Privacy policy

Curriculums OU (registration number 12834041) operates the website kindergarten‑prep.com ("Site") and related pages. Curriculums OU is established at Tobiase 13a, Käina, Hiiumaa, Estonia, 92101. We provide digital curriculum resources and information for parents and guardians of 3–5 year‑old children and operate an online store through ThriveCart and Stripe. We take your privacy seriously and strive to handle personal data transparently and lawfully.

1 Scope of this policy

This policy applies to personal data we collect when you visit our Site, purchase products, contact us, or interact with our services. It does not apply to websites or services operated by third parties.

Our services are directed at adults. We do not knowingly collect personal data from children under 13. Under the U.S. Children’s Online Privacy Protection Rule (COPPA), sites directed to children or sites that know they are collecting information from children under 13 must meet specific requirements. If you believe a child has provided personal data to us, please contact us so we can remove the data.

2 Information we collect

2.1 Information you provide

• Account and order information – When you create an account, place an order or register for our newsletters, we collect details such as your name, email address, telephone number and postal/billing address. ThriveCart’s privacy policy explains that they collect personal information such as name, email, organization information and billing details when users register or respond to surveys.

• Payment details – Payments are processed by Stripe. We receive confirmation of payment but do not store full credit‑card numbers or CVV codes. Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification in the payments industry, uses secure servers, mandates HTTPS and HSTS for all connections and encrypts sensitive information. We only keep limited transaction details (such as transaction ID and last 4 digits of your card) for accounting purposes.

• Support and correspondence – When you contact us through our support email (support@kindergarten‑prep.com), we collect the information you send us so we can respond.

2.2 Information collected automatically

• Usage data & analytics – We use HubSpot to host our website and capture contact forms. HubSpot collects usage data such as interactions with forms, pages visited and information submitted, and deduplicates contacts using cookies and similar technologies. HubSpot’s cookie policy states that cookies can be essential, functional, analytics or advertising cookies.

• Checkout behaviour – Our sales pages are hosted on ThriveCart. ThriveCart’s privacy policy notes that they collect technical information like IP address, browser type, operating system, referring URLs and clickstream data through cookies and other technologies. When you log in to the affiliate or checkout pages, ThriveCart uses cookies to remember your login details and track affiliate referrals.

• Payment and fraud prevention cookies – Stripe uses cookies and similar technologies to ensure that its services function properly, detect and prevent fraud, understand how visitors use its Site and advertise its services. Stripe distinguishes between essential, functional and advertising cookies; essential cookies help authenticate users and detect fraud, functional cookies improve performance and remember preferences, and advertising cookies are used to target Stripe ads on other sites.

2.3 Information from other sources

We may receive information from third‑party platforms you connect to our services (e.g., when you use social‑media features or login providers) and combine it with data you have provided. We also receive analytics reports from our service providers (see section 5).

3 How we use personal data

We use the personal data we collect for the following purposes:

1. Fulfilling contracts and providing services – to process your orders, deliver products, manage your account and provide customer support. ThriveCart uses personal data to create and administer records about online accounts, provide information and access to resources and process transactions. We rely on these same purposes to deliver your purchases.

2. Communications – to respond to inquiries, send transactional messages (order confirmations, receipts) and, if you consent, to send newsletters or marketing messages. ThriveCart states that the email address you provide will only be used to send information and updates pertaining to your order or, if consented, occasional marketing emails. You may opt out of marketing communications at any time (see section 9).

3. Improvement and analytics – to monitor the performance of our Site, understand usage trends and improve our products and services. HubSpot uses analytics cookies to help understand how its websites are used and to customize websites for users. ThriveCart uses cookies to carry out analytics and customization. Stripe uses analytics cookies to understand how visitors interact with its Services.

4. Security and fraud prevention – to protect the security of our Site and detect and prevent fraudulent transactions. ThriveCart uses SSL technology and encrypts sensitive information so that credit‑card numbers or other private information are only accessible by authorized individuals. Stripe uses cookies to detect and prevent fraud and implements rigorous security measures (PCI Level 1 certification, SOC 1 and SOC 2 audits, and mandatory HTTPS).

5. Legal obligations and compliance – to maintain business records, comply with tax and accounting requirements and respond to lawful requests by public authorities. ThriveCart may disclose information to third parties when necessary to comply with legal processes or protect rights and property.

Legal bases (for users in the European Economic Area and UK)

When we process personal data subject to the EU General Data Protection Regulation (GDPR) or UK GDPR, we rely on one or more of the following legal bases:

• Performance of a contract – processing necessary to provide our products and services.

• Consent – for sending marketing communications and setting non‑essential cookies. You can withdraw consent at any time.

• Legitimate interests – such as improving our Site and preventing fraud. We balance our interests against your rights.

• Compliance with a legal obligation – where processing is necessary to comply with laws (e.g., tax records).

