Privacy policy

Data protection

The UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018, jointly referred to as 'Data Protection legislation', are now in full force in the UK. In most instances, Nest Corporation is the controller for the processing of personal information we hold about you. You can find more information in the relevant individual privacy information notices below.

Nest Corporation is registered with the Information Commissioner’s Office (ICO). Our registration number is Z2343426. You can read more about UK data protection on the ICO website. 

You can also download this frequently asked questions document (PDF) if you need additional information on data protection legislation not contained in the relevant privacy notices. 

Nest has a dedicated Data Protection Officer, whose office can be contacted at dataprotectionofficer@nestcorporation.org.uk

Other third-party websites

Our website may, from time to time, contain links to and from third-party websites, including those of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites may have their own privacy policies. We don’t accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Security and safe storage of your personal information

The security of your personal information is very important to us and we take this matter very seriously. We use appropriate procedures and security features to process and protect your information and have a robust framework in place to ensure the security of your information.

The information security management systems operated by Nest Corporation, our Scheme administrator and our IT-managed services provider are all independently certified to the ISO 27001 standard. This gives us assurance that our systems and processes are robust and helps protect your personal information.

You can download our current Corporation ISO27001 certificate in PDF format.

If you’d like additional information on this topic, we’ve also published more details on our security processes and protocols in this security white paper (PDF).

We may monitor the use and content of emails, calls and secure messages sent from and received by us so that we can, for instance, identify and take legal action against unlawful or improper use of our systems. The main examples of unlawful or improper use are attempting to impersonate Nest Corporation, the transmission of computer viruses and attempts to prevent this website or its services from working.

Freedom of information

Nest Corporation is a public authority in its role as a public corporation. The Freedom of Information Act 2000 gives any person of any nationality, anywhere in the world, the right of access to official information held by public authorities.

Visit our Freedom of Information page to find out more about what information Nest Corporation publishes, how we respond to information requests and how we handle complaints.
 

Comments and queries

You can send any queries and comments about this Privacy policy by email to dataprotectionofficer@nestcorporation.org.uk or by mail to Data Protection Officer, Nest Corporation, 10 South Colonnade, Canary Wharf, London, E14 4PU. Depending on the nature of your enquiry, we may need to pass it to a government agency to fulfil your request or answer your query.