Plain-language summary: Pop & Posh collects only what it needs to operate the studio and communicate with families. We do not collect personal information from children under 13. We do not sell your data. We do not use advertising or tracking cookies. We use AI tools internally to help run the business — we never enter customer or children's personal information into those tools. In the event of a data breach affecting your information, we will notify you as required by law. You can request deletion of your data at any time.
Contents
1. Who We Are
Pop & Posh Petite Learn & Play Studio ("Pop & Posh," "we," "us," or "our") is a children's enrichment studio located in Dorchester, Boston, Massachusetts. We operate this website (popandposh.com) and use trusted third-party platforms for booking, payment processing, and communications. This Privacy Policy applies to information collected through our website and those platforms.
2. What We Collect
Information you give us directly
- Name and email address (newsletter signup, contact form)
- Child's first name and age (for program registration — via our booking platform)
- Event inquiry details (date, type of event, number of guests)
- Payment information (handled entirely by our payment processor — we do not store card details)
Information collected automatically
- Basic server logs (IP address, browser type, pages visited) — retained for 30 days for security purposes only
- No analytics platform is used. No advertising pixels. No tracking.
Information we do NOT collect
- Personal information from children under 13
- Social media profile data
- Health or medical information
- Location data beyond your stated city/neighborhood
3. Children's Privacy (COPPA)
Pop & Posh complies with the Children's Online Privacy Protection Act (COPPA), as updated by the FTC in 2025, and applicable state children's privacy laws.
Our website and communications are directed to parents and caregivers, not to children. We do not knowingly collect personal information from children under 13 through this website.
When registering for classes or programs through our booking platform, parents may provide a child's first name and age to facilitate program placement. We collect only the minimum necessary information. We do not collect a child's last name, contact information, persistent identifiers, or any information that could be used to contact a child directly.
Parental rights under COPPA: Parents and guardians have the right to:
- Review any information we have collected about their child
- Request deletion of their child's information
- Refuse further collection or use of their child's information
- Withdraw consent at any time
To exercise any of these rights, contact us at Hello@popnposhcreations.com. We will respond within 10 business days.
We do not use targeted advertising, and we require any third-party services we use to comply with COPPA when used in connection with our studio.
4. Cookies & Tracking
We use only essential cookies required to operate this website. We do not use:
- Advertising or retargeting cookies
- Analytics cookies (Google Analytics, Meta Pixel, etc.)
- Social media tracking cookies
- Persistent cross-site tracking identifiers
The essential cookies we use include:
pp_cookie_consent— Stores your cookie consent preference (local storage, never transmitted to a third party)
You may decline cookies via the consent banner. Declining does not affect your ability to use this website.
Our booking and payment platform may set its own cookies when you visit their pages. Please review the relevant third-party privacy policy linked in Section 7 for details.
5. Our Use of AI Tools
Pop & Posh uses AI tools internally to help operate the business (for example, content drafting, website development, and communications). We maintain a strict internal policy: no customer personal information, no children's information, no booking data, and no payment information is ever entered into any AI tool.
The AI tools we use internally are subject to their own privacy and data retention policies. We favor business or enterprise-tier AI platforms that offer stronger contractual data protections. We do not use AI to make automated decisions about customers, and we do not use AI to process, analyze, or profile the personal information you share with us.
If our use of AI tools changes in a way that could affect your personal information, we will update this policy and notify subscribers accordingly.
6. How We Use Your Information
We use the information we collect to:
- Respond to inquiries, booking requests, and event questions
- Send you our email newsletter (only with your explicit consent)
- Notify you about program updates, schedule changes, and studio news
- Improve our website and programming
- Comply with legal obligations
We do not use your information for automated decision-making, profiling, or targeted advertising.
7. Sharing Your Information
We do not sell your personal information. We do not share your information with third parties for marketing purposes. We share information only in the following limited circumstances:
- Booking & payment processor — our trusted platform handles class registrations and payment transactions. We share only the information necessary to complete your booking. Card details are never stored by Pop & Posh. Please contact us for the specific privacy policy of our current provider.
- Waitlister — our founding family waitlist platform. They receive your email address when you join the waitlist. See Waitlister's Privacy Policy.
- Email service provider — for sending newsletters (only to subscribers who opted in).
- Legal requirements — if required by law, court order, or to protect the safety of our community.
8. Data Retention
We retain personal information only for as long as necessary:
- Newsletter subscriber data: until you unsubscribe
- Waitlist data: managed by Waitlister — see their policy for retention details
- Booking and registration data: as required by our booking platform and applicable business records law — typically no more than 3 years
- Contact form submissions: 12 months
- Server logs: 30 days
Per COPPA requirements, we do not retain children's personal information beyond what is reasonably necessary to fulfill the purpose for which it was collected.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate information
- Deletion: Request that we delete your personal information
- Opt-out of communications: Unsubscribe from our newsletter at any time via the unsubscribe link in any email
- Data portability: Request your data in a portable format
California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale (we do not sell data). To submit a request, email Hello@popnposhcreations.com with "Privacy Request" in the subject line.
10. Security & Breach Notification
We take reasonable technical and organizational measures to protect the personal information we hold. Our website is served over HTTPS. Payment information is handled exclusively by our payment processor and is never stored on our systems.
We maintain an internal security review practice and do not enter customer or children's personal data into any third-party AI or unvetted software tools.
In the event of a data breach that affects your personal information, Pop & Posh will notify affected individuals as required by the Massachusetts Data Security Law (M.G.L. c. 93H) and any other applicable law — including the nature of the breach, the information affected, and steps we are taking to address it. Notification will be sent to the email address you provided, without unreasonable delay.
No method of internet transmission is 100% secure. If you have concerns about the security of your information, please contact us at Hello@popnposhcreations.com.
11. Contact & Data Requests
For any privacy questions, data requests, or to exercise your rights (including parental rights under COPPA), please contact:
Pop & Posh Petite Learn & Play Studio
Dorchester, Boston, Massachusetts
Email: Hello@popnposhcreations.com
Phone: (617) 396-4003
We will respond to all requests within 10 business days.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If changes are material, we will notify newsletter subscribers by email. Continued use of our website after changes constitutes acceptance of the updated policy.