Privacy Policy

Effective Date: August 21st 2025

At The Mama Company, LLC (“we,” “us,” or “our”), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal
information when you visit our website, www.drinkmamawater.com(the “Site”), make a purchase, or otherwise interact with us online.

We are committed to protecting your privacy in accordance with applicable data
protection laws, including the California Consumer Privacy Act (CCPA/CPRA),
the General Data Protection Regulation (GDPR), and other U.S. state privacy laws.

1. Information We Collect

We collect personal information to operate our business, provide and improve our
products and services, communicate with you, and comply with legal requirements.
We collect personal information from the following sources:

-Directly from you: account registration, purchases, customer service, surveys,
referrals
-Automatically: cookies, pixels, analytics tools (e.g., Google Analytics), and
device identifiers
-From third parties: Shopify (e-commerce platform), social media platforms (e.g.,
Meta), marketing or analytics providers

A. Information You Provide Directly

This includes information you submit to us when you:

-Place an order or request a return
-Subscribe to newsletters or marketing emails
-Create an account or fill out forms
-Contact us for support
-Participate in surveys or promotions

Examples of personal data collected:

-Name, email address, phone number
-Shipping and billing addresses
-Account credentials (if applicable)

-Payment details (processed securely by third parties, we do not store full credit
card numbers)
-Customer service communications
-Reviews, feedback, or survey responses
- Any information you provide voluntarily, such as through contact forms, surveys,
customer service interactions, or referral programs

B. Information Collected Automatically

When you use the Site, we collect certain information automatically via cookies and
similar technologies:

-IP address and device identifiers
-Browser type and operating system
-Pages visited and time spent on the Site
-Referral/exit URLs
-General geolocation data
-Clickstream and session data

This data helps us improve functionality, security, and performance.

C. Information from Third Parties

We may receive personal information from:

-Shopify: For order fulfillment, account creation, and transaction data
-Marketing platforms (e.g., Meta, Google): For advertising and analytics
-Payment processors: For payment verification
-Affiliate/referral partners
-Social media networks, if you engage with us through those platforms

D. Use of Cookies and Tracking Technologies

We and our partners use cookies, pixels, and similar tools to:

-Operate and secure our website
-Store preferences and improve user experience
-Analyze website usage and traffic
-Deliver personalized marketing

You can manage cookie preferences through your browser settings or opt out of
targeted advertising at https://optout.aboutads.info.

2. How We Use Your Information

We use personal information for the following purposes:

A. To Fulfill Orders and Provide Services

-Process purchases, returns, and customer inquiries
-Send order confirmations and shipping updates
-Verify and manage your account (if applicable)

B. To Operate, Analyze, and Improve Our Website

-Ensure functionality across devices
-Identify and resolve technical issues
-Analyze user engagement and behavior
-Optimize product offerings and site performance

C. To Communicate with You

-Respond to customer service requests
-Send transactional emails and policy updates
-Send promotional materials (with your consent)
-Conduct surveys and request feedback

You may unsubscribe from marketing emails at any time.

D. To Personalize Your Experience

-Remember user preferences
-Display recently viewed or recommended products
-Tailor emails, SMS, and digital ads to your interests

We may combine on-site behavior with third-party data for personalization.

E. For Advertising and Retargeting

- Deliver targeted advertisements
-Track ad performance and conversion
-Re-engage site visitors (e.g., abandoned cart emails)
-Segment audiences for marketing campaigns

You may opt out of the “sale” or “sharing” of personal data for targeted ads by emailing us at support@drinkmamawater.com with the subject line “Do Not Sell or Share My Personal Information.”

F. To Meet Legal Obligations and Prevent Fraud

-Comply with applicable laws or law enforcement requests
-Detect and prevent fraud, abuse, or threats
-Enforce our Terms of Service and other legal rights
-Maintain accurate records

G. For Internal Business Operations

-Perform accounting and audits
-Analyze sales and trends
-Manage inventory and logistics
-Develop new services or improve existing ones

We do not use sensitive personal data for any secondary purposes without
your explicit consent.

3. How We Share Your Information

We share your personal data only as necessary and in compliance with applicable law.

A. With Service Providers

We share data with third-party vendors that help us run our business, including:

-Shopify: For website hosting, order processing, and checkout
-Payment Processors: (e.g., Shopify Payments)
-Shipping Providers: For order delivery and logistics
-Marketing Platforms: (e.g., Klaviyo for email/SMS communications)
-IT & Hosting Providers: To maintain website operations

All vendors are contractually obligated to protect your data and act in accordance with privacy laws.

