Privacy Policy.

This policy covers the Zoo Creatures website (zoocreatures.com) and the information you give us in the store, by phone or by email. “Zoo Creatures,” “we” and “us” mean Zoo Creatures LLC, 149 Plaistow Road, Plaistow, NH 03865.

Our parent company is NERD (New England Reptile Distributors), which shares our building and runs the tours, parties and shows you can request on this site. NERD also has its own online store at newenglandreptilestore.com (opens in a new tab). When you buy from NERD's website, NERD's own privacy policy applies to that purchase.

New Hampshire's consumer data privacy law (RSA chapter 507-H, in effect since January 1, 2025) gives New Hampshire residents rights over their personal data and sets rules for the businesses that handle it.

The law applies to businesses that handle the personal data of at least 35,000 consumers a year, or at least 10,000 consumers while earning more than a quarter of their revenue from selling personal data. As a single pet store that doesn't sell data, we believe we are below those thresholds. We follow the law's rules anyway, and we give the same rights to every customer, whether you live in New Hampshire, Massachusetts or anywhere else.

When you send a booking request

The booking form on our tour, party and show pages asks for your name, phone number and email address, the type of booking, your preferred dates, your group size and any notes you add. It also records which page you sent it from. Please don't put a child's full name or other private details in the notes. A first name and age is plenty.

The form also has two spam checks: a hidden field that only bots fill in, and a check on how fast the form was sent. Neither one identifies you.

If our website can't deliver your request, the form opens your own email app with the request filled in, addressed to us. Nothing is sent until you press send there, and then your email provider handles it like any other email.

When you call, email or stop in

• Your name and contact details, if you give them to us.
• Messages, voicemails and emails you send us, and anything you choose to include in them.
• Sales records from our register. If you give us your name, phone number or email for a special order, a service or a receipt, we keep it with that sale.
• Live-animal sales: New Hampshire requires pet vendors to record the buyer's name and address for every animal sold (Agr 1700). We ask for it at the register and keep it for at least one year, as the state requires.
• If we care for your animal (boarding, a nail trim or a husbandry consultation): the species, feeding and care notes, and an emergency contact you give us.

Information collected automatically

• Basic technical data our website host records when any page loads: IP address, browser type, the page requested and the time. This is used to run and secure the site.
• Data collected by Google when an embedded Google Map or YouTube video loads (see "Who we share it with").

What we don't collect online

The website has no accounts, logins, online orders, online reservations or payments, and no contact form other than the booking request. We never ask for card numbers on the site.

In the store

When you buy an animal, we may ask to see photo ID to confirm your age. We look at it and hand it back. We never scan, photograph, copy or store your driver's license or its number. New Hampshire law (RSA 263:12) doesn't allow it.

Card payments in the store are handled by our card processor. We don't keep your full card number.

Sensitive data

We do not ask for sensitive data as the law defines it (such as health conditions, religious beliefs, sexual orientation, citizenship status, biometric or genetic data, or precise location). If we ever need it, we will ask for your consent first.

• To answer your booking request, call you to confirm a date, and run tours, parties and shows.
• To answer your questions and give care advice.
• To handle sales, special orders, returns and services in the store.
• To call, text or email you about your own request, order or animal. We don't send marketing messages.
• To keep the records that tax rules and New Hampshire pet-vendor rules require.
• To keep the website and our systems working and secure, and to block spam and fraud.
• To follow the law and respond to lawful requests.

We share personal data only with the services that help us run the store, and only what each one needs. These are the kinds of companies involved:

• Our website host (Vercel): serves the site, passes booking requests to us, and keeps short-term technical logs.
• Our team messaging service (Slack): staff get an alert with each booking request so someone can call you back.
• Our email delivery service (Resend): sends booking requests from the website to our staff inbox.
• Our email provider (Google): stores the emails you send us and our replies.
• Our register and card processor: records sales made in the store and processes card payments.
• NERD, our parent company: when your booking, purchase or question involves NERD animals or staff.

Embedded maps and videos

Our Visit pages show a Google Map, and one event page shows a YouTube video. When those load, Google receives your IP address and browser details and may set its own cookies, under Google's privacy policy (opens in a new tab). We load YouTube videos in its privacy-enhanced mode. All other videos on the site are hosted by us.

Social media

Links to Instagram, Facebook and X take you to those sites, and their own privacy policies apply there. The Instagram photos and videos shown on our site are copies we host ourselves, so viewing them does not send your data to Instagram.

