F.I. for Kids Co., doing business as F.I. for Kids ("F.I. for Kids," the "Company," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit www.FIforKids.com or another website, online store, page, feature, or service that links to this Policy (collectively, the "Website"); purchase a product; create an account; communicate with us; or register for a class, workshop, event, camp, demonstration, or other learning experience (each, an "Experience").

This Policy is a notice of our information practices and is not a contract. It does not apply to the privacy practices of third parties whose websites, platforms, or services we do not control. Additional or just-in-time notices may apply to a particular form, promotion, Experience, or feature. If an additional notice conflicts with this Policy, the additional notice controls for that activity.

The Website offers products, content, and Experiences designed for children and families, but its commercial, account, purchasing, registration, and communication features are directed to adults. Please read Section 6 carefully if you provide information about a child.

 

TABLE OF CONTENTS

1. Scope and Who We Are

2. Personal Information We Collect

3. Sources of Personal Information

4. How We Use Personal Information

5. Information Required to Provide Services

6. Children's Privacy and Parent-Provided Child Information

7. Allergy, Health, Accessibility, and Other Sensitive Information

8. Cookies and Similar Technologies

9. Analytics, Advertising, and Social Media

10. How We Disclose Personal Information

11. Sale, Sharing, and Targeted Advertising

12. Shopify, Payments, and Other Third-Party Services

13. Communications and Marketing Choices

14. Data Retention

15. Data Security

16. Your Privacy Choices and Requests

17. U.S. State Privacy Rights

18. California Privacy Notice

19. Consumer Health Data Notice

20. International Visitors and Policy Changes

21. Contact Us

 

1. SCOPE AND WHO WE ARE

This Policy applies to personal information that F.I. for Kids controls and processes in connection with the Website, Products, Experiences, customer service, marketing, promotions, surveys, and related business activities. "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It may also be called "personal data" under some laws.

This Policy does not apply to:

• information that has been deidentified or aggregated so it cannot reasonably be linked to an individual or household;

• employee, applicant, contractor, or workforce information governed by a separate notice, where applicable;

• information processed solely on behalf of another organization under its instructions; or

• third-party websites, apps, platforms, payment services, social networks, venues, or services that have their own privacy practices.

If you provide personal information about another person, including a child, emergency contact, gift recipient, or participant, you represent that you have authority to provide it and have given any notice or obtained any permission required by law.

2. PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with us. We may collect the following categories.

Identifiers and contact information. Name, postal address, billing and shipping address, email address, telephone number, account username, customer number, online identifiers, and similar contact details.

Account and preference information. Account credentials, saved preferences, communication choices, wish lists, favorites, and information used to maintain or personalize an account.

Transaction and commercial information. Products and Experiences viewed, added to a cart, purchased, returned, exchanged, or reviewed; order, shipping, delivery, and refund details; gift information; promotions used; and customer-service history.

Payment and billing information. Billing address, payment method type, payment status, transaction identifiers, and limited payment details received from payment processors. Our payment processors, rather than F.I. for Kids, generally collect and process full payment-card numbers and security codes.

Experience and participant information. Registration details, participant name or nickname, age or age range, date of birth if needed, attendance, selected session, caregiver information, emergency contact, authorized pickup information, participation notes, consents, waivers, and other information reasonably needed to administer an Experience.

Child information provided by an adult. A parent, legal guardian, educator, healthcare professional, or other authorized adult may provide a child's name, age, interests, registration details, dietary restrictions, allergies, accessibility needs, relevant medical or developmental information, emergency information, participation records, media-release preference, or similar information. Section 6 explains our practices for this information.

Communications and content. Messages, emails, form submissions, customer-support requests, survey responses, promotion entries, feedback, reviews, testimonials, photographs, videos, recipes, activity responses, and other content you choose to provide. If a call or chat is recorded or transcribed, we will provide notice when required.

Device, internet, and activity information. Internet Protocol address, device and advertising identifiers, browser type, operating system, language, time zone, referring and exit pages, pages and products viewed, searches, clicks, cart activity, session information, date and time of access, general interaction with emails, and diagnostics or error information.

