1. Introduction

Casa Mama ("we," "us," or "our") respects your privacy and is committed to protecting the personal

information you share with us. This Privacy Policy explains what information we collect through our website

(the "Site"), how we use and protect it, and the choices you have. By using the Site, you agree to the practices

described in this Policy.

We understand that the postpartum season is a tender and personal time. The trust you place in us when

sharing your information — including health-related details during intake — is something we take seriously

and handle with care.

2. Information We Collect

Information you provide directly. When you book a session, purchase products, complete intake or consent

forms, join our email list, or contact us, we may collect your name, email address, phone number, mailing and

billing address, and the details of your inquiry or order.

Health and wellness information. When you book services, our intake process may ask about your

pregnancy and birth history, postpartum timeline, provider clearance status, health conditions, medications,

and allergies. This information is collected solely to provide services safely and appropriately, and to

determine which offerings are suitable for your stage of recovery.

Payment information. Payments are processed by third-party payment processors (such as Stripe, PayPal, or

Squarespace Payments). We do not store your full credit card number on our systems.

Information collected automatically. Like most websites, our Site collects certain technical information

automatically through cookies and similar technologies, including your IP address, browser type, device

information, pages visited, and how you arrived at our Site.

3. How We Use Your Information

We use the information we collect to: schedule and provide services and fulfill product orders; communicate

with you about bookings, purchases, and inquiries; assess whether services are appropriate for your

postpartum stage and individual circumstances; send newsletters or promotional content if you have opted in

(you may unsubscribe at any time); improve our Site, services, and product offerings; and comply with legal

obligations and protect our legal rights.

We do not sell your personal information, and we do not share your health-related intake information for

marketing purposes.

4. How We Share Information

We share personal information only as needed to operate our business, including with: service providers such

as our website platform (Squarespace), scheduling software (Acuity Scheduling), payment processors, email

service providers, and shipping carriers, each of which is authorized to use your information only to perform

services for us; professional advisors such as attorneys or accountants, where necessary; and legal

authorities, when required by law, court order, or to protect the safety and rights of any person.

If Casa Mama is ever involved in a business transition such as a sale or restructuring, personal information

may be transferred as part of that transaction, subject to this Policy's protections.

5. A Note on Health Information

Casa Mama is a traditional wellness practice and is not a medical provider, health plan, or healthcare

clearinghouse; the health information you share with us through this Site is therefore generally not governed

by HIPAA. Regardless, we treat all health-related information you share with us as confidential, restrict

access to it, and use it only for the purposes described in this Policy. We will not disclose your health

information to third parties except as needed to provide your services, with your consent, or as required by

law.

6. Cookies and Analytics

Our Site uses cookies and similar technologies provided by Squarespace and analytics services to keep the

Site functioning, remember your preferences, understand how visitors use the Site, and measure the

performance of our content. You can manage or disable cookies through your browser settings, though some

Site features may not function properly without them.

7. Email Communications

If you join our email list, we will send you content such as postpartum wellness education, product updates,

and offers. Every marketing email includes an unsubscribe link, and you may opt out at any time.

Transactional emails — such as booking confirmations, intake reminders, and order receipts — will still be

sent as needed to provide your services and orders.

8. Data Retention and Security

We retain personal information for as long as needed to provide services, meet legal and tax obligations,

resolve disputes, and enforce our agreements. Intake and consent records are retained for 7 years consistent with professional recordkeeping practices.

We use reasonable administrative, technical, and physical safeguards to protect your information, including

the security measures provided by our platform and service providers. However, no method of transmission or

storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

You may: request access to the personal information we hold about you; request that we correct or delete your

information, subject to legal retention requirements; opt out of marketing communications at any time; and

decline to provide certain information, understanding that some services may not be available without it.

Depending on where you live, you may have additional rights under laws such as the California Consumer

Privacy Act (CCPA/CPRA) or the EU/UK General Data Protection Regulation (GDPR), including rights to

know, access, correct, delete, and port your data, and the right not to be discriminated against for exercising

those rights. We do not sell or share personal information as those terms are defined under California law. To

exercise any of these rights, contact us using the information below; we will verify your request and respond

within the timeframe required by applicable law.

10. Children's Privacy

Our Site and services are intended for adults. We do not knowingly collect personal information from children

under 13 (or under 16 where applicable law sets a higher threshold). If you believe a child has provided us

personal information, please contact us and we will delete it.

11. Third-Party Links

Our Site may link to third-party websites, social media platforms, and resources. This Policy does not apply to

those third parties, and we are not responsible for their privacy practices. We encourage you to review the

privacy policies of any site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above reflects the most recent

revision. Material changes will be posted on this page, and your continued use of the Site after changes are

posted constitutes acceptance of the revised Policy.

13. Contact Us

If you have questions about this Privacy Policy or how your information is handled, please contact:

Casa Mama

Phoenix, Arizona

Email: casa.mama.phx@gmail.com