Privacy Policy

Last Updated: September 1, 2026

We take your privacy very seriously. Please read this Privacy Policy (the "Policy") carefully as it contains important information on who we are, how and why we collect, store, use, and/or share your personal information. It also explains your rights in relation to your personal information and how to contact us if you have any questions or concerns. 

This Policy applies to the processing and collection of personal information by Three Bird Nest, LLC (“3BN”, “we”, “our”, or “us”) through our website, (www.threebirdnest.com) (the “Website”), our products and services and any other tools, products, or services that link to or reference this Policy (collectively, the “Services”).

1. Key Terms. It would be helpful to start by explaining some key terms used in this policy:

2. Personal Information We Collect About You. We collect information that can identify or reasonably be linked to you (“Personal Information”). In the last 12 months, we have collected the following categories of consumer Personal Information through our Services:

Our Website may link with social media platforms, including TikTok, YouTube, Pinterest, Instagram, and Facebook. [RR4.1]When you link a social media account to our website, then we may collect information about that social media account and share information with that social media account as described in the connection process. This collected information may include, but is not limited to, your name, email address, demographic information from your profile, friend lists, postings or other content, and your profile picture. You acknowledge and agree that we are not responsible for the data collection or use practices of any such connected social media platform. You should read each social media platform’s privacy policy before linking that social media account.
You may choose not to provide Personal Information, (subject to the controls offered by your personal device’s (e.g., mobile device, laptop, or desktop computer) operating system), but this may prevent you from receiving certain features of the Services.

3. Other Data We May Collect. Outside of the categories listed above, we may collect other Personal Information through your interactions with us online, by phone, email, chat, or mail in the context of: 

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of your order; and
• Responses to your inquiries.

4. How Your Personal Information is Collected.

• Directly From You. We collect most of this Personal Information directly from you – via our “Website”, by telephone, text and/or email.
• Information Automatically Collected. We also automatically collect certain non-Personal Information when you visit or navigate the "Website", that is, information that does not personally identify an individual (“non-Personal Information”). This non-Personal Information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website, and other technical information. This information is primarily needed to maintain the security and operation of our Website, and for our internal analytics and reporting purposes. We will not use non-Personal Information to try to identify you, and if we associate any Non-Personal Information with information that personally identifies you, then we will treat it as Personal Information. As discussed in more detail below, we sometimes use cookies and other automatic information gathering technologies to gather Personal Information and Non-Personal Information.
  •  Examples of the Non-Personal Information we collect includes:
    • Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Website and which we record in log files. This log data may include your IP address, device information, browser type, settings and information about your activity on the Website (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take, device event information (such as system activity, error reports and hardware settings).
    • Device Data. Information about your computer, phone, tablet, or other device you use to access the Website. This device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
    • Location Data. Information about your device’s location (but not your precise geographic location). How much information we collect depends on the type and settings of the device you use to access the Website. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your location setting on your device.
      
• Cookies and Automatic Information Gathering Technologies.
  • Every time you use the Website (e.g., access a webpage), we collect certain information regarding that use.  For example, to improve our Website, we collect how, when, and which parts of the Website or its features you use. Also, we may use your device’s unique identifier (UDID) or other unique identifiers to assist us in collecting and analyzing this data.
  • To assist us in collecting and storing this information, we may employ a variety of technologies, including “Cookies,” local browser storage, and “web beacons,” “pixels,” or “tags.” A “Cookie” is a small amount of data a website operator, or a third party whose content is embedded in that website, may store in your web browser and that the website operator or, as applicable, the third party, can access when you visit the website. A web beacon, pixel or tag is a small, usually-transparent image placed on a web page that allows the operator of that image, which may be the operator of the website you visit or a third party, to read or write a Cookie.
  • Your operating system and web browser may allow you to erase information stored in Cookies and local browser storage. You may also be able to set your browser to refuse all website storage or to indicate when it is permitted, but some features of our Services may not function properly without it.  We may use Cookies to keep you logged in, save your preferences for the Website, and to collect information about how you use our Website.
  • More information about managing Cookies is available here[RR7.1]. To learn how to manage privacy and storage settings for your local browser storage, please refer to the end user documentation for your browser.
  • Online Tool Providers, cookies, web beacons, pixels, tags, and similar third party technologies are collectively referred to in this Policy as “Tracking Technologies.” 3BN uses Tracking Technologies to help identify and track visitors, analyze how the Website is used, and understand user preferences. These Tracking Technologies may collect information automatically, including Personal Information and Non-Personal Information, which are subject to the privacy policies of the applicable Tracking Technologies. 3BN does not control these Tracking Technologies’ data practices, and the use and disclosure of information collected by such Tracking Technologies are governed by the respective providers’ privacy policies. Certain Tracking Technologies may allow you to opt out of certain collection and/or uses of your information. For more information about the Tracking Technologies used by 3BN (and/or that we reserve the right to use), please see here:
    