B. With Analytics and Ad Partners

We work with partners to analyze behavior and serve personalized advertising:
-Google Analytics
-Meta (Facebook/Instagram)
-Other ad networks and analytics providers

These partners may use cookies or pixels to collect browsing data. You may opt out of this sharing by contacting us.

C. Legal Requirements

We may disclose your information when necessary to:

-Comply with applicable laws or legal obligations
-Respond to law enforcement or regulatory authorities
-Protect our rights, property, or safety or that of others
-Investigate fraud, abuse, or security threats

D. Business Transfers

In the event of a merger, acquisition, reorganization, or asset sale, your data may be
transferred as part of the business transaction, subject to safeguards and legal
requirements.

E. With Your Consent

We may share your data for other purposes with your explicit consent. We do not sell
your personal data for monetary consideration. However, some sharing may
be deemed a ‘sale’ or ‘sharing’ under state laws.

4. How We Protect Your Information

We implement physical, technical, and administrative safeguards to protect your
personal data.

A. Security Measures

-SSL Encryption: All Site traffic is encrypted
-Secure Hosting: Provided by Shopify with robust infrastructure security
-Access Controls: Restricted access to personal data internally
-Retention Policies: We retain only what’s needed for business and legal
purposes
-Regular Monitoring: We test and monitor systems for vulnerabilities

B. Third-Party Protections

We require our service providers to use strong security practices and comply with
privacy regulations, including the CCPA and GDPR.

C. What You Can Do

You can help protect your information by:

-Using strong, unique passwords
-Logging out of accounts when not in use
-Avoiding public Wi-Fi for sensitive transactions
-Contacting us if you suspect a data breach

D. Data Breach Notification

If a breach occurs that affects your personal information, we will notify you as required by law and in accordance with our internal response plan.

5. Your Privacy Rights

Depending on your place of residence, you may have certain rights under data privacy laws such as the California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), Colorado Privacy Act, Virginia Consumer Data Protection Act (VCDPA), and others.

Right Description

-Right to Know What personal data we collect and how it's used
-Right to Access Request a copy of your data
-Right to Delete Request erasure of your data (subject to exceptions)

-Right to Correct Fix inaccuracies in your data
-Right to Opt-Out From the “sale” or “sharing” of your data
-Right to Limit Use of sensitive personal data
-Right to Portability Get your data in a portable format
-Right to Non-Discrimination Equal service if you exercise your rights

California Residents (CCPA/CPRA):

-Know what personal data we collect and how we use it
-Request access to your data
-Request deletion or correction of your data
-Opt out of the sale or sharing of personal information
-Limit the use of sensitive personal data (if applicable)

EU/EEA Residents (GDPR):

-Access, correct, or delete your data
-Withdraw consent at any time
-Object to certain data uses

-Request data portability
-File a complaint with your data protection authority

To exercise your rights, contact us at:
Email: Support@drinkmamawater.com

Mail: The Mama Company, LLC, 8750 N. Central Expressway, Suite 1735, Dallas, Texas 75231

We may request identity verification before processing certain requests.

5. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for
which it was collected, including to comply with legal, regulatory, tax, accounting, or
reporting obligations, resolve disputes, and enforce our agreements.

A. General Retention Periods
Retention periods vary depending on the type of information and its intended use:

-Order and Transaction Data: Retained for a minimum of 7 years to meet tax,
accounting, and financial reporting obligations.
-Account Information: Retained while your account remains active and for a
reasonable period afterward, in case of reactivation or customer support needs.
-Customer Support Communications: Retained for up to 2 years to assist with
ongoing inquiries and improve service.
-Marketing Data: Retained until you withdraw your consent or opt out. We
routinely review and remove inactive or outdated subscriber data.
-Cookies and Device Information: Retention varies by cookie type and browser
settings. You may manage or delete cookies at any time via your browser or our
Cookie Preferences tool (if available).

