonably necessary for the purposes described in this notice, under suitable safeguards and subject to applicable law.

• Service providers supporting hosting, communications, identity verification, fraud prevention, payment processing, analytics where consented, customer support and security.
• Other transaction participants to the extent required for a listing, offer, purchase, sale or investment workflow.
• Professional advisers, auditors, insurers or financing partners where needed for a legitimate platform or transaction purpose.
• Regulators, law enforcement, courts or other authorities where disclosure is required or legally permitted.
• A successor entity in a merger, restructuring or transfer of business, subject to appropriate safeguards.

7. Identity verification and financial crime prevention

Vestra may require identity verification, beneficial-owner information, sanctions screening, source-of-funds checks or additional documents before allowing particular features or transactions. The scope depends on the service, risk and applicable requirements. We may restrict, delay or refuse a transaction where information is incomplete, inconsistent or raises a compliance concern. See the KYC & AML Policy for more detail.

8. Cookies and similar technologies

Essential cookies support login sessions, security, CSRF protection, language or core preferences and are required for the website to work. Vestra provides a preference control for optional categories such as analytics, personalisation and marketing. Optional technologies should not be activated before you make a choice where consent is legally required.

You can change your choice using Cookie settings in the website footer. Your browser can also restrict or remove cookies, although disabling essential cookies may prevent parts of the service from working. Some third-party security or verification services may process technical data under their own notices.

9. Retention and security

We keep information for as long as reasonably necessary for the purposes described here, including providing the service, resolving disputes, maintaining financial and transaction records, preventing fraud and meeting legal or regulatory retention obligations. Retention periods vary by data category and jurisdiction.

We use administrative, technical and organisational safeguards intended to protect information. No internet transmission or storage system can be guaranteed completely secure. Please protect your credentials, use a unique password and contact support promptly if you suspect unauthorised access.

10. International transfers

Vestra and its service providers may process information in countries other than the country where you live. Where required, appropriate contractual, organisational or other legal safeguards will be used for international transfers.

11. Your choices and rights

Depending on applicable law, you may have rights to request access to, correction of, deletion of or restriction of certain personal information, to object to particular processing, to receive a portable copy, or to complain to a relevant data protection authority. These rights may be subject to exceptions, including legal recordkeeping, fraud prevention and transaction obligations.

To make a privacy request, contact support@vestraproperties.pro from the email associated with your account. We may need to verify your identity before acting on a request.

12. Children and changes to this notice

Vestra is intended for people who meet the eligibility requirements of the relevant service and jurisdiction. Do not create an account or submit personal information if you are not eligible to use the service.

We may update this notice as the platform, law or service providers change. The date above indicates when this version was prepared. Material changes will be communicated through appropriate website or account notices where required.

13. Contact

For privacy questions or requests, contact support@vestraproperties.pro. Please do not send passwords, one-time codes or unnecessary identity documents in an ordinary support email.