• Information Collected From Other Sources. In order to enhance our ability to provide relevant marketing, offers, and services to you, and to update our records, we may collect limited data from public databases, marketing partners, and other outside sources.

5. How and Why We Use Your Personal Information. We only process your information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law, like with your consent, to comply with laws, to answer your requests, fulfil online orders, to protect your rights, or to fulfil our legitimate business interests.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

The table below explains what we use your personal information for and our reasons for doing so: 

6. Promotional Communications. We may use your Personal Information to send you updates by email, text message, telephone or mail about our products or services, including exclusive offers, promotions or new products or services. 

We have a legitimate interest in processing your Personal Information for promotional purposes (see above “How and Why we use Your Personal Information”). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly. 

We will always treat your Personal Information with the utmost respect and never sell it to other organizations for marketing purposes. 

You have the right to opt out of receiving promotional communications at any time by: 

• Contacting us at [email protected];
• Using the “Unsubscribe” link in emails or “STOP” number in texts; or

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.

7. Who We Share Your Personal Information With. We may share your Personal Information with third-parties, including our third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work. The categories of third parties we may share Personal Information with are as follows: 

• "Service Providers", which are third party companies, agents, contractors, service providers, or others engaged to perform functions on our behalf to help deliver our products and/or services to you, such as payment service providers, order fulfillment service providers, warehouses and delivery companies. When we use a Service Provider, we require that the Service Provider use and disclose the Personal Information received from us only to provide their services to us or as required by applicable law.;
• “Online Tool Providers,” which are licensors of software that we include in, or use with, the Services, including an application program interface (“API”) or software development kit (“SDK”), which provides a specialized function or service to us and that requires the transmission of Personal Information and/or non-Personal Information to the Online Tool Provider. Online Tool Providers may have the right to use Personal Information and non-Personal Information about you for their own business purposes. Use and disclosure of Personal Information and non-Personal Information by an Online Tool Provider is described in its privacy policy.
• Our Payment Providers, which may be regulated as financial services companies and/or subject the rules of the payment card networks. Personal Information received by a Payment Provider may be used for its own purposes, including compliance with legal and audit obligations. See Section 2 above for some of the Payment Providers we use. 
  
• Other third party and Service Providers and Online Tool Providers we use to help us run our business, such as marketing agencies, data analytic service providers, ad networks, performance monitoring tools, retargeting platforms, affiliate marketing programs, sales and marketing tools, social networks, communication and collaboration tools, or website hosts;
• Third parties approved by you, including social media sites you choose to link your account to or third-party payment providers.

We only allow our Service Providers to handle your Personal Information if we are satisfied they take appropriate measures to protect your Personal Information. We also impose contractual obligations on service providers to ensure they can only use your Personal Information to provide services to us and to you. 

We may disclose and exchange Personal Information to third parties when we believe, in good faith and in our sole discretion, that such disclosure is reasonably necessary to (a) enforce or apply the terms and conditions of the Services, including investigation of potential violations thereof, (b) comply with legal or regulatory requirements or an enforceable governmental request, (c) protect the rights, property or safety of us, our users or other third parties, (d) submit insurance claims, cooperate with insurance investigations, and fulfil insurance subrogation activities, (e) prevent a crime or protect national security, or (f) detect, prevent or otherwise address fraud, security or technical issues.

