1. Natty Hatty Does NOT Sell or Share Personal Information

Natty Hatty:

• Does NOT “sell” personal information

• Does NOT “share” personal information for cross-context behavioral advertising

• Does NOT use advertising cookies

• Does NOT use retargeting pixels

• Does NOT use social tracking pixels

• Does NOT allow third parties to profile users

We only use essential cookies and optional analytics (Google Analytics).

Analytics are configured with:

• IP anonymization

• No advertising features

• No cross-device or cross-site tracking

• No demographic tracking

• No data sharing with Google for advertising purposes

2. What This Means Under CPRA

Under CPRA:

• “Selling” = exchanging data for money or value

• “Sharing” = using data for targeted or cross-context advertising

Natty Hatty does neither.

As a result:

• You do not need to opt out of selling / sharing

• But we still provide this page as required for transparency

3. How to Exercise Your Rights (If You Still Choose To)

Even though Natty Hatty does not sell or share your data, you may still submit requests regarding:

• Access to your data

• Correction of inaccurate data

• Deletion of data

• Opt-out preferences

• Limiting use of sensitive data

Submit a request at:

We respond as required by California law.

4. Global Privacy Control (GPC)

Natty Hatty honors Global Privacy Control (GPC) signals.

• When your browser sends a GPC signal, we treat it as an opt-out request—even though we do not sell or share data.

• Analytics cookies will remain disabled for users with active GPC enabled.

5. Cookies on the Natty Hatty Website

Natty Hatty uses:

Essential Cookies (Always Active)

• Required for website functionality

• Payment and security cookies for transactional pages

• Signature workflow cookies

Analytics Cookies (Google Analytics)

• Optional

• Measure website usage

• Do not sell or share data

Analytics cookies are disabled until you Accept Analytics on the Cookie Banner.

For details, see the Cookie Policy.

6. Public Program Pages, Payments & Signature Pages

Some personal information may be collected when you interact with:

• Registration pages

• Program/event pages

• Payment pages

• Customer-facing signature pages

• QR code signature links

This information is used only to:

• Process your request

• Complete payment through Stripe

• Deliver documents to Organizations

• Maintain a legally valid audit trail

Natty Hatty does not sell or share this data.

Organizations receiving your data may have their own privacy practices.

You should review their policies as well.

7. Sensitive Personal Information

Natty Hatty does not collect sensitive personal information for website operations, except:

• Parent/guardian info voluntarily provided on program/transaction pages

• Minor information submitted by parents/guardians

• Signature data required for legal documents (ESIGN/UETA compliant)

Natty Hatty does not use sensitive information for:

• Inference

• Profiling

• Advertising

• Selling or sharing

8. Verification Process

If you submit a request:

• We may need to verify your identity

• We may request information that confirms ownership of the email or submission

• For deletion requests, we will provide instructions and disclosure of what cannot be deleted (ex: signed legal documents retained for legal validity)

9. Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf.

We require:

• Signed authorization

• Identity verification of the consumer

• Verification of the agent’s identity

10. Children’s Data

Natty Hatty does not knowingly collect personal information directly from children under 13 on the website.

Any minor data submitted through program registration pages or signed documents must be provided by a parent or guardian.

Natty Hatty does not sell or share minors’ data under any circumstances.

11. Contact Us

For privacy rights or opt-out inquiries:

For additional information, see:

• Privacy Policy

• Cookie Policy

• Platform Privacy Policy