Grow & Slumber Co. — Privacy Policy

Effective Date: 10/19/2026
Last Updated: 10/19/2026

Grow & Slumber Co. | Austin, Texas
growandslumber.com | info@growandslumber.com

About this policy

Grow & Slumber Co. (“we,” “us,” or “our”) respects the privacy of the families who contact us. This policy explains how we collect, use, disclose, retain, and protect personal information through growandslumber.com and our Sleep Consulting and Infant Care services. It also explains how adults can contact us about their information or information they provide about their child.

Our website and communications are intended for adult parents and legal guardians. The service agreement and other applicable service terms govern your service relationship; this policy describes our information practices. It does not replace any consent required by applicable law.

Information you provide

Website appointments and inquiries. Squarespace booking for the $80 Sleep Consultation and the free Infant Care interview requests first name, last name, and email address. We also receive appointment details and any information you choose to include in messages. Personalized Sleep Plans are not purchased directly on the website; they involve a separate Stripe invoice and client service agreement.

Sleep questionnaires and consultations. We send and receive detailed PDF questionnaires through Gmail within Google Workspace. Parents or guardians may provide the baby’s name, age, sleep patterns, routines, feeding information, family circumstances, and health information relevant to the service. An address may be left blank when no in-person consultation is needed. Parents may communicate sensitive information, including health-related information; please limit what you share to information reasonably relevant to the service.

Service records and payment information

Sleep Logs and plans. We use Google Sheets and Google Drive for Sleep Logs, personalized plans, and related client records. These may include information about your child’s sleep, routines, progress, and adjustments to the plan, along with service communications and follow-up notes.

Nursery media and virtual sessions. We may request photographs or short videos of the nursery to assess the sleep environment. We do not request photographs of babies. Please keep your child, other people, personal documents, and identifying details out of nursery media. Virtual consultations and applicable follow-up sessions take place through Google Meet, which processes information needed to operate the session. This policy does not authorize session recording.

Payments and agreements. Stripe processes invoice payments. Payment information is submitted to the payment provider, rather than stored by us as complete card numbers. We may receive invoice, payment status, transaction, and related billing information needed to administer services and maintain business records. Website appointment payments are handled through the applicable Squarespace booking payment flow and its payment provider. Signed agreements are maintained separately from consulting records.

How we use information

We use information to respond to inquiries; schedule and administer appointments; assess sleep needs and the nursery environment; prepare and adjust personalized plans; provide Infant Care and other contracted services; communicate about services; process invoices; and maintain appropriate business records. We also use information as reasonably necessary to handle privacy requests, protect our accounts, resolve disputes, and meet legal obligations.

We send operational emails, such as scheduling messages, service follow-up, invoices, and responses to questions. We do not use client information for unsolicited promotional emails or automatically enroll anyone in marketing lists. We do not sell personal information or use it for targeted advertising.

Information from adults about children

We obtain child-related information from adult parents or legal guardians, rather than soliciting it directly from children. Our website is not directed to children, and children are not intended to contact us or submit information through it. If you believe a child submitted information directly, contact us so we can review and take appropriate steps. Receiving information about a child from an adult is distinct from collecting information online directly from a child; any applicable children’s privacy obligations remain subject to law.

Service providers and other disclosures

We use Squarespace for the website, forms, and booking; Google Workspace, including Gmail, Drive, Sheets, and Meet, for communications, records, and virtual sessions; and Stripe for invoices and payment processing. These providers process information to support their services and may also process certain information under their own privacy practices and legal obligations. Their roles and practices depend on the service and account configuration.

We provide or make available information reasonably needed for these services. Payment providers handle payment credentials; that does not mean we maintain complete card numbers in our client files. Provider privacy notices are available at squarespace.com/privacy, policies.google.com/privacy, and stripe.com/privacy. These notices do not replace this policy or our own responsibilities.

We may disclose information when required by law or legal process, or when reasonably necessary to protect rights or safety, address fraud or security concerns, or resolve a legal dispute. Information may also be disclosed to professional advisers when reasonably necessary for legal, accounting, or similar business needs, subject to applicable confidentiality requirements. Other disclosures will be made only as permitted by law or with any consent required by law.

Cookies and website analytics

We have not enabled Google Analytics, Meta Pixel, or other external advertising tracking tools. This does not mean the website is cookie-free. Squarespace may use necessary cookies and similar technologies to operate and secure the website, and may provide its own analytics depending on site settings. Technical information may include IP address, browser or device details, and interactions with the website.

