1. Introduction

Welcome to NestTidy, available at nesttidy.com.

We respect your privacy and are committed to providing clear information about how personal data may be collected, used, stored, and shared when you visit or interact with the NestTidy website.

This Privacy Policy explains:

• Who is responsible for your personal data.
• What information may be collected.
• Why and on what legal basis we process it.
• Which third-party services we use.
• How cookies and similar technologies are managed.
• How long information may be retained.
• When data may be transferred outside the European Economic Area.
• What privacy rights you may have.
• How you can contact us about privacy matters.

This Policy applies to visitors of nesttidy.com and related pages operated as part of the NestTidy website.

2. Who Is the Data Controller?

The controller of personal data processed in connection with NestTidy is:

NestTidy is a digital publishing project created and managed by Exiro Media, operating within the activities of EXIRO ZONE.

For matters specifically concerning the NestTidy website:

support@nesttidy.com

For matters concerning personal data protection and the exercise of GDPR rights:

rodo@twojstartup.pl

3. What Personal Data May We Process?

3.1. Technical and device information

When you visit the website, technical systems may process information such as:

• IP address.
• Browser type and version.
• Operating system.
• Device type.
• Screen or browser dimensions.
• Language settings.
• Date and time of access.
• Requested URL.
• Referring website or source.
• Technical error and performance information.
• Server log information.

Some of this information is necessary for the website to operate securely and reliably.

3.2. Website usage information

Where permitted by applicable law and your consent choices, analytics services may process information about how you interact with the website, including:

• Pages visited.
• Time spent on pages.
• Navigation paths.
• Traffic source.
• Clicks.
• Scroll activity.
• Interactions with page elements.
• Session duration.
• Approximate geographic area.
• Device and browser characteristics.

3.3. Advertising information

Where advertising services are active, information associated with advertising may include:

• Advertising or cookie identifiers.
• Information about ads displayed.
• Ad interactions.
• Browser and device information.
• Approximate location.
• Website activity.
• Information used to measure advertising effectiveness.
• Information used to prevent fraud and abuse.

3.4. Information you send to us by email

If you contact us at support@nesttidy.com, we may process information that you voluntarily provide, including:

• Your email address.
• Your name, if provided.
• Company or organization name, if provided.
• The content of your message.
• Attachments.
• Technical email metadata.

3.5. Consent information

Our Consent Management Platform may process information necessary to record your privacy choices, such as:

• Consent status.
• Consent ID.
• Website URL.
• Browser or user-agent information.
• Selected consent categories.
• Date or state of your consent decision.

4. Why We Process Personal Data

We process personal data only where there is an appropriate purpose and legal basis.

4.1. Operating and securing the website

We may process technical data to:

• Deliver pages and website resources.
• Maintain website functionality.
• Prevent abuse and attacks.
• Diagnose errors.
• Protect the website and infrastructure.
• Maintain technical logs.

Legal basis: our legitimate interests in operating and protecting the website, Article 6(1)(f) GDPR.

4.2. Responding to communications

When you contact us by email, we process the information you provide in order to:

• Respond to your question.
• Review editorial feedback.
• Investigate corrections.
• Respond to advertising or partnership inquiries.
• Maintain necessary correspondence.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in communicating with website users and handling inquiries.

Where communication concerns steps taken at your request before entering into an agreement, Article 6(1)(b) GDPR may also apply.

4.3. Website analytics

Where required by law, analytics technologies are activated based on your consent.

We use analytics to:

• Understand how visitors use NestTidy.
• Measure website traffic.
• Identify popular content.
• Understand traffic sources.
• Improve usability.
• Identify technical problems.
• Evaluate website performance.

Legal basis: consent, Article 6(1)(a) GDPR, where consent is required.

4.4. Advertising

NestTidy may display advertising through Google AdSense.

Advertising technologies may be used for:

• Displaying advertisements.
• Measuring advertising performance.
• Limiting repeated advertisements.
• Preventing advertising fraud.
• Generating advertising reports.
• Where permitted and consented to, personalizing advertisements.

Legal basis: consent under Article 6(1)(a) GDPR where consent is legally required for advertising storage, identifiers, personalization or similar processing.

4.5. Recording privacy choices

We process records of consent or privacy preferences in order to:

• Respect your choices.
• Communicate those choices to relevant technologies.
• Demonstrate compliance with privacy obligations.
• Allow you to modify or withdraw consent.

Legal basis: compliance with legal obligations under Article 6(1)(c) GDPR and, where applicable, our legitimate interest in documenting privacy compliance under Article 6(1)(f) GDPR.

10. Cookies and Similar Technologies

NestTidy may use cookies and similar technologies that fall into categories such as:

Non-essential technologies are controlled according to the consent requirements applicable to your location.

A detailed and automatically updated list of detected cookies and technologies will be available through the Cookiebot Cookie Declaration or Cookie Policy on NestTidy.

11. Changing or Withdrawing Consent

You may change your privacy choices at any time.

Use the Cookie Settings or privacy control displayed on NestTidy to:

• Accept categories.
• Reject non-essential categories.
• Modify previous choices.
• Withdraw consent.

