Babypalooza® Inc.
Privacy Policy
EIN: 81-1426663 · 501(c)(3) Nonprofit · Birmingham, Alabama
By using our Site or any of our services, you agree to this Privacy Policy. If you do not agree, please discontinue use of our Site and services.
This policy covers your use of:
- Our website at https://babypalooza.com
- Free Family Pass registration to attend a Babypalooza Baby Expo
- Newsletter and email subscriptions
- Online donations through our Donorbox donation platform
- Shop and Sample Box purchases
- Social media interactions and third-party platforms we use
1. Who We Are
Babypalooza® Inc. is a 501(c)(3) nonprofit organization incorporated in the State of Alabama. Our registered address is:
1601 5th Avenue North, #138
Birmingham, AL 35203
United States
Email: info@babypalooza.com
For GDPR purposes, Babypalooza® Inc. is the Data Controller for personal information collected through this Site. Where we use third-party processors (such as Donorbox for donations and Stripe for payments), those parties act as Data Processors under our instructions and their own applicable privacy policies.
2. Information We Collect
2a. Information You Provide Directly
🎟️ Free Family Pass Registration (Baby Expo Attendance)
- Full name and names of additional attendees (partner, support person)
- Email address
- Due date or age of baby (to confirm eligibility)
- City and zip code (to match you to your nearest expo)
- Optional: pregnancy stage, number of children, how you heard about us
📧 Newsletter / Email Subscription
- Email address
- First name (optional, used for personalization)
- Interests or preferences (optional, to customize content)
💛 Online Donations (via Donorbox)
- Full name
- Email address
- Mailing address (required for tax receipt purposes)
- Donation amount and frequency (one-time or recurring)
- Payment information — processed securely by Stripe or PayPal; we do not store card numbers
- Optional: a dedication message or comment
- Tax receipt documentation is generated and retained as required by IRS regulations for 501(c)(3) organizations
🛍️ Shop / Sample Box Purchases
- Name, shipping address, email, and payment information to fulfill your order
2b. Information Collected Automatically
When you visit our Site, we automatically collect certain technical information about your device and browsing behavior, including:
- IP address and approximate location (country/region level)
- Browser type, version, and operating system
- Pages visited, time on page, and navigation path
- Referring website or search terms that led you to our Site
- Device type (desktop, mobile, tablet)
- Cookie identifiers and session data (see Section 6: Cookies)
2c. Information from Third Parties
We may receive information about you from third-party platforms, including social media platforms (Facebook, Instagram, Pinterest, TikTok), Donorbox, Google Analytics, HubSpot, and MailerLite when you engage with our forms, emails, or content.
3. How We Use Your Information
We use your personal information only for lawful purposes and only to the extent necessary. The table below summarizes our uses and the legal basis for each under GDPR.
| Purpose | What We Use | Legal Basis (GDPR) |
|---|---|---|
| Family Pass registration & expo communications | Name, email, due date, city | Performance of contract / Legitimate interests |
| Newsletter & email marketing | Email, name, preferences | Consent (opt-in at subscription) |
| Processing donations & issuing receipts | Name, email, address, payment data | Legal obligation / Legitimate interests |
| Retaining donation records (IRS requirement) | Donation records, tax receipts | Legal obligation (7-year IRS retention) |
| Shop and sample box order fulfillment | Name, address, payment data | Performance of contract |
| Site analytics and improvement | Device data, browsing behavior | Legitimate interests |
| Legal compliance and fraud prevention | As necessary | Legal obligation |
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share your information only with trusted service providers who help us operate our mission, and only to the extent necessary for them to provide their services.
4a. Our Service Providers (Data Processors)
| Provider | Purpose | Category |
|---|---|---|
| Donorbox | Donation form hosting, recurring giving, tax receipt generation | Donations |
| Stripe | Secure payment processing (PCI-DSS Level 1 compliant) | Payments |
| PayPal | Alternative payment processing | Payments |
| MailerLite | Email newsletter delivery and automation | Marketing |
| HubSpot | CRM, donor and attendee relationship management | CRM |
| Google Analytics | Website traffic analysis (anonymized and aggregated) | Analytics |
| FreshBooks | Accounting and financial reporting | Finance |
| WordPress.com | Website hosting and content management | Website |
| Notion | Internal project management and content planning | Operations |
All service providers are required by contract to protect your information and use it only for the purposes we specify.
4b. Legal Requirements
We may disclose your information if required by law or in response to a valid subpoena, court order, or government request. We may also disclose information to protect the rights, property, or safety of Babypalooza® Inc., our donors, attendees, or the public.