Finally, we reserve the right to share or transfer information (including your Personal Information) to a third party, in the event of a sale, merger, or transfer of all or substantially all of the assets of our company relating to the Services, or in the unlikely event of a bankruptcy, liquidation, or receivership of our business. We will use commercially reasonable efforts to notify you of such transfer, for example, via email or by posting notice on our website. The recipient of the information will be bound by confidentiality obligations.

8. Personal Information We Disclosed for a Business Purpose.

In the preceding 12 months, we have not sold any Personal Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. 

In the preceding 12 months, we have disclosed for a business purpose to one or more third parties the following categories of Personal Information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household: 

• Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers);
• Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, his or her name, signature, physical characteristics or description, address, telephone number, bank account number, credit card number, debit card number, or any other financial information;
• Commercial information (e.g., records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
• Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with the Website, application, or advertisement);
• Geolocation data;
• Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, abilities, and aptitudes.

9. Where Your Personal Information is Held. Information may be held at our offices and those of our third party agencies, service providers, representatives and agents as described above (see above: “Who We Share Your Personal Information with”).

Some of these third parties may be based outside the European Economic Area. For more information, including on how we safeguard your Personal Information when this occurs, see below: “Transferring Your Personal Information Out of the EEA”. 

10. How Long Your Personal Information Will Be Kept. We will keep your Personal Information while you have an account with us or while we are providing products or services to you. Thereafter, we will keep your personal information for as long as is necessary:

• To respond to any questions, complaints or claims made by you or on your behalf;
• To show that we treated you fairly; or
• To keep records required by law.

We will not retain your Personal Information for longer than necessary for the purposes set out in this policy. When it is no longer necessary to retain your Personal Information, we will delete or anonymize it.

11. Your Rights Under the CCPA. This Privacy Notice for California Residents (the “CCPA Notice”)[RR10.1] is intended to provide residents of California with the disclosures and rights information required under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA"). This CCPA Notice applies only if you reside in the State of California (you are a “California Consumer”).

For purposes of this CCPA Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Consumer or household. Personal Information does not include publicly available information, deidentified information, or aggregated consumer information, each as defined under the CCPA.

“Sell,” “Selling,” “Sale,” or “Sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Personal Information to another business or a third party for monetary or other valuable consideration.

“Share”, “Shared,” or “Sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Personal Information to a third party for Cross-context Behavioral Advertising, whether or not for monetary or other valuable consideration.

“Cross-context Behavioral Advertising” means the targeting of advertising to a consumer based on that consumer’s Personal Information obtained from activity across businesses or distinctly-branded websites, applications, or services, other than the business or distinctly-branded website, application, or service with which the consumer intentionally interacts.  (In other words, if we send you an ad based solely on your interaction with us or our Services, this is not Cross-context Behavioral Advertising.)  

“Sensitive Personal Information” means Personal Information that is not publicly available and reveals one or more of the following:

• A consumer’s Social Security, driver’s license, state identification card, or passport number;
• A consumer’s account log-in, financial account, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
• A consumer’s precise geolocation;
• A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership;
• The contents of a consumer’s mail, email, and text messages unless we are the intended recipient of the communication;
• A consumer’s genetic or biometric data;
• A consumer’s neural data; or
• Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation.

“Verifiable Request” means that the identifying information provided by a consumer in connection with a request matches the Personal Information of the consumer already maintained by us. Identifying information you can submit in order to permit 3BN to verify your Verifiable Request may include your first and last name, and the email address that is associated with your account, and a secure confirmation code that we provide to you via email.

11.1 Information We Collect:

In the past twelve (12) months, 3BN has collected the following categories of Personal Information from California Consumers

In the past twelve (12) months, 3BN has not collected Sensitive Personal Information from California Consumers.[RR12.1]
3BN obtains this Personal Information from the following types of sources:

• Directly from you. For example, from forms you complete or Services that you purchase.
• Indirectly from you. For example, from information automatically sent by your web browser or from analyzing data about your actions on our Website.
  

