Privacy Policy

Last updated: November 2026

1. Who we are

EstateFlow is the data controller for personal data you provide to estateflow.it.com. You can contact us at hello@estateflow.it.com.

2. What we collect

• Account details: name, email, phone number, password (stored hashed).
• Listing details and photos you upload.
• Enquiries you send to other users.
• Basic technical data (IP address, browser, pages visited) for security and analytics.

3. Why we use it

• To create and maintain your account.
• To display your listings and enable enquiries.
• To send service emails (account, enquiry alerts, security).
• To detect fraud and abuse.

4. Sharing

We do not sell your data. We share it only with: (a) other users you explicitly contact via the platform, (b) trusted service providers (hosting, email), and (c) authorities when legally required.

5. Cookies

We use a session cookie to keep you signed in and a single preference cookie to remember that you have dismissed the cookie banner. No third-party tracking cookies are set by default.

6. Your rights (Australian Privacy Act)

You may request access to, correction of, or deletion of your personal data at any time by emailing hello@estateflow.it.com. You may also lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).

7. Retention

We retain your account data while your account is active and for up to 12 months after closure for legal and fraud-prevention purposes.

8. Security

Passwords are stored using bcrypt hashing. Sessions are protected with secure, HttpOnly cookies. We strongly recommend you only access the site over HTTPS.