You can also delete stored cookies through your browser.

Deleting cookies may cause the consent banner to appear again.

12. Who May Receive Personal Data?

Depending on the circumstances, personal data may be processed by or disclosed to:

• Website hosting and infrastructure providers.
• IT and cybersecurity providers.
• Email service providers.
• Usercentrics / Cookiebot.
• Google, in connection with GA4, GTM and AdSense.
• Microsoft, in connection with Clarity.
• Professional legal or technical advisers where necessary.
• Public authorities where disclosure is required by law.

Some providers may process data on our behalf as processors, while others may act as independent or separate controllers for particular processing operations under their own terms and privacy policies.

We disclose only information that is reasonably necessary for the relevant purpose.

13. International Data Transfers

Some technology providers used by NestTidy operate globally.

As a result, certain information may be processed outside Poland or outside the European Economic Area, including in the United States.

Where GDPR applies and personal data is transferred outside the EEA, the transfer should be based on an appropriate safeguard, such as:

• A European Commission adequacy decision.
• Standard Contractual Clauses approved by the European Commission.
• Another legally recognized transfer mechanism.

14. How Long We Keep Personal Data

We do not intend to retain personal data longer than necessary for the purpose for which it was processed.

Technical and security logs

Retained for periods necessary to ensure security, diagnose technical problems and protect the website, subject to hosting and infrastructure configuration.

Email correspondence

Retained for as long as necessary to respond to and manage the inquiry and, where appropriate, for the period necessary to establish, exercise or defend legal claims.

Cookie consent records

Retained for a period necessary to record and demonstrate the visitor’s privacy choice and comply with accountability obligations.

Google Analytics

User-level Analytics data is retained according to the GA4 retention configuration, subject to Google’s available settings and other reporting rules.

Microsoft Clarity

Clarity retention is described in Section 8 above and is governed by Microsoft’s service-specific retention periods.

Advertising data

Advertising data is retained according to applicable Google policies, advertising settings and consent choices.

When information is no longer required, it may be deleted, anonymized or aggregated.

16. U.S. State Privacy Rights

Depending on where you live and whether the applicable law applies to NestTidy’s activities, you may have additional privacy rights under U.S. state privacy laws.

These may include the right to:

• Know or access categories of personal information processed.
• Obtain a copy of personal information.
• Request correction.
• Request deletion.
• Opt out of certain targeted advertising.
• Opt out of certain sales or sharing of personal information.
• Restrict certain uses of sensitive information.
• Appeal a privacy-rights decision where applicable.

However, some disclosures of online identifiers or activity information to advertising technology providers may be treated as a “sale,” “sharing,” or processing for targeted advertising under certain U.S. state privacy laws even where no money changes hands.

Where applicable, you may exercise relevant advertising and privacy choices through the Cookiebot privacy controls.

You may also contact: support@nesttidy.com

17. Global Privacy Control

Where legally required and technically supported by our consent configuration, NestTidy respects applicable Global Privacy Control (GPC) signals communicated by a browser or compatible technology.

GPC may communicate a user’s preference to opt out of the sale or sharing of personal information or certain targeted advertising.

18. Automated Decision-Making and Profiling

NestTidy does not itself make decisions producing legal or similarly significant effects about visitors based solely on automated processing.

Advertising providers may use automated technologies to determine which advertisements to display, subject to applicable privacy law, provider policies, visitor settings and consent choices.

Where personalized advertising requires consent, it will be subject to the relevant consent controls.

19. Children’s Privacy

NestTidy is a general-audience website and is not directed specifically to children under 13.

We do not currently offer:

• User accounts.
• Public comments.
• Newsletter registration.
• Customer accounts.
• Purchasing functionality.
• A contact form designed to collect children’s information.

We do not knowingly request personal information directly from children under 13.

If you believe a child has provided personal information to us, please contact support@nesttidy.com.

20. No User Accounts, Newsletter or Public Comments

At the effective date of this Privacy Policy, NestTidy does not provide:

• User registration.
• Customer accounts.
• Public comments.
• Newsletter subscription.
• Ecommerce checkout.
• An on-site contact form.

Contact is currently handled by email.

If any of these features are introduced in the future, this Privacy Policy will be updated before or when the relevant processing begins.

21. Data Security

We use reasonable technical and organizational measures intended to protect information against:

• Unauthorized access.
• Loss.
• Misuse.
• Alteration.
• Unauthorized disclosure.
• Destruction.

No internet transmission or electronic storage system can guarantee absolute security.

22. Third-Party Websites

NestTidy articles may contain links to external websites.

Once you leave NestTidy, the privacy practices of the destination website apply.

We are not responsible for the privacy practices, security or content of independent third-party websites.

We recommend reviewing the privacy policy of any external website you visit.

23. Changes to This Privacy Policy

We may update this Privacy Policy when:

• Website functionality changes.
• New services or technologies are introduced.
• Advertising or analytics systems change.
• Privacy laws change.
• Our processing practices change.

The latest version will be published on NestTidy with an updated Last updated date.

Material changes may also be communicated through the website or consent interface where appropriate.