Privacy Policy for Not a Peep Sleep Consulting and
Postpartum Services
Last Updated: 4/16/25

1. Introduction
At Not a Peep Sleep Consulting and Postpartum Services, I am committed to protecting the
privacy of my clients worldwide. This policy outlines how I collect, use, store, and protect your
personal data in compliance with applicable privacy laws, including but not limited to:
● General Data Protection Regulation (GDPR) (EU/UK)
● California Consumer Privacy Act (CCPA) (U.S.)
● Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada)
● Lei Geral de Proteção de Dados (LGPD) (Brazil)
● Privacy Act 1988 (Australia)
● Children’s Online Privacy Protection Act (COPPA) (U.S.)
By using my services, you agree to the collection and use of your data as described in this
Privacy Policy.

2. Information I Collect
I may collect the following types of personal data:
A. Personal Information
● Contact Details: Name, email, phone number, mailing address
● Payment Information: Processed securely through [e.g., PayPal, Stripe] (I do not store
full payment details)
B. Child-Related Information (Provided by Parents/Guardians)
● Child’s first name (or nickname), age, sleep patterns, and other relevant details
● Any additional information you choose to share during consultations or in questionnaires
C. Technical & Tracking Information (If Using My Website)
● IP address, browser type, pages visited, device information (collected via cookies and
tracking pixels, with consent where required)

● Marketing & Ad Tracking Data (collected via Facebook Pixel, Google Analytics, and
other tools if applicable)
I collect this information only with your consent or as necessary to provide services.

3. How I Use Your Information (Purpose & Legal Basis)
I use your information for the following purposes, under applicable legal bases:
• To Provide Sleep Consulting Services (Contractual Necessity)
• To Communicate with You (Appointment reminders, service updates)
• To Process Payments & Maintain Business Records (Legal Obligation)
• To Improve My Services & Website Performance (Legitimate Business Interest)
• To Show Personalized Ads (If Applicable) (Consent-based where required)
• To Comply with Legal Requirements (E.g., tax reporting)
I do not use your data for any other purposes without your explicit consent.

4. Pixel Tracking & Cookies
A. What Are Tracking Pixels & Cookies?
Tracking pixels and cookies are small pieces of code or data stored on your browser that allow
me to:
● Track website traffic and user behavior
● Measure the effectiveness of marketing campaigns
● Show personalized advertisements on platforms like Facebook, Google, and Instagram
B. Types of Tracking Technologies Used
● Google Analytics: Helps analyze website traffic and user behavior
● Facebook Pixel: Tracks interactions on my website for targeted advertising
● Other Ad Tracking Tools (if applicable): Such as TikTok Pixel, LinkedIn Insights, or
Pinterest Tag
C. Your Choices & How to Opt-Out
You can control or disable tracking technologies by:
● Adjusting your browser settings to block or delete cookies
● Using privacy-focused browser extensions (e.g., uBlock Origin, Ghostery)
● Opting out of targeted ads via Google Ads Settings, Facebook Ad Preferences, or
industry-wide opt-out tools like YourAdChoices

Where required by law (e.g., GDPR, ePrivacy Directive), I will request your consent before using
non-essential cookies or tracking pixels.

5. How I Protect Your Information
I take reasonable measures to safeguard your personal data, including:
● Secure, password-protected systems for storing data
● Encryption for sensitive communications and transactions
● Access control measures (only authorized personnel can access your data)
Despite these precautions, no method of transmission over the internet is 100% secure. You
share your data at your own risk.

6. Sharing Your Information
I do not sell, rent, or trade your personal data. However, I may share your data in the following
limited situations:
● With Service Providers: Payment processors ([PayPal, Stripe]) and analytics/ad tracking
platforms (Google, Facebook)
● When Required by Law: If legally obligated (e.g., court orders, regulatory authorities)
● With Your Explicit Consent: If you request that I share your information for a specific
purpose
If I transfer data outside of your country (e.g., to U.S.-based service providers), I ensure that
appropriate safeguards (e.g., Standard Contractual Clauses for the EU) are in place.

7. Children’s Privacy
Because my services involve children’s sleep, I take extra care to:
● Collect this data only with parental/guardian consent
● Use it solely for the purpose of providing sleep consulting services
● Protect it with heightened security measures
I do not knowingly collect personal information from children under 13 without parental consent.
If I learn that I have collected data from a child without consent, I will delete it immediately.

8. Document Retention Policy (DRP)
A. How Long I Retain Your Data
I only retain your personal data for as long as necessary to fulfill legal, tax, and business
obligations. After this period, data will be securely deleted or anonymized.

● Client Records (Consultations, Questionnaires, Sleep Plans) → Retained for 1 year after
services end, unless a longer period is required for legal or tax purposes
● Payment & Financial Records → Retained for 7 years (to comply with tax laws)
● Marketing & Analytics Data → Retained for up to 2 years unless you withdraw consent
earlier
● Email Correspondence → Retained for up to 1 year after last communication
B. How Data is Deleted
When data is no longer needed, I will securely delete or anonymize it.
● Digital Files → Permanently deleted from secure servers
● Paper Records (if applicable) → Shredded and disposed of securely
If you request deletion of your data, I will process your request within 30 days, except where
retention is legally required.
9. Your Rights
Depending on your location, you may have rights to:
● Access the personal data I hold about you
● Correct inaccuracies in your information
● Request Deletion or restriction of your data (subject to legal exceptions)
● Withdraw Consent at any time (for marketing or non-essential tracking)
To exercise these rights, contact me at [your email/phone]. I will respond within [e.g., 30 days]
as required by laws like GDPR and PIPEDA.

10. Changes to This Policy
I may update this policy to reflect legal or operational changes. The latest version will be posted
on [your website], and it is your responsibility to review the policy periodically for any updates.


11. Contact Me
For questions, concerns, or data requests, reach me at:
Email: sara@notapeepsleepconsulting.com
Phone: 845-901-1481