B. Legal and Regulatory Obligations

We may retain certain data beyond our standard periods if required to:

-Comply with applicable legal or regulatory obligations (e.g., tax laws)
-Protect our legal interests or resolve disputes

-Investigate fraud or maintain the security and integrity of our systems
-Order fulfillment and customer support
-Legal, accounting, and tax compliance
-Fraud prevention and security
-Marketing (until you opt out)

C. Deletion Requests

You may request deletion of your personal information by contacting us at [Insert
Privacy Email Address]. However, we may be unable to fully delete your information if:

-Retention is legally required
-The data is needed to complete a transaction or fulfill a request
-It has been anonymized or aggregated and cannot be linked to you

We respond to deletion requests in accordance with applicable privacy laws, including the CCPA and GDPR.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, analyze usage, and
deliver personalized advertising.

A. What Are Cookies?
Cookies are small data files stored on your device that help websites function properly and remember your preferences.

-First-party cookies: Set by our site
-Third-party cookies: Set by partners such as Google, Meta, and Shopify
-Session cookies: Expire when your browser is closed
-Persistent cookies: Remain on your device until they expire or are deleted

B. Types of Cookies We Use

1. Strictly Necessary Cookies – Essential for website functionality (e.g., checkout,
login).

2. Performance & Analytics Cookies – Help us understand how users interact
with the site (e.g., Google Analytics).

3. Functional Cookies – Remember your preferences (e.g., region, language).

4. Targeting & Advertising Cookies – Deliver personalized ads based on
browsing behavior (e.g., Meta, Google Ads).

C. Managing Your Preferences
You may manage or disable cookies via:

-Your browser’s cookie settings
-Our Cookie Preferences tool (if available)
-Third-party opt-out platforms:
o https://optout.aboutads.info (U.S.)
o https://www.youronlinechoices.com (EU)

Note: Disabling cookies may limit some features of the site. We honor the Global
Privacy Control (GPC) where applicable.

D. Cookie Consent

We may display a cookie banner to collect your consent, where required by law. By
continuing to use our site, you consent to the use of cookies as described, unless you opt out.

8. Children’s Privacy

Our website and services are not intended for use by children under the age of 13 (or
the age of digital consent in your jurisdiction, such as 16 in some EU countries).

A. No Intentional Collection

We do not knowingly collect personal data from children. If we learn that a child has
submitted data without verified parental consent, we will delete it promptly.

B. Parental Rights

If you are a parent or guardian and believe your child has provided us with personal
information, please contact us at:

Email: Support@drinkmamawater.com

Mail: The Mama Company, LLC, 8750 N. Central Expressway, Suite 1735, Dallas, Texas 75231

We will take appropriate steps to investigate and delete the data, as required by law.
C. Compliance with COPPA and Other Laws

We comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and other
applicable international privacy laws.

9. International Data Transfers

We may process your personal data in the United States or other countries where our
partners or service providers operate.

A. Data Transfers from the EEA, UK, and Switzerland

For individuals located in the EEA, UK, or Switzerland, we implement appropriate
safeguards, including:

-Standard Contractual Clauses (SCCs)
-Adequacy decisions from the European Commission or UK authorities
-Additional technical and organizational measures where necessary

B. Third-Party Vendors

We partner with vendors (e.g., Shopify, Google, Meta) who may process data in the
U.S. or other jurisdictions. We ensure contractual protections are in place to safeguard your data.

C. Consent and Protection

By using our services, you consent to the transfer of your data to countries outside your own, including the U.S. Regardless of location, your data will be protected in
accordance with this Privacy Policy and applicable laws.

We use appropriate safeguards such as Standard Contractual Clauses (SCCs) for
data from the EU/EEA, UK, or Switzerland.

10. Security

We take data security seriously and implement industry-standard safeguards, including:
-SSL encryption
-Secure server infrastructure
-Access controls and authentication procedures
-Regular system monitoring

While no system is completely secure, we continually work to protect your information from unauthorized access, disclosure, or misuse.

11. Updates to This Policy

We may revise this Privacy Policy periodically. If we make significant changes, we will
post a notice on our website or notify you directly where legally required. Continued use of the website after such changes constitutes your acceptance of the revised policy.

12. State-Specific Disclosures

Certain states (e.g., California, Colorado, Virginia) require additional disclosures. These are included where applicable above. You may request a copy of these rights and disclosures via email or phone.

13. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Email: Support@Drinkmamawater.com

Mail: The Mama Company, LLC
8750 N. Central Expressway, Suite 1735, Dallas, Texas 75231

We are committed to protecting your privacy and will respond promptly and
transparently to your inquiries.