Privacy notice.

1. Information collected

We collect the information needed to assess and provide a service: name, contact details, pickup or rental drop-off postal code and address, service choice, item identity and condition, hazard disclosures, communications, consent records, booking and payment status, photographs, custody events, work records, ATP readings where applicable, Care Reports, storage and rental records, owner statements, consignment activity, seller settlement and donation authorization or proof. A visiting-family rental request may also include visit dates, children’s approximate ages or sizes needed for fit, requested gear, the selected local or airport-area handoff, arrival and departure windows, and the name or contact details of a host, property recipient or meeting contact. For travel support, this may also include airline and itinerary details, baggage receipts and reports, claim correspondence, proof of purchase, repair or replacement evidence and written authorization to communicate or submit factual material on your behalf.

Customer photos are optional. If you choose to upload one, include the gear only and avoid children, people, documents, licence plates and other unnecessary personal information. Do not upload passports, payment-card details or identity documents through the public assessment. Payment card details are entered on Square’s hosted checkout and are not collected by this site.

2. Why it is used

Information is used to check whether we can provide the service and serve the address; prepare and approve your service or rental plan and price; match rental inventory and child-fit information; schedule pickup, rental drop-off, collection and return; coordinate an authorized local handoff; handle disclosed conditions; identify, care for and track items; create reports; administer storage, optional rentals, resale, donation, payments and refunds; prepare and facilitate authorized airline-damage claims; respond to questions; prevent fraud or misuse; meet tax, accounting, insurance and legal obligations; and improve service operations using aggregated measurements.

3. Photos, Care Reports and sharing

Submitting photos with an enquiry or booking is optional. After an item is accepted, Nest & Stow takes intake and completion photographs as part of the standard job record and Care Report. Lead and job photographs remain private. A published Care Report is accessed through a high-entropy, revocable link and is not intended for search indexing. Customer reports can be available for three years.

An optional buyer version removes customer identity and contact details known to Nest & Stow, omits private custody notes, and includes only photographs explicitly approved for buyer sharing. Before publication, the owner must also review the remaining item-focused condition and care text. Keep report links confidential; anyone who receives a valid link may be able to view that version until it expires or is revoked. Revocation prevents new delivery links from being issued, but a short-lived private-file URL already issued to a viewer can remain usable for up to 20 seconds.

4. Service providers and disclosure

Information may be processed by providers that support website hosting, database and private file storage, payment checkout, transactional email and operational security. Marketplace or rental-channel operators and renters receive only the information needed for an authorized listing, booking or handoff; a stored-gear owner’s direct contact information is not published for the renter. Donation recipients receive information needed for an authorized handoff. For Travel Recovery, approved claim materials may be shared with the named airline and, if you request an escalation, an appropriately licensed legal provider. Providers receive only the information reasonably required for their role. Information may also be disclosed when required by law, to address safety or fraud, or with customer authorization.

5. Safeguards and access

Structured records are kept in private database storage and photos and PDFs in private object storage. Owner operations require an invited owner account, multi-factor authentication and a separate server-side owner email allowlist. Customer report and approval links store only a token hash, expire and can be revoked. No safeguard eliminates every risk; suspected incidents are assessed and handled under applicable obligations.

6. Retention and deletion

Unconverted enquiries are normally retained for up to 24 months unless a longer period is needed for a dispute, safety issue or legal requirement. Job, consent, payment and settlement records are kept for the period reasonably required for service, accounting, tax, insurance and legal purposes. Published Care Reports are intended to remain available for three years. When information is no longer required, it is deleted, anonymized or made inaccessible, subject to backups and legal holds.

7. Transactional and marketing messages

Booking, approval, payment, storage, rental, travel-claim and Care Report messages are service communications. Marketing permission is optional and separate. Marketing messages are sent only with a lawful basis, identify the sender and include a way to unsubscribe. A withdrawal request is applied to future marketing while necessary service records and transactional messages remain permitted.

8. Access, correction and questions

You may ask what personal information Nest & Stow holds about you, request access or correction, withdraw optional consent, ask that a report link be revoked, or challenge privacy handling. Identity may need to be verified before responding. Some information must be retained or may be withheld where the law permits or requires it.

9. Changes to this notice

Use the effective and revision date to identify the version accepted with an intake. Material changes apply prospectively unless a different consent or notice is legally permitted.