Privacy Policy

1. Introduction & Who We Are

Welcome to Maternal Support Co. ("we," "our," "us," operating at maternalsupportco.com). We provide digital business templates, legal agreements, educational toolkits, and custom website design services for doulas, midwives, lactation consultants, and maternal wellness providers.

We are committed to transparent data practices and respecting your privacy rights. If you have any questions regarding this policy or wish to exercise your legal data rights, contact us via our Unified Support Desk or email hello@maternalsupportco.com.

2. Personal Data We Collect

We only collect the minimal personal data required to process digital orders and provide requested web design services:

• Transactional & Order Information: Your full name, email address, order timestamp, purchased items, and transaction reference ID.
• Payment Information: All payment transactions are handled directly through authorized PCI-DSS compliant third-party processors (e.g., Stripe, Lemon Squeezy, PayPal). We never store, see, or retain your credit card number, CVV, or banking passwords on our servers.
• Service Inquiry Details: Information submitted voluntarily via our website inquiry form (e.g., your city, maternal specialty, practice website, phone number).
• Technical & Device Data: Minimal anonymized technical data (browser type, device viewport, country) to ensure page responsiveness.

3. Legal Bases for Processing (EU & UK GDPR)

Under Article 6 of the General Data Protection Regulation (GDPR), we process your data under the following lawful bases:

• Contractual Necessity: To deliver your purchased digital downloads and provide custom website deliverables.
• Legal Obligation: To maintain mandatory accounting, tax, and sales receipt records required by fiscal authorities.
• Legitimate Interests: To prevent fraudulent orders, protect our copyrighted templates from unauthorized resale, and maintain site security.
• Consent: For voluntary email newsletter subscriptions, which can be withdrawn at any time with one click.

4. Technical Enforcement: Data Retention & Auto-Purging Policy

In strict compliance with the GDPR "Storage Limitation" principle (Article 5(1)(e)), we do not keep personal data longer than necessary:

• Order Records: Retained for 180 days to allow customer redownload verification and support inquiries. After this period, personal customer identifiers (IP addresses and personal notes) are automatically purged or anonymized.
• Tax & Accounting Minimums: Basic invoice transaction summaries (without sensitive personal data) are preserved for statutory tax audit periods (typically 5–7 years as required by international tax law).
• Inquiry & Contact Submissions: General contact messages are purged from server mail caches after 90 days of project conclusion.
• Abandoned Cart / Session Storage: Cart items stored locally in your browser's localStorage remain exclusively on your device and are never transmitted to a central advertising tracking database.

5. Your Legal Rights (Right to Access, Rectify & Erase)

Under GDPR, UK DPA, and California Consumer Privacy Act (CCPA), you possess the following enforceable rights:

• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your customer record and email history at any time.
• Right of Access & Portability: You may request an export of all personal data held concerning your account in a machine-readable JSON format.
• Right to Rectification: You may update or correct misspelled contact details at any time.
• Right to Opt-Out: Every marketing or educational email we transmit contains an instant, one-click "Unsubscribe" mechanism.

To trigger an automated or manual data erasure request, please submit a request via our Data Deletion Portal below, reach out on our Unified Support Desk, or email hello@maternalsupportco.com. We fulfill all verified requests within 30 calendar days at zero cost to you.

6. Cookies & Tracking Technologies

Our website uses minimal, necessary cookies to power our slide-out shopping cart and remember your promo codes across pages. We do not sell your personal data to third-party data brokers or use invasive behavioral cross-site trackers. You can adjust your cookie settings at any time via our Cookie Preferences banner.

7. International Data Transfers

If you access our site from the EU, UK, or other non-US jurisdictions, your data is processed on secure cloud servers complying with EU Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreements (IDTAs).