Approximate location. General location inferred from an IP address, such as city, state, or country. We do not intentionally collect precise geolocation through the Website unless a specific feature clearly requests it and provides any notice or consent required by law.

Marketing and inference information. Marketing preferences, campaign interactions, inferred interests, likely product or Experience preferences, and audience segments created from Website activity or purchase history. We do not use child information or allergy, health, or accessibility information to create advertising profiles.

Professional and organizational information. School, practice, organization, job title, professional role, business contact information, and related details provided by educators, healthcare professionals, facilitators, venue contacts, retailers, or business partners.

Sensitive personal information. Depending on the interaction, this may include account credentials, payment information processed by a provider, a child's personal information, and allergy, health, dietary, developmental, emergency, or accessibility information supplied for an Experience. We do not intentionally collect Social Security numbers, biometric identifiers used for identification, genetic data, or government identification numbers through ordinary Website features.

3. SOURCES OF PERSONAL INFORMATION

We may collect personal information from:

• you directly, when you browse the Website, create an account, purchase a Product, register for an Experience, complete a form or waiver, contact us, subscribe to communications, submit content, enter a promotion, or respond to a survey;

• an authorized adult or another person, such as a parent or guardian registering a child, a purchaser sending a gift, an educator arranging an Experience, or a person making a referral;

• your browser or device, through cookies, pixels, tags, local storage, software development kits, server logs, and similar technologies;

• service providers, including Shopify, payment processors, shipping and fulfillment providers, booking and waiver platforms, email and SMS providers, cloud and security vendors, analytics providers, and advertising partners;

• Experience partners, including instructors, facilitators, host locations, schools, healthcare organizations, or venues involved in providing an Experience;

• business and marketing partners, when you participate in a jointly offered promotion or request information through a partner, subject to the notice provided at collection; and

• public and social-media sources, when you interact with our public pages, tag us, publish a public review, or authorize a social platform to share information with us.

We may combine information from these sources when permitted by law and use the combined information for the purposes described in this Policy.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

• operate, maintain, secure, and troubleshoot the Website;

• create and manage accounts and authenticate users;

• process orders, payments, returns, refunds, registrations, and deliveries;

• provide Products, Experiences, downloads, customer service, and requested information;

• communicate about an order, registration, schedule, location, safety matter, product recall, policy update, or other transaction;

• administer an Experience, verify permissions, plan age-appropriate activities, accommodate disclosed needs, maintain attendance, and respond to emergencies;

• personalize the Website and recommend content, Products, or Experiences to adults;

• send marketing communications where permitted and manage communication preferences;

• measure Website traffic, campaign performance, and customer engagement;

• conduct research, analytics, quality assurance, surveys, and product or program improvement;

• detect, investigate, and prevent fraud, misuse, security incidents, prohibited conduct, or unlawful activity;

• protect the rights, safety, security, and property of F.I. for Kids, participants, customers, children, and others;

• enforce our Terms of Use, policies, agreements, and legal rights;

• comply with legal, tax, accounting, product-safety, reporting, and regulatory obligations;

• evaluate or complete a merger, financing, acquisition, reorganization, sale, or transfer of assets; and

• create deidentified or aggregated information for lawful business purposes.

We will not use personal information for a materially different, unrelated, or incompatible purpose without providing any additional notice or obtaining any consent required by law.

5. INFORMATION REQUIRED TO PROVIDE SERVICES

You may choose not to provide personal information. However, some information is necessary to complete an order, create an account, respond to a request, verify authority, administer an Experience, or address safety needs. If required information is not provided, we may be unable to offer the relevant Product, feature, or Experience.

We seek to collect only information reasonably necessary for the disclosed purpose. Please do not provide medical, financial, government-identification, or other sensitive information unless a form specifically requests it and it is needed for the service.

6. CHILDREN'S PRIVACY AND PARENT-PROVIDED CHILD INFORMATION

The Website features child-friendly products, characters, educational content, and Experiences, but its purchasing, account, registration, and communication features are intended for adults. Children under 13 should not create an account, make a purchase, register for an Experience, subscribe to marketing, post content, or submit personal information directly through the Website.

Information provided by adults. We may receive information about a child from the child's parent or legal guardian or from another adult who represents that they are authorized to provide it. We use that information to fulfill the adult's request, administer and personalize the child's Experience, communicate with the responsible adult, protect health and safety, satisfy legal obligations, and for other purposes described at collection. We do not use child registration information for targeted advertising or to build an advertising profile about the child.

Adult authority. By providing a child's information, you represent that you are the child's parent or legal guardian or otherwise have all authority and permissions required to provide the information and authorize its processing. Educators, healthcare professionals, facilitators, and organizations must obtain any permissions required from a parent or legal guardian before providing child information to us.

No unnecessary conditioning. We will not condition a child's participation on providing more personal information than is reasonably necessary for the activity. Some information may nonetheless be required for registration, age eligibility, emergency planning, safety, or accommodation.

Direct submissions by children. If we learn that we collected personal information online directly from a child under 13 without authorization or another lawful basis, we will take reasonable steps to delete it. A parent or legal guardian who believes a child submitted information directly may contact us using Section 21.

Future child-directed features. If we intentionally introduce an online feature directed to children under 13 that collects personal information directly from them, we will provide a child-specific privacy notice, give direct notice to parents, obtain verifiable parental consent where required, collect only information reasonably necessary for the activity, and provide parents the controls required by the Children's Online Privacy Protection Act ("COPPA") and other applicable law before activating that feature.

Parent and guardian choices. Subject to verification and applicable law, a parent or legal guardian may ask to review, correct, or delete personal information we maintain about their child, withdraw permission for further collection or use, or ask questions about our child-data practices. Deleting required registration information may prevent continued participation in an Experience.

7. ALLERGY, HEALTH, ACCESSIBILITY, AND OTHER SENSITIVE INFORMATION

An adult may choose or be asked to provide allergy, dietary, health, developmental, disability, accessibility, emergency, or similar information when reasonably necessary to evaluate accommodations, plan an Experience, protect a participant's safety, or respond to an emergency. This information may be considered sensitive personal information or consumer health data under some laws.

We use this information only for the requested service, safety, accommodation, emergency response, legal compliance, incident management, and closely related purposes. We do not use it to advertise to a child or family, infer unrelated conditions, determine eligibility for insurance or employment, or build marketing profiles.

We limit access to people with a need to know. We may disclose relevant information to authorized personnel, instructors, facilitators, host venues, emergency responders, healthcare providers, insurers, legal advisers, or service providers when reasonably necessary for the Experience, an emergency, an incident, or a legal obligation. We do not sell this information or share it for cross-context behavioral advertising.

Provide only information that is accurate, current, and reasonably necessary. An adult should update us promptly if relevant information changes. Unless expressly agreed in writing for a particular Experience, disclosure of an allergy or dietary restriction does not mean that an environment is allergen-free or that cross-contact can be eliminated.

Section 19 provides additional disclosures that may apply to consumer health data.

8. COOKIES AND SIMILAR TECHNOLOGIES

We and our service providers may use cookies, pixels, tags, local storage, software development kits, server logs, and similar technologies to collect device and activity information. These technologies may operate when you visit the Website, open an email, interact with an advertisement, or use an embedded feature.

We may use the following categories:

• Strictly necessary technologies support checkout, account login, fraud prevention, security, network management, privacy choices, and core Website functions.

• Functional technologies remember choices and improve convenience or personalization.

• Analytics technologies help us understand traffic, navigation, performance, errors, and engagement.

• Advertising technologies help measure campaigns, limit repeated ads, create adult audiences, and deliver or assess interest-based advertising on third-party services.

You can manage non-essential technologies through the "Cookie Preferences" link in the Website footer, where available, and through your browser or device settings. Blocking cookies may affect Website functionality. Browser controls generally apply only to that browser and device, and clearing cookies may also clear saved preferences.

Some browsers offer a "Do Not Track" setting, but there is no uniform industry standard for responding to it. We do not currently respond to Do Not Track signals. We do, however, process legally recognized opt-out preference signals, such as Global Privacy Control ("GPC"), as required by applicable law. A GPC signal generally applies to the browser and device from which it is sent.

9. ANALYTICS, ADVERTISING, AND SOCIAL MEDIA

We may use analytics providers to measure Website use, understand performance, identify errors, and improve Products and Experiences. Analytics providers may collect device, cookie, approximate location, and Website activity information and may associate it with information collected through other services as permitted by their terms and applicable law.

