Privacy Policy

Introduction

M&M Advisers LLC, doing business as "What To Do by Nana Sue" and "Mobility and Movement Advisers" ("MMA," "we," "us," or "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website what2dobaby.com (the "Website"), use our services, or purchase our products.

Please read this Privacy Policy carefully. By using the Website or our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Website or use our services.

1. Information We Collect

We collect several types of information from and about users of our Website and services.

1.1 Personal Information You Provide Directly

When you interact with our Website or services, you may provide us with personal information, including:

Contact Information:

• Name
• Email address
• Phone number
• Physical address (for in-home services)

Booking and Service Information:

• Service type (in-person class, private consultation, virtual consultation)
• Appointment dates and times
• Location for in-person services or home visits
• Promo codes (if used)

Payment Information:

• Payment processed through Stripe (we do not store card details, PCI-compliant)
• Payment intent ID
• Transaction amount

Health and Safety Information About Your Infant:

To ensure the safety and appropriateness of our educational services, we collect limited health and developmental information about your infant, including:

• Basic developmental information (age, current mobility stage)
• Health conditions or concerns that may affect safe participation in movement activities
• Contraindications to physical activity you disclose to us
• Developmental observations or information you voluntarily share during classes or consultations

Communications:

• Information you provide when you contact us via email, phone, or through the Website
• Feedback, testimonials, reviews, or survey responses
• Any other information you choose to provide

Legal Agreements:

• Terms of Service & Privacy Policy acceptance (version tracked)
• Timestamp of agreement

1.2 Information Collected Automatically

When you access our Website, we automatically collect certain information about your device and usage:

• Page views
• Purchase events
• Anonymized user behavior

1.3 Information from Third Parties

We may receive information about you from third parties, including payment processors, booking platforms, social media, and marketing/analytics providers.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide Services

• Process and manage your bookings and registrations
• Deliver in-person classes, private consultations, and virtual services
• Provide educational materials and products
• Customize and personalize your experience
• Communicate with you about your services, appointments, and bookings

2.2 To Process Payments

• Process transactions and send receipts
• Prevent fraud and unauthorized transactions
• Manage billing and payment issues

2.3 For Safety and Security

• Ensure the safety of participants in our services
• Maintain appropriate health screening and contraindications
• Respond to emergencies or safety concerns
• Comply with our legal and regulatory obligations

3. How We Share Your Information

We do not sell your personal information.

We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google Analytics: Website analytics and usage tracking
• Google Maps API: Address validation and distance calculation
• Google Cloud Firestore: Secure data storage
• Google Calendar API: Appointment scheduling
• Email service providers: For sending newsletters and communications (if you opt in)
• Video conferencing platforms: For virtual consultations (e.g., Zoom, Google Meet)

All service providers are contractually obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.

3.2 Legal Requirements and Protection of Rights

We may disclose your information when required by law or when we believe disclosure is necessary to comply with legal obligations, enforce our terms, protect rights and safety, or prevent fraud.

4. Data Security

We implement reasonable physical, technical, and administrative security measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

Our security measures include:

• Encryption of sensitive data in transit (SSL/TLS)
• Secure servers and data storage
• Access controls limiting who can access personal information
• Regular security assessments
• Secure payment processing through PCI-DSS compliant providers

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Active Client Information: Retained for the duration of our relationship with you and for a reasonable period thereafter
• Health and Safety Information: Retained for 7 years after the last service provided (for business and legal purposes, NOT as medical records)
• Financial and Transaction Records: Retained for at least 7 years for tax, accounting, and legal compliance
• Marketing Communications: Retained until you opt out or unsubscribe

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access and Portability: Request access to and a copy of your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to certain exceptions)
• Opt-Out of Marketing: Unsubscribe from marketing emails or SMS messages

To exercise your rights, contact us at:

Email: whattodobynanasue@gmail.com

7. Children's Privacy

Our services are directed to parents and legal guardians, not to children under 18. We do not knowingly collect personal information directly from children. All personal information about infants and children is provided by parents or legal guardians with their consent.

8. Third-Party Websites and Services

Our Website may contain links to third-party websites, services, or platforms that are not owned or controlled by MMA. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party websites or services you visit or use.

9. Cookies and Tracking Technologies

We do not use first-party cookies. However, third-party services we use (Google Analytics and Stripe) may set cookies for analytics and fraud prevention purposes. These cookies are managed by the respective third-party services and are subject to their privacy policies.

10. California Residents – Additional Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know what personal information we collect
• Right to delete your personal information
• Right to correct inaccurate information
• Right to non-discrimination for exercising your rights

We do not sell your personal information as defined by California law.

To exercise California rights, email: whattodobynanasue@gmail.com

11. International Users

Our services are based in the United States. If you access our Website or use our services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may be different from those in your country.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Effective Date" at the top of this Privacy Policy. Material changes will be communicated by email to registered users and/or prominent notice on our Website.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

14. Consent

By using our Website, booking services, or providing your information to us, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

For health and safety information about your infant, by providing this information when booking services or participating in classes and consultations, you consent to our collection, use, and retention of this information for the limited purposes of ensuring safe participation, screening for contraindications, providing appropriate instruction, and maintaining safety protocols.