Privacy Policy

Effective date: November 3, 2026

Policy version: 2026-11-03.1

This Privacy Policy explains how Congdon & Coleman Real Estate handles personal information through Congdon & Coleman Real Estate, NantucketRentals.com, Nantucket Houses, and Hello Nantucket (the “Services”). It describes the information we collect, how we use and disclose it, how long we keep it, and the choices available to you.

NantucketRentals.com and Nantucket Houses are services operated by Congdon & Coleman Real Estate, publisher of Hello Nantucket. Hello Nantucket maintains a separate editorial subscription: subscribing to Hello Nantucket does not give marketing permission to Congdon & Coleman Real Estate, NantucketRentals.com, or Nantucket Houses, and permission given through those services does not subscribe you to Hello Nantucket.

This policy applies to the websites, mobile applications, forms, account areas, communications, and related online services that link to it. A Service may add a service-specific section below to explain information or providers used only on that Service.

Information we collect

Depending on the Service and feature you use, we may collect:

• Contact and account information, such as name, email address, telephone number, mailing address, account identifiers, sign-in information, and profile preferences.
• Property, rental, and transaction information, such as properties viewed or saved, requested dates, group size, property interests, inquiries, booking requests, lease and signature records, payment and payout status, and travel protection selections.
• Communications, including messages, support requests, form submissions, call or contact preferences, and the property or transaction context supplied with a message.
• Identity-verification information when you choose or are required to complete verification. A verification provider may process document images, a selfie where required, information extracted from them, and a verification result. We receive the result and the information needed to administer the verification rather than using the document for unrelated purposes.
• Device, usage, and technical information, such as IP address, browser or device type, operating system, pages or screens viewed, interactions, referring page, timestamps, approximate location inferred from an IP address, app events, crash or diagnostic information, and push-notification tokens.
• Attribution and advertising information, such as campaign parameters, referring and landing pages, advertising click identifiers, cookie or similar identifiers, and conversion events, where the applicable Service and your choices permit those tools to operate.
• Consent, acknowledgement, and privacy-choice records, including the Service, purpose, brand, communication channel, message type, policy version, choice, and timestamp needed to apply and prove the choice.
• Information from other people and systems, such as property owners, guests, agents, listing providers, transaction providers, public property and listing sources, and the other Services when the sharing described below applies.

We do not collect every category on every Service. The section below for the Service you use describes its principal features and providers.

How we use information

We use personal information to:

• provide property search, market information, rental inquiry, booking, account, lease, payment, editorial, notification, and customer-support functions;
• route a request to the appropriate Congdon & Coleman Real Estate professional and respond in the context of the property or service you selected;
• authenticate users, remember preferences, prevent duplicate submissions, maintain records, and provide receipts or confirmations;
• personalize requested features, such as saved properties, alerts, recently viewed properties, and relevant property context;
• operate, secure, troubleshoot, test, and improve the Services;
• understand use of the Services and measure campaigns or conversions when the relevant tools are permitted to operate;
• send marketing only under the communication rules below;
• detect misuse, protect people and property, resolve disputes, and enforce agreements; and
• comply with applicable legal, regulatory, tax, accounting, and professional obligations.

Service and marketing communications

When you book, sign a lease, make a payment, request a service, or secure an account, we may send operational messages such as confirmations, verification codes, legal documents, service updates, and receipts. These messages are separate from marketing.

With the applicable permission or other authorization recorded for the message, Congdon & Coleman Real Estate, NantucketRentals.com, and Nantucket Houses may send promotional updates, featured listings, and news by email, push notification, in-app message, or postal mail. SMS marketing requires a separate opt-in; email or general marketing permission does not enable it. Transactional texts about an active booking, payment, stay, or authentication request are service messages rather than marketing.

You may opt out of suppressible marketing by Service, channel, and message type without turning off every communication. Use the unsubscribe link in a promotional email, use an available privacy or notification control, or contact us. A marketing opt-out does not by itself stop operational messages that are needed to provide a request or transaction.

Reporting an email as spam or requesting full erasure may create a global block across Congdon & Coleman Real Estate, NantucketRentals.com, and Nantucket Houses, including the addresses and phone numbers associated with you. That block may also prevent operational messages. Replying STOP to a text message creates a carrier-level block for that phone number and can stop both marketing and time-sensitive service texts. To stop marketing texts while keeping service texts, contact us instead of replying STOP.

Hello Nantucket subscription and unsubscribe choices remain separate. Every Hello Nantucket editorial email includes an unsubscribe method.

