Privacy Policy

A Little Space For Parents – Privacy Policy

(GDPR & CCPA Compliant)  

Last Updated: May 2025 

1. Data Collection & Purpose

US-Specific (CCPA):  

• No sale/sharing of personal data (as defined under CCPA §1798.140(t)(1)).  

• Opt-out link: [Do Not Sell My Data](#) (even though we sell nothing).  

2. Data Rights & Requests  

UK/EU Users (GDPR):  

• Right to access, rectify, or erase data via [Data Subject Request Form](#).  

• 30-day response window (Article 12).  

US Users (CCPA):  

• Right to know categories of data collected (§1798.110(a)).  

• Right to delete (§1798.105(a)) – exceptions apply (e.g., fraud prevention).  

3. Data Security  

Squarespace Measures:  

• TLS 1.2 encryption;  

• PCI DSS-compliant payments (for future paid offerings).  

Our Additions:  

• Annual third-party security audits;  

• Pseudonymization of analytics data.  

4. International Transfers  

• Data processed in US under UK-US Data Bridge and EU-US DPF.  

Contact us through our Contact Form.