Data Policy

1. Data Collection

Le Jardin D'Eden collects and processes the following types of data:

• Personal Data: Names, email addresses, phone numbers, physical addresses
• Child Data: Child's name, date of birth, medical information, allergies, dietary restrictions
• Emergency Data: Emergency contact names and phone numbers
• Financial Data: Payment information, billing history
• Usage Data: Login times, dashboard activity, message history

2. Data Storage

Your data is stored securely using industry-standard practices:

• All data is encrypted in transit using SSL/TLS protocols
• Data at rest is encrypted using AES-256 encryption
• Database access is restricted to authorized personnel only
• Regular security audits and updates are performed
• Data is backed up daily to prevent loss

3. Data Retention

We retain data according to the following schedule:

• Active Enrollments: Data is retained for the duration of enrollment
• Inactive Accounts: Data is retained for 7 years after enrollment ends (as required by childcare regulations)
• Financial Records: Retained for 7 years for tax and audit purposes
• Medical Records: Retained according to state and federal regulations

4. Data Access

Access to your data is strictly controlled:

• Parents can access their own data through the parent dashboard
• Authorized staff members can access data necessary for childcare operations
• Administrative staff can access data for billing and enrollment purposes
• All access is logged and monitored for security purposes

5. Data Sharing

We do not sell or share your data except in the following circumstances:

• Legal Requirements: When required by law, court order, or regulatory authority
• Emergency Services: Medical information shared with emergency responders when necessary
• Service Providers: Limited data shared with payment processors and email services (under strict confidentiality agreements)

6. Your Data Rights

Under applicable data protection laws, you have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of data processing

7. Data Breach Notification

In the unlikely event of a data breach, we will notify affected individuals within 72 hours and take immediate steps to secure the data and prevent further unauthorized access.

8. Children's Data Protection

We are committed to protecting children's data with the highest standards. Children's data is only accessible to authorized staff and parents/guardians. We comply with all applicable children's privacy laws including COPPA and FERPA.

9. Policy Updates

We may update this Data Policy from time to time. Significant changes will be communicated via email. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

For questions about this Data Policy or to exercise your data rights, contact us at: