privacy
last changed 5 september 2026
a working draft, written by the people building nestr and not by a solicitor. it describes what the product actually does, so it is accurate rather than authoritative. it will be replaced before nestr opens to the public.
the short version
nestr holds your home address, your cats and, during a booking, photographs taken inside your home. those are the sensitive things, and each of them is shown to as few people as the job allows.
your address
you see it. an administrator at nestr sees it. a sitter sees it once you have confirmed a booking with them, because they have to get to your door.
everyone else, including a sitter reading your request before accepting it, sees the postcode district only: se15, never se15 4tx. the last three characters of a postcode narrow a district to a handful of doors, so they are never shown to anyone who does not already have your booking.
photographs
photographs are resized on your own phone before they are sent. that also removes the location the camera records in the file, so a photograph taken at home does not carry the coordinates of your home.
they are stored in a private place. there is no public web address for any photograph at any point. when one is shown to you or to your sitter, it is through a link that stops working after a few minutes.
your cats
the routine, the medication, where she hides. this is yours, it is shown to a sitter you have booked, and it is the reason a rebooking takes one tap instead of twenty minutes.
what a sitter gives us
a sitter’s identity is verified by our payment provider, who holds their documents rather than us. where a check has to be made by a person at nestr, anything they submitted is destroyed once the decision is recorded. what we keep is that a document of that kind was seen and what was decided, never the document.
payments
card details are entered directly with our payment provider and never reach nestr. we hold the amounts, the dates and the outcome of each payment, because that is the record that says who is owed what.
who else sees any of it
the companies that run the parts of nestr: payments, email, file storage, error reporting, hosting. each sees only what it needs. nothing is sold, and nothing is shared for advertising.
how long
access details are deleted when a booking completes. verification documents are destroyed when the decision is made. everything else is kept while you have an account, and the record of bookings and payments is kept for as long as tax and accounting rules require.
your rights
you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. some records have to survive deletion for legal reasons, and where that is so we will tell you which and why.
to be settled: the registered company details, the data controller, the contact address for a request, and whether an ico registration is needed.