Use of Personal Information

3BN may use, Share, or disclose the Personal Information we collect for one or more of the following “Business Purpose(s):”

• To fulfill or meet the reason you provided the information;
• To provide our Website or online services;
• To facilitate Cross-context Behavioral Advertising;
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
• To respond to your requests under the CCPA, as amended;
• For any other purpose described to you when we collect your Personal Information; and
• For any other acceptable purposes as set forth in the CCPA.
  

Unless we notify you otherwise, we will not collect additional categories of Personal Information, nor use the Personal Information we collect for any other materially different, unrelated, or incompatible purposes.

Retention of Personal Information

We retain each category of your Personal Information for no longer than is reasonably necessary for one or more Business Purposes, subject to your right to request we delete your Personal Information. Due to the nature of the services, it is not possible to predict the length of time that we intend to retain your Personal Information. Instead, we use the following criteria to determine whether it remains reasonably necessary to retain your Personal Information for one or more disclosed Business Purpose(s):

• Whether or not there is a retention period required by statute or regulations;
• Pendency of any actual or threatened litigation for which we are required to preserve the information;
• Generally accepted best practices in our industry; and/or
• Pendency of applicable statutes of limitations for potential legal claims.    

When we determine that it is no longer reasonably necessary to retain your Personal Information for one or more disclosed Business Purpose(s) based on the above criteria, we will delete your Personal Information.

Disclosure of Personal Information

3BN may disclose Personal Information to our “service providers”, to our “contractors”, and to “third parties” (each as defined by the CCPA) for a Business Purpose.  When we disclose Personal Information for a Business Purpose, we enter into an agreement with the receiving party that describes the purpose for sharing the Personal Information, and that requires the receiving party to keep that Personal Information confidential. In the case of disclosures to our “service providers,” our “service providers” are obligated not to use the Personal Information for any purpose other than performing the services according to their agreement with us. In the case of our “contractors”, our “contractors’ are obligated not to use the Personal Information for any purpose unrelated to the business purpose for which we’ve engaged them.

We may disclose your Personal Information with the following categories of entities: “service providers,” “contractors,” and “third party“ advertisers and business partners.

In the past twelve (12) months, 3BN has not Sold any Personal Information about its California Consumers.

We Share Personal Information, subject to your right to opt-out of those Sharing. In the past twelve (12) months, 3BN has Shared the following categories of Personal Information about its California Consumers:

Your Rights and Choices

You may submit a Verifiable Request for the information listed above, or exercise any of your rights enumerated under this Notice, by calling us at (925) 281-5332, or by completing a form on our website, available here https://www.threebirdnest.com/pages/privacy-rights. You may also submit a Verifiable Request on behalf of your minor child.

After we receive your Verifiable Request, we will provide to you, in writing and free of charge (unless your request is excessive, repetitive, or manifestly unfounded), the requested information for the 12-month period preceding your request (unless you specifically request disclosure beyond such 12-month period, in which case, we will process your request with respect to Personal Information we have collected during the time period you specify, provided that (a) the earliest date that your request may apply to is January 1, 2022, and (b) processing your request does not require disproportionate effort). You can choose to have this information delivered to you by postal mail, or electronically. We will try to respond to your verified request within forty-five (45) days of receipt, but if we require more time (up to another forty-five (45) days) we will inform you of the reason and extension period in writing. Please note that we are not required to comply with your request for information more than twice in any 12-month period. If applicable, our response will explain the reasons why we cannot comply with your request.

Should you choose to exercise any of the rights enumerated under this Notice, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, please be aware that it may be a functional necessity for our Services to have Personal Information about you in order to operate, and we may not be able to provide some or all of our Services to you if you direct us to delete your Personal Information. 

12. Keeping Your Personal Information Secure. We have appropriate security measures in place to prevent Personal Information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your Personal Information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We continually test our systems and are ISO 27001 certified, which means we follow top industry standards for information security. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so. 

13. How to Exercise Your Rights. Except for requests by California Consumers to exercise rights under the CCPA, which are addressed in Section 11 of this Policy, if you would like to exercise any of your rights as described in this Privacy Policy, please: 

• Complete a data subject request form available on our website at https://threebirdnest.zendesk.com/hc/en-us/requests/new;
• Email us at [email protected]; or
• Mail a request to: