Privacy Policy

This policy explains what personal information Nest and Feathers collects, why, and what you can do about it.

Who we are.

Nest and Feathers is operated by Nest and Feathers Life Ltd ("we", "us"), a company registered in England and Wales (company number 17272150), registered office 1 Wren, Meadow Walk, Heathfield, Oxford OX5 3FG. We are the data controller for the information described here, and you can reach us at hello@nestandfeathers.life. We are registered with the Information Commissioner's Office (ICO) under reference ZC217997.

Our approach, in short.

We collect as little as we can. We hold information about families ("nests"), not about individual children. We do not create profiles of children, we do not sell your data, and we never use your information to advertise to your children.

What we collect.

• Your account: your email address, the name you give your nest, your rough location or region, and any interests or short introduction you choose to add.
• What you share: the feathers (places you log), reviews, tips, ratings, wishlists and photos you choose to add.
• Technical information: basic information your device sends when you use the site (such as IP address and browser type), and information stored in cookies (see our Cookie Notice).
• We do not ask for, or store, structured information about individual children (see "Children" below).

Children.

Nest and Feathers is a service for parents and carers, who must be 18 or over. A nest represents a family, not a child. We do not create child profiles or store identifying data about individual children. We ask families to keep the focus on the places they visit, not on their children, and in particular not to include a child's full name, school, date of birth, health information, or clear photographs of a child's face. We remind you of this as you post, and anything that does come through is subject to moderation before it appears publicly.

Photos.

When you add a photo we show a safety prompt and give you an optional tool to blur part of the image before it uploads. If you use it, only the blurred version is uploaded and the original never leaves your device. We review content that is reported to us, and may remove anything that breaches our rules.

When you upload a photo, we automatically remove its hidden metadata before it is stored, including any GPS location and the date and time it was taken. This happens to every photo, and the original file is never kept.

Why we use your information, and our legal basis.

• To provide the service you asked for (performance of a contract): running your account and showing feathers.
• For our legitimate interests in operating, securing, moderating, keeping families safe on, and improving the platform, where these do not override your rights.
• With your consent, where we ask for it (for example any non-essential cookies, or optional updates you opt into). You can withdraw consent at any time.

Who we share it with.

We use trusted providers who process data only on our instructions: Supabase (database, sign-in and file storage), Vercel (website hosting), Resend (sending emails such as sign-in and password reset), and Stadia Maps (map tiles and place search). We do not sell your data or share it for advertising. Businesses listed on the platform can see the content of reviews about them, but not who left them, and not your email or other personal details. If you contact a business directly through an enquiry, they can see your Nest's name so they can reply to you. We collect anonymised information about activity in each area, such as how many searches or map views happen near a place, without recording who did them. In future we may show claimed businesses a summary of that activity for their local area and category. Any figure shown is only ever produced once at least 20 separate actions contribute to it, so nothing can be traced back to an individual family. We do not currently show these figures to any business. We may disclose information where the law requires it, or to protect the safety of a child or another person.

Where your data is held.

Your information, including your account, your feathers and your photos, is stored in the European Union (Frankfurt, Germany) through our database provider, Supabase. Some of our providers are US-based companies (Supabase, our website host Vercel, our email provider Resend, and our map and search provider Stadia Maps) and may process limited data, such as technical information and email addresses, in the United States. When you search for a place or view a map, your device requests results and map images directly from Stadia Maps. If you pick a suggestion that comes from OpenStreetMap, we make one further, one-off request to OpenStreetMap's own service, from our own server rather than your device, to fetch its address and facility details - this is what lets us suggest a category and a few practical facts (such as step-free access or toilets) for you to check and adjust. Where any data is processed outside the UK or EU, it is protected by appropriate legal safeguards, such as the UK International Data Transfer Agreement or the providers' approved data-transfer frameworks.

Membership is open to families outside the UK. If you are using Nest and Feathers from another country, your information will be transferred to and held in the European Union, which may have different data protection laws to your own country. We apply the same standards to every member's information wherever you live, and the rights set out below apply to you regardless of where you are based.

How long we keep it.

We keep your account information while your nest is active. If you delete your nest, we delete your personal information within 30 days, except where we must keep limited records for legal, safety or accounting reasons. Where you withdraw from a feather that other families have already relied on (verified), we remove your identity and personal wording from it but keep an anonymised record of the place and its verifications, so the shared map is not broken for other families. Anonymised information is no longer personal data.

Anonymised activity data - such as searches, filters and map views used to build the statistics above - is kept in its original form for 90 days. Before it's deleted, it's replaced by a monthly summary: a count of activity by region, category and month, with nothing about any individual visit. We keep these monthly summaries indefinitely so we can show genuine year-on-year trends - they contain nothing that could identify anyone.

Your rights.

You have the right to access the information we hold about you, correct it, delete it, object to or restrict certain uses of it, and receive a copy in a portable format. You can also withdraw consent at any time where we have relied on it.

You can do most of this yourself in your account settings. For anything else, including a request to access your information, email us at hello@nestandfeathers.life. You do not need to use any particular form of words, and you do not need to mention any legislation. Just tell us what you would like.

We will respond within one month. If your request is complex or you have made several, we may need up to two further months, and we will tell you within the first month if that is the case. There is no charge.

We may ask you to confirm your identity before we respond, to make sure we are not disclosing your information to someone else.

If you are unhappy with how we have handled your data or your request, you can complain to the Information Commissioner's Office at ICO.org.uk.

Changes.

We may update this policy. We will change the date above and, for significant changes, let you know.

Contact.

hello@nestandfeathers.life.