4 Cookies and similar technologies

Cookies are small text files stored on your device. HubSpot explains that cookies can be first‑party (set by the website owner) or third‑party cookies and can be persistent or session cookies. ThriveCart’s cookie policy notes that session cookies last only while your browser is open and persistent cookies remain until they expire or are deleted. We and our service providers use cookies to:

• Essential functions – to operate the Site, remember your login state and keep items in your cart. HubSpot’s essential cookies are necessary for the website to function; ThriveCart uses authentication cookies to show you the correct information and support security; Stripe’s essential cookies enable basic functions like page navigation, authentication and fraud prevention.

• Functional and analytics cookies – to enhance performance, remember preferences, analyze usage and improve services. HubSpot uses functionality cookies to enhance performance and analytics cookies to understand how its websites are used; ThriveCart uses analytics cookies for performance and research; Stripe’s functional cookies remember preferences and analytics cookies help understand how people reach and use its Services.

Managing cookies

When you first visit our Site from within the EU, HubSpot displays a consent banner allowing you to accept, decline or manage cookies. You can adjust your preferences at any time through the banner. You may also adjust browser settings to refuse cookies, but doing so may limit website functionality. For Stripe’s cookies, you can manage preferences through Stripe’s Cookies & Consent Settings Dashboard.

5 How we share personal data

We share personal data only when necessary and under contractual safeguards:

We do not sell or trade your personal data. We may share aggregated or anonymized statistics with partners or for marketing, but these do not identify individuals.

6 International data transfers

Curriculums OU is based in Estonia (European Union), but we use service providers located in other countries, including the United States. Personal data transferred outside the European Economic Area is protected through:

• Standard contractual clauses or equivalent data‑transfer agreements with our processors, ensuring that personal data receives adequate protection.

• Service provider certifications – Stripe participates in the EU‑U.S. Data Privacy Framework; HubSpot’s privacy policy refers to data processing agreements and international transfers; ThriveCart provides model contract clauses and complies with GDPR requirements.

7 Data retention

We retain personal data as long as necessary to fulfil the purposes outlined in this policy. This usually means:

• Order and account data – kept for the lifetime of your account plus a reasonable period to comply with legal obligations (e.g., tax laws).

• Marketing data – kept until you withdraw consent or unsubscribe.

• Cookies and analytics data – retained as specified in the cookie settings of HubSpot, ThriveCart and Stripe (see their individual cookie‑policy pages for durations).

• Other communications – retained as long as necessary to resolve queries and maintain records.

ThriveCart notes that it may retain personal information while you continue to use the services or as necessary to fulfil the purposes outlined in its policy.

8 Security measures

We use administrative, technical and physical safeguards to protect personal data, including:

• Encryption and secure transmission – Our checkout pages and payment processes use SSL/TLS encryption via ThriveCart and Stripe. ThriveCart’s privacy policy states that sensitive/credit information is transmitted via SSL and then encrypted in payment gateway providers’ databases. Stripe mandates HTTPS and HSTS for all services and uses mutual TLS for server‑to‑server communications.

• PCI compliance and audits – Stripe is certified to PCI Service Provider Level 1 and undergoes regular SOC 1 and SOC 2 audits.

• Access controls and authentication – Stripe supports multi‑factor authentication and single sign‑on. Access to personal data is restricted to authorized personnel who need it to perform their duties.

While we strive to protect your personal data, no method of transmission or storage is 100 % secure. If you believe your personal data has been compromised, please contact us immediately at support@kindergarten‑prep.com.

9 Your rights and choices

9.1 Rights under data‑protection laws

If you are located in the EEA, UK or other jurisdictions with similar laws, you have certain rights over your personal data. According to the UK ICO’s guide to individual rights under the GDPR, individuals have the rights to:

If you wish to exercise these rights, please contact us at support@kindergarten‑prep.com. We may request additional information to verify your identity. We will respond within the time period required by applicable laws.

9.2 Marketing and consent

• Email marketing – If you subscribe to our newsletters or other marketing communications, you can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us. ThriveCart’s policy notes that marketing emails are sent only in accordance with your preferences and include an unsubscribe link.

• Cookie preferences – You can manage cookie preferences using the consent banner on our Site, your browser settings or the cookie‑consent tools of our service providers (HubSpot, ThriveCart and Stripe). Rejecting cookies may affect functionality.

9.3 California residents

If you reside in California, you may have additional rights under state privacy laws (such as the California Consumer Privacy Act). Although our primary audience is outside California, you may contact us for more details.

10 Third‑party sites and services

Our Site may contain links to third‑party websites or services. ThriveCart notes that third‑party links and services have separate privacy policies. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before providing personal data.

11 Changes to this policy

We may update this privacy policy periodically. HubSpot’s privacy policy encourages users to review its policy periodically and states that changes will be posted on the page and material changes may be communicated via email. We will similarly post any changes on this page and update the "Last updated" date. Material changes will be communicated via email if you have provided one.

12 Contact us

If you have questions about this policy or wish to exercise your rights, please contact us:

• Email: support@kindergarten‑prep.com

• Mail: Curriculums OU, Tobiase 13a, Käina, Hiiumaa, Estonia, 92101