Other disclosures

We may disclose information if the law requires it, to protect the safety of people or animals, or as part of a sale or transfer of the business (in which case this policy's promises go with the data).

No sale of personal data

We do not sell personal data, and we do not share it for targeted advertising. If that ever changes, we will update this policy first and give you a way to opt out.

Our website does not set cookies of its own, and it does not use advertising cookies, tracking pixels or website analytics. If that ever changes, we will update this policy first.

Our own code saves a few small notes in your browser. None of them contain personal data:

• A note that the store intro has already played, so it plays only once per visit. It clears when you close the tab.
• A short-lived note that helps a page reload itself if it fails to load. It also clears when you close the tab.
• An older version of the site let you save a pickup list in your browser. That feature is turned off. If you saved a list back then, it stays only in your own browser, and clearing your site data removes it.

Embedded Google Maps and YouTube videos may set cookies of their own. You can block or delete cookies in your browser settings, and the site will still work.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale of your data and of targeted advertising. Since we do neither, nothing on the site changes.

You can ask us to:

• Confirm whether we hold personal data about you, and let you see it.
• Correct data that is wrong.
• Delete data you gave us or that we hold about you.
• Give you a copy of your data in a portable, commonly used format.
• Opt you out of targeted advertising, the sale of your data, and profiling that leads to legal or similarly significant decisions. We don't do any of these, but you can still record the request.

Requests are free. (If requests are clearly unfounded or repeated over and over, the law lets us charge a reasonable fee or decline, and we will explain why.) We will not treat you differently, charge you more or refuse you service for using these rights.

Some data we must keep even after a deletion request, such as sales records required for tax and pet-vendor rules. If so, we will tell you what we kept and why.

• Email ZooCreaturesPetStore@gmail.com with “Privacy request” in the subject line.
• Call (603) 382-3338 during store hours.
• Or ask at the counter and we will write it down for you.

To protect your data, we will confirm it's you, usually by matching your name with the email or phone number you used with us. Someone you authorize can opt out on your behalf.

We respond within 45 days. If we need more time, we may extend once by another 45 days, and we will tell you why within the first 45 days.

If we turn down your request, in whole or in part, you can appeal. Reply to our answer or email ZooCreaturesPetStore@gmail.com with “Privacy appeal” in the subject line. We will review it and give you a written decision with our reasons within 60 days.

If we deny your appeal, you can contact the New Hampshire Attorney General's Consumer Protection and Antitrust Bureau, 1 Granite Place South, Concord, NH 03301, or online at doj.nh.gov/consumer (opens in a new tab).

Kids love our animals, and our website is written for families. But the site is not directed at children under 13, and we do not knowingly collect personal data from children under 13, consistent with the federal Children's Online Privacy Protection Act (COPPA). Booking requests should come from a parent or another adult. If you believe a child under 13 has sent us personal data, contact us and we will delete it.

Animal purchases must be made by an adult. See our Live Animal Sales policy.

• Sales records: as long as tax and accounting rules require, generally up to 7 years. Animal sale records are kept at least 1 year, as New Hampshire pet-vendor rules require (Agr 1705.03).
• Booking requests (Slack and email): up to 24 months, then deleted.
• Emails and messages: as long as needed to answer you and handle any follow-up.
• Boarding and service notes: as long as you're a customer, so we know your animal's history.
• Website host logs: kept for a short time by our host, then deleted automatically.

When we no longer need data, we delete it or remove what identifies you.

We use reasonable administrative, technical and physical safeguards. The website runs over an encrypted connection (HTTPS). Only staff who need customer information can see it, and our accounts are password protected. Card numbers never pass through our website.

No system is perfectly secure, but we work to fix problems quickly when we find them.

If a security breach exposes your personal information, we will follow New Hampshire's breach notification law (RSA 359-C:19 to 359-C:21). That means notifying affected people as soon as possible, notifying the New Hampshire Attorney General, and, if more than 1,000 people are affected, notifying the national consumer reporting agencies.

When we change this policy, we will update the date at the top of this page. If a change is significant, such as adding online ordering or using your data for a new purpose, we will update this page before the change takes effect and post a notice on the site.

Zoo Creatures, 149 Plaistow Road, Plaistow, NH 03865. Email ZooCreaturesPetStore@gmail.com, call (603) 382-3338, or ask at the counter.