Draft Privacy Policy
Privacy-policy placeholder for review.
This draft must be reviewed and approved before launch. It is not legal advice.
Information collected
This website may collect information that a parent or guardian chooses to submit through a contact or enquiry form, such as name, email address, phone number, child age, service interest and message details. Gift-card requests may collect purchaser name, purchaser email, purchaser phone if supplied, recipient name, recipient email, personal message, selected value, selected payment method and delivery preference.
Why information is collected
Information is collected to respond to enquiries, provide appropriate service information, support booking administration, manage gift-card requests, deliver gift-card emails and maintain gift-card transaction records.
Manual payment confirmation
Gift-card payment is manually confirmed by Calm Cradles. Records may include selected payment method, request reference, confirmation date, administrator identity and internal notes needed for reconciliation and audit purposes. No bank-card details should be collected through the gift-card request form.
Gift-card records
Gift-card transaction records may include request, issue, redemption, adjustment and cancellation information for fraud prevention, financial administration and audit purposes. Unnecessary information about a child should not be collected as part of a gift-card request.
Email delivery provider
An email-delivery provider such as Resend, SendGrid or Postmark may process request confirmations, payment instructions, administrator notifications, recipient gift-card emails, scheduled delivery, resend emails and optional redemption notifications. Provider details should be confirmed before launch.
Scheduled delivery
If scheduled delivery is selected, recipient information and scheduled delivery timing may be retained until the gift card has been sent and as needed for audit and support records.
Contact forms
Contact-form submissions should be connected to a secure form handler before launch. Only information needed to respond to the enquiry should be requested.
Booking providers
If an external booking provider is added, its privacy terms should be reviewed and linked clearly before launch.
Analytics
If analytics are added, visitors should be informed about what is measured and why. Privacy-focused settings should be used where possible.
Cookies
Any cookies or tracking technologies should be documented, with consent controls added where legally required.
Data retention
Personal information should be kept only as long as needed for enquiries, service delivery, gift-card fulfilment, administration, fraud prevention, financial records, audit records or legal obligations.
Data processors
Any third-party processors, such as form, email, booking, hosting or analytics providers, should be listed before launch.
Data-subject rights
Visitors may have rights to access, correct or request deletion of their personal information, subject to applicable law and retention obligations for financial and audit records.
Contact details
Privacy enquiries can be sent to calmcradleswithciara@gmail.com.