Privacy Policy

Last updated: August 27, 2025

Privacy

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information processed by our childcare management platform (the “Service”). We are committed to privacy-by-design and to protecting the information of children, parents/guardians, and staff. By using the Service, you agree to the practices described here. If you do not agree, please refrain from using the Service.

Who This Policy Covers

This policy applies to:

  • Parents/Guardians using the parent portal, mobile, or web features.
  • Children whose information is managed by the childcare (provided by parents/guardians and staff).
  • Childcare Pro staff and administrators using the platform.

Information We Collect

We collect only what is necessary to provide the Service safely and effectively.

Child Information

  • Identity: full name, date of birth, age, photo/avatar (if provided).
  • Enrollment: classroom/room assignments, schedules, attendance, activities.
  • Health & Safety: allergies, medications, authorized medication schedules, emergency contacts, incidental reports.
  • Progress & Care: notes, learning activities, meals, nap times (as entered by staff).

Parent/Guardian Information

  • Contact: name, relationship to child, phone number, email, address.
  • Account & Portal: login credentials, preferences, consent records.
  • Billing: invoices, payment history, and limited payment details (processed via compliant payment providers; we do not store full card numbers).

Staff Information

  • Identity & Role: name, email, employment role (e.g., teacher, assistant, admin).
  • Work: assigned classrooms, schedules, notes entered, activity logs related to child care.

System & Device Information

  • Technical: device type, browser, IP address, timestamps, error logs.
  • Usage: features accessed, actions taken, and telemetry necessary to secure and improve the Service.
  • Cookies & Similar Technologies: explained below in Cookies section.

How We Use Information

  • Provide, operate, and secure the Service (authentication, authorization, session management).
  • Deliver core childcare functions: enrollment, attendance, scheduling, room assignments, child activity tracking, medication reminders, and authorized pickup/drop-off workflows.
  • Communicate with parents/guardians and staff (alerts, messages, reminders, invoices).
  • Process payments via third-party payment processors.
  • Improve the Service, troubleshoot issues, and perform analytics to enhance reliability and usability.
  • Comply with legal obligations and enforce our terms and policies.

Legal Bases (where applicable)

Depending on jurisdiction, we rely on one or more of the following legal bases:

  • Performance of a contract (providing the childcare management service to your childcare or to you).
  • Legitimate interests (e.g., security, fraud prevention, improving our services).
  • Consent (e.g., certain communications, photos, or specific health-related entries as required).
  • Compliance with legal obligations (e.g., recordkeeping, safety reporting).

Sharing and Disclosure

We do not sell personal information. We share information only as needed:

  • With the childcare organization and authorized staff to provide childcare services.
  • With parents/guardians and authorized contacts to support child pickup, communications, and care.
  • With service providers who perform services on our behalf (e.g., cloud hosting, email/SMS, payments). Providers are bound by confidentiality and security obligations.
  • For legal reasons, safety, and security (e.g., to comply with law, respond to lawful requests, protect rights, prevent fraud or abuse).
  • In business transitions (e.g., merger, acquisition), subject to continued protection of personal information.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to comply with legal and regulatory requirements, to resolve disputes, and to enforce agreements. Retention periods may vary by record type (e.g., attendance, invoices, incident reports) and by local regulations.

Security

  • Encryption in transit (HTTPS/TLS) and secure credential storage.
  • Role-based access controls; least-privileged access for staff accounts.
  • Audit logging for sensitive actions where supported.
  • Regular backups and continuity measures.
  • Administrative, technical, and physical safeguards appropriate to the data we manage.

No system is 100% secure. We work continuously to improve our defenses and reduce risk.

Children’s Privacy

Our Service is designed for use by childcare organizations and parents/guardians on behalf of children. We collect child information only with the authorization of parents/guardians and/or the childcare organization for the purpose of providing childcare services. If we learn that we have collected child information without appropriate authorization, we will take steps to delete it.

Health and Educational Records

The Service may store limited health-related notes (e.g., allergies, medications) input by staff or parents for care and safety purposes and may include educational activity records. We are not a covered entity under HIPAA; however, we take reasonable measures to protect sensitive information and follow privacy best practices. Your childcare may be subject to local/state recordkeeping and educational privacy requirements; we provide tools to support compliance, but ultimate compliance responsibilities remain with the childcare organization.

International Users

If you access the Service from outside the country where it is hosted, you understand that your information may be processed in countries that may have data protection laws different from those in your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers.

Your Privacy Choices and Rights

  • Access and Correction: request access to and correction of your information where permitted.
  • Deletion: request deletion of certain information, subject to legal/operational requirements.
  • Consent Management: update your communication and consent preferences.
  • Objections/Restrictions: where applicable, object to or request restriction of certain processing.

To exercise rights, contact us using the details below. We may need to verify your identity and relationship to the child before responding.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and secure the Service (e.g., session cookies), remember preferences, and perform limited analytics to improve performance. You can control cookies through your browser settings; disabling some cookies may impact functionality.

Third-Party Services

We rely on third-party providers for infrastructure, messaging, payments, and other operational services. These providers process information on our behalf under contracts requiring appropriate security and confidentiality. Examples may include cloud hosting, email/SMS gateways, and payment processors.

Data Location

Data may be stored in data centers operated by our hosting providers. The specific location can vary based on deployment. We strive to use reputable providers with robust security certifications.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the “Last updated” date above. Material changes will be communicated through the Service or via email where appropriate.

Contact Us

If you have questions about this policy, your information, or our practices, please contact the childcare administrator or our support team at:

  • Email: support@marketexpo2.com
  • Mailing Address: Marketexpo2 ChildCare Pro, 94 West Street, Hyde Park, MA 02136

Note: This policy provides general information about our privacy practices for childcare management. Local laws and regulations may impose additional requirements on your childcare organization. Where we act as a processor/service provider for a childcare, the childcare remains responsible for determining the lawful basis and scope of data collected about children and families.