We may work with advertising and social-media partners to measure ads, create audiences of adults, avoid showing irrelevant ads, and show interest-based advertising on other websites or platforms. Depending on the tools and settings used, these partners may receive identifiers, hashed contact information, device information, and Website or purchase activity. Certain disclosures may be considered a "sale," "sharing," or use for "targeted advertising" under state privacy laws even when no money is exchanged. Section 11 explains our practices and opt-out choices.

The Website may include social-media buttons, embedded media, plug-ins, or links. These features may allow the provider to collect information about your device and Website activity, including whether you are logged into that provider's service. Your use of a social-media platform is governed by that platform's privacy policy and settings.

We do not knowingly use child information supplied for an Experience, or allergy, health, or accessibility information, for analytics-based profiling or targeted advertising. Advertising features should be configured for adults and should not be placed on any intentionally child-directed feature unless legally compliant parental notice and consent mechanisms are in place.

10. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

• Service providers and contractors, including Website hosting, e-commerce, payment, fraud prevention, cloud storage, customer support, booking, waiver and electronic-signature, communications, analytics, marketing, fulfillment, shipping, delivery, IT, security, and professional-service providers;

• Experience personnel and partners, including authorized employees, instructors, facilitators, schools, healthcare organizations, host venues, and emergency personnel, when information is reasonably necessary to administer an Experience, provide an accommodation, or protect safety;

• Payment, fulfillment, and delivery providers, to process a transaction and deliver a Product or service;

• Advertising, analytics, and social-media partners, as described in Sections 8, 9, and 11 and subject to available privacy choices;

• Business and promotion partners, when you request a jointly offered service or enter a co-sponsored promotion and the disclosure is described at collection;

• Professional advisers, insurers, and auditors, as reasonably necessary to operate, protect, or evaluate our business;

• Government, regulatory, legal, and safety recipients, when we believe disclosure is necessary or appropriate to comply with law or legal process, respond to authorities, protect rights and safety, investigate wrongdoing, enforce agreements, or address an emergency;

• Transaction parties, in connection with a proposed or completed financing, merger, acquisition, reorganization, bankruptcy, sale, or transfer of some or all of our business or assets; and

• Other recipients at your direction or with your consent.

If you submit a public review, comment, social-media post, or other public content, it may be visible to other users and may be copied or shared outside our control. Do not include sensitive information or a child's identifying information in public content.

We require service providers and contractors to handle personal information for appropriate purposes and under applicable contractual restrictions. Some recipients, such as payment providers, Shopify, social-media platforms, or jointly offered services, may also process information under their own privacy policies.

11. SALE, SHARING, AND TARGETED ADVERTISING

We do not sell personal information for money. We do not knowingly sell or share the personal information of consumers under 16, and we do not sell or share child registration information or allergy, health, or accessibility information for advertising.

We may disclose identifiers, hashed contact information, device identifiers, approximate location, commercial information, and internet or other electronic-network activity to advertising, analytics, and social-media partners in ways that some state laws define as "sale," "sharing," or processing for "targeted advertising." These disclosures are used to measure advertising, create adult audiences, and deliver more relevant ads. The exact categories depend on the Website tools and privacy settings in use.

Where applicable, you may opt out by:

• selecting "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" in the Website footer;

• changing non-essential cookie choices through "Cookie Preferences";

• enabling GPC in a supported browser or extension; or

• contacting us using Section 21.

Opt-out choices may be browser- and device-specific. We may retain limited information needed to record and honor an opt-out. We do not knowingly discriminate against anyone for exercising a privacy right.

12. SHOPIFY, PAYMENTS, AND OTHER THIRD-PARTY SERVICES

Our online store is hosted by Shopify. Shopify processes information about Website visitors and customers to provide and improve its commerce, checkout, security, analytics, and related services. Depending on our Shopify configuration, Shopify may use information across merchants through features such as Shopify Network Intelligence. Shopify's processing and your rights with Shopify are described in the Shopify Consumer Privacy Policy available at https://privacy.shopify.com/en.