Cookie and analytics behavior depends on the Squarespace configuration and any booking or payment features used. Where a cookie banner or preference control is available, use it to manage the choices offered. You can also manage cookies through your browser, although blocking necessary cookies may affect website functions. Any consent required for nonessential cookies must be implemented through the actual site settings; this policy alone does not provide that consent.

Provider locations and external links

Our business is based in Austin, Texas. Providers may process or store information in locations outside Texas or outside your state or country, depending on their infrastructure and service arrangements. We do not represent that all information stays in a particular location. Any safeguards legally required for transfers must be addressed in the applicable provider arrangements.

The website or our communications may link to other websites. Their privacy practices are governed by their own notices. Please review those notices before providing information.

Retention and deletion

Client consulting records. We retain client-specific questionnaires, Sleep Logs, nursery photographs or videos, identifiable sleep plans, and service follow-up records during the service and for up to 90 days after the service ends. At the end of that period, we delete those materials from active files under our control, unless longer retention is legally required or reasonably justified, such as for a pending dispute, legal claim, or unresolved service matter. Any exception is limited to the records and time reasonably needed for that purpose.

Deletion covers relevant copies we control in Squarespace, Gmail, Google Drive and Sheets, and our computer, including applicable trash or deleted-item folders where available. Removing a record from our account does not guarantee immediate erasure from a provider’s backups, security logs, or other systems. Those copies may persist under the provider’s deletion procedures, retention policies, and legal obligations. Copies retained by a client are outside our control.

Inquiries and appointments without further services. We retain information from an inquiry, free interview, or consultation that does not lead to further engagement only as long as reasonably necessary to address the inquiry or appointment and related administrative or legal needs. The 90-day client-file schedule is not a blanket commitment for every inquiry or booking record. We delete inquiry records from active files when those purposes no longer require retention, unless an applicable exception applies.

Contracts and financial records. Signed agreements, invoices, payment records, and tax or accounting records are kept separately for the periods required by applicable law and for reasonably necessary related business or legal purposes. The 90-day consulting-file schedule does not override those requirements.

Truly anonymized professional reference plans

We may retain a truly anonymized version of a personalized sleep plan indefinitely for our internal professional reference. Before retaining it, we remove the baby’s name, any identifiable Background or Sleep Assessment section, names of family members, contact details, exact birth dates, addresses, and other identifiers. We also remove or generalize unusual circumstances that could reasonably identify the child or family, and check filenames, document properties, comments, and any other retained content for identifiers.

Removing a name alone is not sufficient. We retain a reference version only if it cannot reasonably be linked back to the child or family; otherwise, it remains subject to the client-file retention schedule. We do not include nursery media in this library, attempt to reidentify a family, publish these plans, or use them in marketing.

Security

We use strong passwords and two-factor authentication on our accounts and take reasonable measures appropriate to the information we handle. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sending information unrelated to the service or unnecessary financial credentials. We address security incidents and provide notifications when required by applicable law.

Privacy requests and applicable rights

Contact info@growandslumber.com to request access to, correction of, or deletion of your personal information, or information you are authorized to manage for your child. Explain the request and provide enough context for us to locate the records. Do not email sensitive identification documents unless we ask for a suitable verification method. We may verify your identity and, when relevant, your parental, guardian, or representative authority before disclosing or changing records.

Depending on the law that applies to you and to our business, you may also have rights to confirm processing, obtain a portable copy of certain information, withdraw consent, or opt out of certain processing. These rights may be subject to exceptions, including retention required by law. We respond within applicable legal deadlines. If we cannot fulfill a request, we will explain the reason as required by law. Where an appeal right applies, you may email us with “Privacy Appeal” in the subject line; we will handle the appeal as required by law and provide applicable complaint information.

We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. This notice does not represent that every privacy statute applies to this business or that statutory rights are waived. Where required, we obtain appropriate consent before processing sensitive information, including information about a known child. This policy and general acceptance of website terms do not substitute for any separate consent required by law.

Changes and contact

We may update this policy to reflect changes in practices or legal requirements. The revised version will display a new Last Updated date. We will provide additional notice or obtain consent for changes when required by applicable law. Until an updated practice and any required consent are in place, this notice does not authorize a new use of information.

For privacy questions or requests:
Grow & Slumber Co.
Austin, Texas
info@growandslumber.com
growandslumber.com