Privacy Policy

Information we collect

• Information you provide. This can include your name, email address, phone number, account details, rental dates, group size, property interests, preferences, messages, and other details you include in an inquiry or booking request.
• Inquiry and service records. We keep the information needed to deliver and answer your request, track its status, prevent duplicate submissions, and maintain related communications.
• Device and usage information. Depending on the page, settings, and choices available to you, this can include IP address, browser and device information, session statistics, approximate location, pages viewed, interactions, referring page, and timestamps.
• Attribution information. When available, we may collect the first source that brought you to the site, such as campaign parameters, advertising click identifiers, referring page, landing page, and capture time. Current first-touch attribution stored in the browser expires after no more than 90 days.
• Privacy choices and consent receipts. On pages that offer optional tracking choices, we record the categories you allowed or rejected and information needed to apply and order that choice across browser contexts. Tracking choices are separate from email-marketing consent.
• Identity-verification information. If you choose to verify your identity, Stripe Identity can collect identity-document images, a selfie when required, information extracted from them, and verification results.

How we use information

We use personal information to:

• deliver rental inquiries to Congdon & Coleman and respond to them;
• provide search, account, inquiry, booking, and customer-support functions;
• operate, secure, troubleshoot, and improve NantucketRentals.com;
• understand site use and measure campaigns and conversions;
• send marketing email when you have separately authorized it; submitting an inquiry alone is never that authorization; and
• comply with applicable obligations and protect users, the service, and others.

Rental inquiries and email marketing

Submitting a rental inquiry is not consent to marketing. An inquiry is delivered to Congdon & Coleman so the rental team can answer the request whether or not you allow optional tracking or email marketing.

No Klaviyo email DRIP campaign is running as of this policy's last-updated date. If an email DRIP is enabled in the future on a separately hosted campaign landing page, only the separate, unchecked email opt-in would authorize enrollment for occasional Nantucket rental updates and offers. If that integration is enabled, checking the box can cause the landing page's gated Lead Gen Form Submission event and profile information to be processed in Klaviyo. Accepting tracking does not check the email box, and rejecting tracking does not prevent you from choosing email updates.

You can withdraw from marketing email at any time by using the unsubscribe link in an email or contacting us. Withdrawing from marketing does not prevent service messages needed to answer or administer a request you made.

Analytics, advertising, and service providers

Our current site and related rental pages use the following services. What is loaded and what data is sent can vary by page, configuration, and the choices presented on that page.

• Google Tag Manager manages configured tags. Google states that Tag Manager may collect aggregated diagnostics about tag firing and standard HTTP request logs. Tags managed through it can send information to their own destinations. See Google Tag Manager privacy and security information.
• Google Analytics helps us understand site use. Its default collection can include user counts, session statistics, approximate location, and browser and device information. See Google Analytics data collection information.
• Google Ads supports campaign attribution, advertising, and conversion measurement. Information can include advertising click identifiers and conversion details.
• Google Maps Embed displays property locations on listing pages. When a map loads, Google can receive standard request and device information, such as IP address, browser or user-agent information, and the location requested for the map. See Google's privacy policy.
• Mapbox provides interactive maps on neighborhood pages. When those maps load, Mapbox can receive standard request and device information, the referring page, and the map area or coordinates requested.
• Smarty provides address suggestions and validation in account and property-listing forms. When you use those fields, the address text you enter and a selected address can be sent to Smarty to return suggestions or validate it.
• Typeform provides the embedded form used to submit a home for listing or management. Loading the form can send Typeform standard request and device information. If you complete it, Typeform processes the contact and property details you enter.
• Cloudinary delivers the background video on the List Your Home page. Loading that video can send Cloudinary standard request and device information, such as IP address, browser or user-agent information, and the referring page.
• Google Sign-In is an optional way to access an account. Its client script loads across older site pages, including public content and account pages, even if you do not choose Google Sign-In. This can send Google standard request and device information such as IP address, browser or user-agent information, and the referring page. If you choose it, Google and we also exchange the authentication and account information needed to complete sign-in. See Google's privacy policy.
• YouTube provides videos embedded on some campaign and owner pages. Loading or playing an embedded video can send Google standard request and device information, the referring page, and cookies or similar identifiers. See Google's privacy policy.
• Google Fonts supplies font styles and files on some campaign pages. Requests to those resources can send Google standard request information such as IP address, browser or user-agent information, and the referring page. See Google's privacy policy.
• Meta Pixel and Meta Conversions API support advertising attribution and conversion measurement. Depending on the page and permitted configuration, browser or server events can include event and page details, advertising and cookie identifiers when present, IP address, user agent, and contact information protected by hashing for matching.
• Klaviyo supports onsite activity, event, and profile processing. Its onsite script loads across current site pages and can receive standard request and device information. Depending on the page and interaction, its onsite tools can process browsing, search, listing, booking, and inquiry interactions; this includes a Lead Gen Form Submission event with contact and trip details after some campaign inquiries even where no email opt-in is offered. Following some emailed links can also associate the visit with a Klaviyo profile. These events and profile processing are not consent to receive marketing email. Separately hosted campaign landing pages can present the unchecked email opt-in described above; only that affirmative choice would authorize a gated event for a future enabled email DRIP. Optional attribution included with that gated event would depend on the applicable tracking choice.
• Stripe Identity provides optional identity verification. Its client can load when an unverified renter opens Account Settings, before verification is chosen, and can receive standard request and device information. If you start verification, Stripe processes the identity information described above and returns verification results. See Stripe's privacy policy.
• Stripe Connect provides payout-account onboarding for property owners who choose to link an account. If you use that flow, your browser opens Stripe's hosted onboarding, where Stripe processes the payout and bank-account information you provide along with standard request and device information. See Stripe's privacy policy.
• Stripe Payments processes incoming renter payments and outgoing homeowner payouts for completed rental agreements. Stripe processes the transaction and payment or payout information needed to carry out those transfers. See Stripe's privacy policy.
• Pusher provides realtime updates for signed-in account features. When an authenticated user visits pages in the older site area, Pusher can connect and process connection and device information even before a realtime feature is opened. In booking conversations, it can also relay message text, attachments, and images between authorized participants.
• DocuSign hosts the electronic rental-agreement signing step in the booking flow. If you reach that step, your browser loads a DocuSign signing ceremony, and DocuSign processes the agreement and information presented or supplied during signing, such as signer details and signatures, along with standard request and device information. See DocuSign's privacy notice.
• Generali Travel Insurance provides the optional Travel Protection Plan offered during booking. If you choose to add the plan, your selection and the identity, contact, address, and trip details needed to arrange and administer the coverage can be shared with Generali. See Generali's plan disclosures.

These providers process information under their own terms and privacy notices. We may also use hosting, security, communications, customer-service, and transaction providers as needed to operate the service.

Cookies and browser storage

We use essential cookies and local, session, or similar browser storage to provide requested functions such as authentication, security, preferences, form state, inquiry delivery and deduplication, and confirmation receipts. Blocking essential storage can prevent some features from working.

Pages that present optional tracking choices can also use browser storage and a consent receipt to remember and enforce the choice. Advertising and analytics tools can use cookies or similar identifiers when they operate. Your browser may let you block or delete cookies and other site data.

Your choices and withdrawal

• On a page that displays Privacy choices, you can reject optional tracking or reopen that control to withdraw a prior choice. Withdrawal stops future optional sends from that page and may reload it to remove loaded tools. It does not erase information a provider already received.
• Because controls differ across current site pages, you can also clear or block site data in your browser and use the privacy or advertising controls offered by Google and Meta.
• Use the unsubscribe link in a marketing email to stop marketing email.
• Contact us for help with a privacy choice or to request access, correction, deletion, portability, restriction, or an objection where applicable law provides that right. We may need to verify your identity and may retain information when permitted or required by law.

When information is disclosed

We disclose information to Congdon & Coleman personnel who handle rental and support requests, and to service providers that operate functions described in this policy. We may also disclose information when reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate misuse, or complete a business transaction subject to appropriate notice and safeguards.

Providers can process information in locations outside your state or country, where privacy protections may differ.

Retention and security

We keep personal information for as long as reasonably needed for the purposes described in this policy, including providing the service, maintaining appropriate business records, meeting applicable obligations, resolving disputes, and protecting the service. Retention varies by the kind of record and the system that holds it; this policy does not promise a fixed period except for the browser first-touch limit stated above.

We use reasonable administrative, technical, and organizational measures intended to protect personal information. No internet transmission or storage system can be guaranteed completely secure.

Changes to this policy

We may update this policy as our services and practices change. We will publish the current version here and change the effective and last-updated date.

Contact us

For privacy questions or requests, contact Congdon & Coleman at info@nantucketrentals.com. If applicable law gives you a right to complain to a privacy or data-protection authority, you may also contact the authority responsible for your location.