Privacy Policy

Last updated: 2026-09-11

1. Who we are

Nature Coast Cottage ("we," "us," "the property") is owned and operated by Jonathan Brooks and JB Linguistics LLC, at 367 N Turkey Pine Loop, Lecanto, FL 34461. FL DBPR Vacation Rental License #0933809977.

Contact for privacy questions: jonathanb3421@gmail.com or text 602-628-4600.

2. What we collect

When you book direct through this site, we collect:

• Your first name, last name, email, and phone number
• Your booking dates, guest count, and pet count
• Your driver's license number and state (for ID verification)
• Photos of the front and back of your ID
• Your typed signature and the date of signing on the rental agreement
• Your IP address, browser (user agent), and UTC timestamp — captured automatically for signature attribution under Fla. Stat. § 668.50
• Your payment card details — handled by Stripe, not stored on our servers

We do not collect location data, contacts, browsing history, or anything about you outside the booking flow.

3. Why we collect it

• Contact info — to send you booking confirmation, arrival instructions, door code, checkout reminder, and receipts
• ID number and photos — fraud prevention. The person booking has to be the person staying; ID verification is the industry standard
• Signature, IP, timestamp — required for a legally enforceable e-signature under Florida's UETA (§ 668.50)
• Payment card — handled by Stripe for payment processing and, at check-in, security deposit authorization

4. How long we keep it

• Booking records — 7 years (matches Florida's statute of limitations for STR fraud and contract claims)
• ID photos and license number — 7 years, then auto-deleted
• Signed contract PDFs — 7 years
• Payment records — held by Stripe per Stripe's retention (not by us)
• Guest CRM (name + email + booking history) — as long as you're an active customer; delete on request

5. Where it's stored

All data lives in Netlify Blobs, an encrypted-at-rest server-side store in AWS us-east-1. ID photos are held in a separate blob store from ordinary booking records to reduce exposure. Only the owner (Jonathan Brooks) can access the data via password-protected admin functions. No third-party analytics scripts read your personal info.

6. Who we share it with

We do not sell, rent, or share your personal information for marketing purposes. Ever.

We share limited information only with:

• Stripe — payment card and billing address, so they can process your payment (see Stripe's privacy policy)
• Resend — your email address, so booking confirmation + welcome + checkout emails can be delivered
• Netlify — server hosting and storage infrastructure
• Law enforcement — in response to a lawful subpoena, warrant, or court order, or in a safety emergency involving you or a member of your party
• Insurance carrier — if a claim on the property involves your stay (property damage, injury)

7. Your rights

You can, at any time, ask us to:

• See what data we have about you
• Correct anything that's wrong
• Delete your data — subject to the 7-year retention above for booking records legally required to hold
• Export your data as a JSON file
• Opt out of any future marketing email (we don't currently send any; but if we do, unsubscribe will be one click)

Email jonathanb3421@gmail.com with your request. We respond within 30 days.

8. California residents (CCPA)

California residents have specific rights under the CCPA, including the right to know, the right to delete, the right to opt out of sale (we don't sell), and the right to non-discrimination. All rights above apply. To exercise them, email us.

9. EU / UK residents (GDPR)

Data is processed under legitimate interest (executing your booking contract) and legal obligation (retaining records for statutory periods). You have the right to access, rectify, erase, restrict, or object at any time by emailing us. You can also complain to your local data protection authority.

10. Security cameras (disclosed)

The property has four (4) disclosed outdoor cameras (Ring doorbell at the front door + east and west sides + screened lanai for pool safety). No indoor cameras. Video-only on all cameras except the Ring, which records audio at the front entry only. Footage is retained ~30 days and accessed only by the owner. See the house rules for full disclosure.

11. Cookies

This site sets a small session cookie during checkout to remember your booking progress. No third-party ad cookies. If we add analytics in the future, we'll update this policy first.

12. Children

Bookings must be made by an adult (18+). We don't knowingly collect personal information from minors. Children in your party don't need to provide personal info to us.

13. Changes to this policy

If we change how we handle your data, we'll update this page and email active bookings 30 days before the change takes effect.

Questions? Text 602-628-4600 or email jonathanb3421@gmail.com. This policy is written in plain English on purpose — if anything is unclear, ask.