NestDrop

Privacy Notice

Last updated: 6 November 2026

1. Who we are

NestDrop is run by Stephen Bown (trading as NestDrop), of 49 St Andrews Road, Yeovil, BA20 2DF, United Kingdom. We are the data controller for the personal data described here, which means we decide how and why it is used. Contact us at [CONTACT EMAIL — set up with your domain]. [ICO REGISTRATION NUMBER, if registered]

2. What we collect and why

  • Account details (name, email, login credentials or Google sign-in) — to create and secure your account. Legal basis: contract.
  • Your files and file details (names, sizes, folders, share links) — to store and share them for you. Legal basis: contract.
  • Plan and subscription details (plan, renewal dates) — to apply your storage limit. Legal basis: contract.
  • Technical data (IP address, device and browser info, logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
  • Support messages — to answer your questions. Legal basis: legitimate interests.
  • Marketing emails, only if you opt in. Legal basis: consent, which you can withdraw any time.

We do not look at your files except where needed to provide the service, investigate abuse or comply with law.

3. Who we share it with

  • Service providers who host our app, database and file storage, and support tools.
  • Paddle, our Merchant of Record, for selling plans, managing subscriptions, payments, tax and invoicing. Paddle handles your payment details under its own privacy notice.
  • Professional advisers such as lawyers and accountants.
  • Authorities where required by law.

We never sell your personal data.

4. International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses to protect it.

5. How long we keep it

We keep account data and files while your account is open. After you close your account, we delete or anonymise them within 30 days, unless we must keep certain records (e.g. tax) for longer by law.

6. Your rights

Under UK and EU data protection law you can ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent. Email [CONTACT EMAIL]; we'll reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

7. Security

Files are kept in private storage that only your account can reach, data is encrypted in transit, and access is restricted. Share links can expire and be password-protected.

8. Cookies

We use only essential cookies and browser storage to keep you signed in and the app working. We do not use advertising cookies. [UPDATE if you add analytics or marketing cookies]

9. Changes

We may update this notice and will tell you about significant changes.