This Data Sharing Disclosure explains how the Natty Hatty Blog Platform at blog.nattyhatty.com (“Blog Platform”) shares personal data with third parties.

This disclosure is provided to comply with:

• CPRA/CCPA (California)

• GDPR / UK GDPR

• Other applicable privacy laws

The Blog Platform collects minimal data and only shares data necessary to operate login, commenting, analytics, and security.

This disclosure applies only to the Blog Platform, not to:

• Natty Hatty Customer App

• Natty Hatty Business Center

• Signature product

• nattyhatty.com marketing website

• Program registration or payment pages

Those have separate legal terms.

1. Summary of What We Share

The Natty Hatty Blog Platform shares data only with:

• Service Providers (“Subprocessors”) who help us operate the blog

• Security & infrastructure partners

• Analytics providers (Google Analytics)

• Law enforcement, if legally required

We do NOT:

• Sell personal data

• Share data for cross-context behavioral advertising

• Share data with advertisers

• Share data with third parties for marketing

• Allow third-party ad cookies or trackers

We also honor Global Privacy Control (GPC) signals.

2. Categories of Personal Data Shared

We may share the following categories of data only with trusted service providers:

We do not share:

• Minor-specific data

• Payment information

• Program or roster data

• Signatures or waiver documents

• Sensitive personal data

3. Who We Share Data With (Service Providers)

Natty Hatty shares data only with the following subprocessors for the Blog Platform:

4. Legal Basis for Sharing (GDPR / UK GDPR)

For EU/UK users, data is shared under:

• Contractual necessity
  To authenticate users and operate comment functionality.

• Legitimate interests
  To monitor security, prevent abuse, and improve site performance.

• Legal obligation
  When responding to law enforcement or safety-related requests.

We do NOT rely on:

• Advertising

• Cross-context profiling

• Data monetization

5. No Selling or Sharing Under CPRA

Natty Hatty:

• Does not sell personal information

• Does not share data for behavioral advertising

• Does not use advertising cookies

• Does not share data with marketers

Under CPRA, none of the categories of data collected on the Blog Platform count as “sold” or “shared.”

We honor:

• Do Not Sell / Share requests

• Global Privacy Control (GPC) signals

6. Law Enforcement & Safety Disclosure

We may share data with law enforcement only when required by law, including:

• Court orders

• Subpoenas

• Safety emergencies

• Minor-endangerment investigations

Natty Hatty maintains a zero-tolerance policy around youth safety.

We do not voluntarily share data for non-legal purposes.

7. International Transfers

Blog data may be transferred to:

• AWS U.S. hosting regions

• Cloudflare global edge servers

• Google Analytics processing locations

We use:

• Standard Contractual Clauses (SCCs)

• Data Processing Agreements (DPAs)

• Appropriate safeguards

8. Retention of Shared Data

Data shared with service providers is retained:

• Only as long as necessary for the service to operate

• According to each provider’s retention policy

• According to Natty Hatty’s data retention standards

Users may request deletion of:

• Blog comments

• Blog login history

• Personal identifiers related to the Blog Platform

Submit requests at:

9. Your Rights

Depending on your region, you may have rights to:

• Access data

• Request deletion

• Request correction

• Opt out of certain sharing

• Restrict processing

• Receive a data export

For assistance:

10. Contact

For questions about data sharing on the Natty Hatty Blog Platform: