Privacy Policy
Last updated: 26.11.2024
Confidentiality and security are core values of Nmbr. We are committed to safeguarding the privacy of our users and customers and ensuring transparency about how we collect, use, and protect your personal data. Below, you will find all necessary information about the data we collect, how we process it, and your rights.
1. Who is the data controller?
This Privacy Policy applies to Easy Flat Inc. (DBA Nmbr), registered at:
345 E 76th St, New York, NY 10021, United States.In this document:
"Nmbr" refers to Easy Flat Inc.
"User(s)" means visitors to the website or users of the services provided by Nmbr.Nmbr processes personal data in compliance with:
General Data Protection Regulation (GDPR) for users in the European Union,
UK GDPR for users in the United Kingdom,
California Consumer Privacy Act (CCPA) for users in the United States.2. What personal data do we collect?
- 2.1 Account and registration information
Collected data:Name, email address, phone number, password, and account preferences.
Purpose:
To create and manage your account and enable access to services.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR). - 2.2 Financial and transactional information
Collected data:Payment card details (processed directly by Stripe), billing address, transaction history.
Purpose:
To process payments and issue invoices.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
Nmbr does not store sensitive financial data, such as credit card numbers. Payment information is securely processed by Stripe, our third-party payment processor. - 2.3 Rental-related information
Collected data:Identification documents (passport/ID), residency address, proof of income, and travel purpose (e.g., work/study).
Purpose:
To facilitate rental agreements and comply with local regulations.
Legal basis:
Performance of a contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). - 2.4 Website usage and cookies
Collected data:IP address, browser type, device type, session duration, and cookies.
Purpose:
To enhance website functionality, analyze usage patterns, and deliver personalized content.
Legal basis:
Legitimate interest (Art. 6(1)(f) GDPR) or consent where required (Art. 6(1)(a) GDPR). - 2.5 Marketing data
Collected data:Name, email address, browsing behavior, and interaction with marketing emails.
Purpose:
To send newsletters, promotional content, and updates.
Legal basis:
Consent (Art. 6(1)(a) GDPR and CCPA).
We collect and process the following types of personal data:
- 2.1 Account and registration information
3. How do we use your data?
Nmbr uses your personal data for the following purposes:
Service delivery:
To manage rental agreements, process payments, and provide support.
Legal compliance:
To meet legal obligations, such as anti-fraud checks and tax reporting.
Marketing and communication:
To send you updates and promotional offers (only with your consent).
Website analytics:
To monitor performance and improve user experience.4. How is your data shared?
Service providers:Including Stripe for payment processing. Stripe collects and processes payment information (e.g., credit card numbers, billing addresses) to complete transactions securely. Stripe’s data handling practices are governed by their Privacy Policy, available here.
Business partners:For facilitating rental agreements (e.g., landlords or property managers).
Legal authorities:When required by law or for legitimate legal purposes.
5. International data transfers
Nmbr operates in the US, UK, and EU, which involves transferring data between these regions.
For users in the EU/UK:Data shared with Stripe for payment processing is transferred to the United States. Stripe complies with GDPR requirements through the use of Standard Contractual Clauses (SCCs) and other recognized safeguards.
Nmbr ensures that all data transfers are conducted with adequate safeguards to protect your information.6. Your rights
For users in the EU/UK (GDPR/UK GDPR):
You have the right to:
Access: Obtain a copy of your personal data.
Rectification: Correct inaccuracies in your data.
Erasure: Request deletion of your data ("right to be forgotten").
Restriction: Limit the processing of your data.
Portability: Transfer your data to another provider.
Objection: Object to processing based on legitimate interest.
To exercise these rights, email us at support@nmbr.homes.For users in the US (CCPA):
California residents have the right to:
Know the categories of personal information collected in the past 12 months.
Access and delete their personal information (with exceptions).
Opt out of the "sale" of personal information.
Equal service and price, regardless of exercising privacy rights.
To exercise these rights, email us at support@nmbr.homes or call us at +1 646 282 87 91.7. Data retention
Nmbr retains personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
Account information: Retained while your account is active.
Financial transactions: Retained for up to 7 years to comply with tax and accounting laws.
Marketing data: Retained until you withdraw consent.
After the retention period, data will be deleted or anonymized. Payment data is securely processed and stored by Stripe for the required retention period under applicable laws.8. Security measures
Nmbr takes data security seriously. We implement:
Encryption: SSL/TLS for data in transit and encryption for data at rest.
Access controls: Role-based access for employees.
Monitoring: Regular security audits and monitoring for unauthorized access.
Nmbr partners with Stripe, which is PCI DSS Level 1 certified, ensuring the highest level of security for payment processing.9. Cookies
Nmbr uses cookies to:
Improve website functionality.
Track user behavior for analytics and marketing.
For more information, see our Cookie Policy.10. Changes to this policy
Nmbr reserves the right to update this Privacy Policy at any time. Changes will be communicated via email or website notifications.
Date of last modification: 26.11.2024