This Data Protection Policy outlines how Nistylez collects, processes, stores, and protects your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Data controller information
Data Controller: Nistylez
Contact: support@nistylez.com
Address: Unit 1, 268A Main North Road, Prospect, Adelaide, South Australia 5082
2. Legal basis for processing
We process your personal data based on the following legal grounds:
- Consent: When you explicitly agree to data processing
- Contract performance: To fulfill our service obligations
- Legitimate interest: To improve our services and prevent fraud
- Legal obligation: To comply with applicable laws
3. Categories of personal data we process
| Data category | Examples | Purpose |
|---|---|---|
| Identity data | Name, email, phone number, date of birth | Account creation, authentication, communication |
| Profile data | Preferences, interests, profile pictures | Personalization, service matching |
| Transaction data | Payment information, booking history | Service delivery, payment processing |
| Technical data | IP address, device information, cookies | Security, analytics, functionality |
| Usage data | Platform interactions, search queries | Service improvement, personalization |
4. Data processing purposes
We process your data for the following purposes:
- To provide and maintain our platform services
- To process bookings and payments
- To communicate with you about services
- To improve our platform and user experience
- To ensure platform security and prevent fraud
- To comply with legal and regulatory obligations
- To provide customer support and resolve issues
5. Data retention periods
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
- Account data: Retained while account is active, plus 3 years after deactivation
- Transaction data: Retained for 7 years for tax and legal purposes
- Communication data: Retained for 2 years after last interaction
- Technical data: Retained for 1 year for security and analytics
6. Your data protection rights
Under applicable data protection laws, you have the following rights:
- Right of access: Request a copy of your personal data
- Right of rectification: Request correction of inaccurate data
- Right of erasure: Request deletion of your personal data
- Right to restrict processing: Request limitation of data processing
- Right to data portability: Request transfer of your data
- Right to object: Object to certain types of processing
- Right to withdraw consent: Withdraw consent at any time
7. Data security measures
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response and breach notification procedures
8. International data transfers
Your personal data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by relevant authorities
- Certification schemes and codes of conduct
- Binding corporate rules where applicable
9. Third-party data processors
We may use third-party service providers to process your data. These processors are carefully selected and bound by data processing agreements that require them to:
- Process data only as instructed by us
- Implement appropriate security measures
- Assist us in fulfilling data subject rights
- Return or delete data upon contract termination
10. Data breach notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform you without undue delay.
11. Automated decision making
We may use automated decision-making processes, including profiling, to provide personalized services. You have the right to request human intervention, express your point of view, and contest the decision.
12. Children's data protection
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.
13. Changes to this policy
We may update this Data Protection Policy from time to time. We will notify you of any material changes by posting the updated policy on our platform and updating the last updated date.
14. Contact information
Email: support@nistylez.com
Phone: +61 421 357 310
Address: Unit 1, 268A Main North Road, Prospect, Adelaide, South Australia 5082
Supervisory authority
You also have the right to lodge a complaint with your local data protection authority.
Last updated: January 2025