4c. Business Transfers
In the event of a significant organizational change (such as a merger, acquisition, or dissolution), your information may be transferred as part of that process. We will notify you of any such change and your rights with respect to your data.
5. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:
- Expo registration records: 3 years from the date of the event
- Donation records and tax receipts: 7 years, as required by IRS regulations for nonprofit organizations
- Email subscribers: Until you unsubscribe or request deletion
- Order and purchase records: 7 years for tax and accounting purposes
- Website analytics (Google Analytics): Up to 26 months
- General contact inquiries: 2 years from last interaction
When data is no longer needed, we delete or anonymize it securely.
6. Cookies and Tracking Technologies
6a. What Are Cookies
Cookies are small text files placed on your device when you visit our website. We use cookies and similar technologies (web beacons, pixels, tags) to operate our Site, understand how it is used, and support our marketing activities.
6b. Types of Cookies We Use
| Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the Site to function (session, login, cart) | No |
| Analytics / Performance | Google Analytics — aggregated, anonymized site usage data | Yes |
| Functional | Embedded forms (Donorbox), video, maps | Yes |
| Marketing / Targeting | Facebook Pixel, Google Ads — performance measurement and retargeting | Yes |
6c. Cookie Consent
In accordance with GDPR and applicable US state privacy laws, non-essential cookies require your consent. A cookie consent banner is displayed when you first visit our Site. You may withdraw or change your cookie preferences at any time through your browser settings. For more information about cookies, visit allaboutcookies.org.
7. Your Privacy Rights
7a. Rights Under GDPR (European Residents)
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:
7b. Rights Under US State Privacy Laws
Residents of California (CCPA/CPRA), Virginia (CDPA), Colorado (CPA), and other US states with applicable privacy laws may have rights to access, delete, correct, or opt out of the sale or sharing of personal data. Babypalooza® Inc. does not sell personal data.
7c. How to Exercise Your Rights
To exercise any of your rights, contact us at info@babypalooza.com or by mail at the address in Section 15. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing your request.
8. Opting Out of Marketing
8a. Email Newsletters
You may unsubscribe from Babypalooza marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any email, or by emailing info@babypalooza.com. Please allow up to 10 business days for processing. Transactional emails (donation receipts, expo confirmations) are not affected by unsubscribing.
8b. Targeted / Behavioral Advertising
You may opt out of interest-based advertising through the following:
Opting out does not mean you will stop seeing ads from us — it means ads will not be targeted based on your browsing behavior.
8c. Do Not Track
Our Site does not alter its data collection practices in response to Do Not Track (DNT) signals from browsers, as there is no universally accepted standard for DNT. Where applicable, we rely on your cookie consent preferences instead.
9. Children's Privacy
Our Site and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at info@babypalooza.com and we will promptly delete it.
Babypalooza Baby Expos are family events where children and infants are welcome to attend with their parents or guardians. The personal information collected during registration belongs to the adult registrant, not the child.
10. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:
- SSL/TLS encryption on all data transmitted through our Site
- PCI-DSS Level 1 compliant payment processing through Stripe and PayPal — we do not store payment card data
- Secure donation processing through Donorbox's encrypted platform
- Access controls limiting who on our team can view personal data
- Regular review of third-party processor security practices
While we take security seriously, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities as required by law.
11. Third-Party Links and Embedded Content
Our Site may contain links to third-party websites, social media platforms, and embedded content (such as videos or maps). Clicking these links or interacting with embedded content may result in those third parties collecting data about you. We are not responsible for the privacy practices of third-party sites.
Third-party platforms whose content may be embedded on our Site include: YouTube, Facebook, Instagram, Google Maps, and Donorbox.
12. International Data Transfers
Babypalooza® Inc. is based in the United States. If you are accessing our Site from outside the US, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
For individuals in the EEA or UK, we ensure any international transfers of your data are protected using appropriate safeguards, including Standard Contractual Clauses (SCCs) where required by GDPR. Our key processors — including Google, Stripe, HubSpot, and MailerLite — maintain GDPR-compliant data transfer mechanisms.
13. Affiliate Disclosure
Babypalooza® Inc. participates in affiliate marketing partnerships. Some links on our Site may be affiliate links, meaning we may earn a commission if you purchase something through those links, at no additional cost to you. This income supports our nonprofit mission to provide free baby expos for families. All affiliate relationships are disclosed where applicable.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the revised policy on our Site at https://babypalooza.com/privacy-policy/
- Where required by law, notify you by email
Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
Babypalooza® Inc. — Privacy
1601 5th Avenue North, #138
Birmingham, AL 35203
United States
Email: info@babypalooza.com
Website: https://babypalooza.com
We will respond to all verifiable privacy requests within 30 days.