When we disclose information

We may disclose personal information:

• within Congdon & Coleman Real Estate and to personnel who need it to handle a property, rental, account, editorial, transaction, or support request;
• among Congdon & Coleman Real Estate, NantucketRentals.com, and Nantucket Houses for the shared account, service, communication, suppression, and preference purposes described in this policy;
• from Hello Nantucket to the customer relationship and consent system operated by Congdon & Coleman Real Estate for subscription confirmation, identity resolution, acquisition attribution, deduplication, consent evidence, and suppression reconciliation, but not to authorize marketing by Congdon & Coleman Real Estate, NantucketRentals.com, or Nantucket Houses;
• to a property owner, agent, listing provider, guest, contractor, or other participant when needed to carry out a request or transaction and consistent with the relationship disclosed on that surface;
• to service providers that supply hosting, authentication, mapping, analytics, advertising measurement, communications, customer support, document signing, payments, identity verification, insurance, security, and other operational functions described below for each Service;
• at your direction or with your permission;
• when reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate misuse, or establish, exercise, or defend a claim; and
• in connection with a merger, financing, reorganization, or transfer of all or part of a business, subject to appropriate notice and safeguards.

We do not sell personal information for money. Some analytics or advertising activity may be treated as a “sale,” “sharing,” or targeted advertising under an applicable privacy law even when no money changes hands. Where required, the relevant Service will provide a Privacy Choices control or another way to opt out.

Cookies, application storage, and similar technology

We use essential cookies, local or session storage, secure device storage, and similar technology for functions such as authentication, security, preferences, form state, inquiry delivery and deduplication, confirmation receipts, and consent records. Blocking essential storage can prevent requested features from working.

Analytics and advertising providers may use cookies, device information, or similar identifiers where they operate. When a page presents optional tracking choices, you can use that control to reject or withdraw future optional tracking on that page. Withdrawing does not erase information a provider received before the choice changed. Browser and device settings may provide additional controls.

Retention

We keep personal information only for as long as reasonably needed for the purposes described in this policy, including providing the Service, maintaining appropriate business and transaction records, honoring communication choices, meeting legal or professional obligations, resolving disputes, preventing fraud, and protecting the Services.

Retention varies by record and system. Where a fixed retention period applies to a Service, we state it below. We may retain aggregated or de-identified information when it can no longer reasonably identify a person. Suppression evidence may be retained after deletion when necessary to honor an opt-out or erasure request and prevent information from being added again.

Your choices and privacy requests

Depending on the Service, you may be able to:

• edit account or profile information;
• manage saved properties, notifications, communication channels, and message preferences;
• reject or withdraw optional tracking through a Privacy Choices control;
• unsubscribe from marketing email or request a narrower marketing opt-out;
• sign out or delete an account through the available account controls; and
• ask us to access, correct, delete, or provide a copy of personal information, or to honor another right available under applicable law.

We may need to verify a request and may retain or decline to delete information when permitted or required by law. We will not discriminate against you for exercising a right provided by applicable law. An authorized agent may submit a request where applicable law permits it and where the required authority and identity can be verified.

Children

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information online from a child under 13. If you believe a child has provided personal information, contact us so we can review and address it.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Processing locations

We and our providers may process information in the United States and other locations. Privacy protections can differ from those in your state or country.

NantucketRentals.com

NantucketRentals.com collects rental dates, group size, property interests, inquiry and booking details, messages, account information, lease and signature records, payment and payout status, identity-verification results, and travel protection selections. Submitting an inquiry does not by itself authorize marketing email.

Current rental pages may use Google Tag Manager, Google Analytics, Google Ads, Google Maps, Google Sign-In, Google Fonts, YouTube, Mapbox, Smarty, Typeform, Cloudinary, Meta Pixel and Conversions API, Klaviyo, Stripe Identity, Stripe Connect, Stripe Payments, Pusher, DocuSign, and Generali Travel Insurance for the functions described in the shared policy. Which provider receives information depends on the page, configuration, feature you choose, and applicable privacy choice.

Browser first-touch attribution, where used, expires after no more than 90 days. An optional identity-verification flow is provided by Stripe Identity. Payment and payout information entered in a Stripe-hosted flow is processed by Stripe; we receive the records and status needed to administer the transaction.

Changes to this policy

We may update this policy when our Services, providers, or practices change. We will publish the current version, effective date, and policy version on each Service. If a change requires additional notice or consent, we will provide it as required before the change applies.

Contact us

For privacy questions or requests, contact the address shown by the Service you used:

• Congdon & Coleman Real Estate: office@congdonandcoleman.com
• NantucketRentals.com: info@nantucketrentals.com
• Nantucket Houses: in-app messaging or office@congdonandcoleman.com
• Hello Nantucket: office@congdonandcoleman.com

You may also write to Congdon & Coleman Real Estate, 57 Main Street, Second Floor, Nantucket, MA 02554.

If applicable law gives you a right to complain to a privacy or data-protection authority, you may contact the authority responsible for your location.