Shopify's customer-privacy tools may provide a cookie banner, cookie-preference controls, and a data-sharing opt-out page. These controls govern Shopify technologies and connected pixels only to the extent they are properly configured. Third-party apps, custom scripts, and manually installed pixels may require separate consent logic.

Payments are processed by third-party payment providers. Those providers may collect payment-card, bank, billing, fraud-prevention, device, and transaction information under their own terms and privacy policies. F.I. for Kids generally receives confirmation, limited card details such as brand and last four digits, and transaction status rather than a full payment-card number.

Links to third-party websites or services are provided for convenience. We do not control and are not responsible for their privacy or security practices. Review the privacy notice of any third party before providing information.

13. COMMUNICATIONS AND MARKETING CHOICES

Email. You may unsubscribe from promotional emails using the link in the message or by contacting us. Even after opting out of marketing, we may send non-promotional communications about orders, registrations, safety, recalls, account security, privacy requests, or other transactions.

Text messages. If we offer SMS marketing, we will send promotional texts only as permitted by law and under the consent and messaging terms presented at sign-up. You may opt out by replying STOP or using another method stated in the message. Message and data rates may apply.

Postal marketing. You may ask us to stop promotional mail by contacting us and providing the name and mailing address shown on the material. It may take time for a request to affect campaigns already prepared.

Accounts and preferences. If account tools are available, you may update certain information and preferences through your account. You may also contact us to request a change. We may keep a suppression record so we do not send communications you declined.

14. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain records, comply with law, resolve disputes, enforce agreements, protect safety, prevent fraud, and establish or defend legal claims.

When setting retention periods, we consider the amount, nature, and sensitivity of the information; the purpose of collection; the duration of the customer or participant relationship; legal, tax, accounting, product-safety, insurance, and reporting requirements; applicable limitation periods; and the risk of harm from unauthorized use or disclosure.

Retention periods may differ by record type. For example:

• order and transaction records may be retained for tax, accounting, warranty, recall, fraud-prevention, and legal purposes;

• account information may be retained while the account is active and for a reasonable period afterward;

• Experience registration and participant information may be retained through the Experience and for a reasonable follow-up, incident, insurance, or claims period;

• allergy, health, accessibility, and emergency information should be minimized and retained only as long as needed for the Experience, safety, incident management, or law;

• marketing information may be retained until you opt out, after which limited suppression information may remain;

• cookie and analytics information is retained according to the applicable tool settings and business purpose; and

• information collected online directly from a child under 13 without appropriate authorization will be deleted as required by law.

When information is no longer needed, we may delete it, deidentify it, aggregate it, or securely isolate it until deletion is practical. Backup copies may persist for a limited period and remain protected from ordinary use.

15. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, taking into account its sensitivity and the nature of our operations. Safeguards may include access controls, encryption in transit, vendor review, authentication, data minimization, staff training, incident-response procedures, and limits on access to child and sensitive information.

No method of transmission, payment, storage, or security is completely secure. We cannot guarantee that information will never be accessed, lost, misused, altered, or disclosed without authorization. You are responsible for using a strong, unique password, protecting your devices and account credentials, and notifying us promptly of suspected unauthorized account activity.

16. YOUR PRIVACY CHOICES AND REQUESTS

Depending on your relationship with us and applicable law, you may be able to:

• access or obtain a copy of personal information we maintain about you;

• correct inaccurate personal information;

• delete personal information, subject to legal exceptions;

• receive certain information in a portable format;

• opt out of sale, sharing, or targeted advertising;

• limit certain uses or disclosures of sensitive personal information;

• withdraw consent where processing depends on consent;

• appeal a decision on a privacy request; and

• receive equal service and pricing without unlawful discrimination for exercising a privacy right.

To submit a request, contact us using the email address or phone number in Section 21 and state the right you wish to exercise. For sale, sharing, targeted-advertising, or cookie choices, you may also use the Website footer controls described in Section 11.

We may need to verify your identity and authority before fulfilling a request. Verification may require matching information you provide with information we maintain and, for sensitive requests, additional steps appropriate to the risk. We will use verification information only for the request. If we cannot verify a request, we may deny or limit it as permitted by law.

An authorized agent may submit a request where permitted. We may require proof of the agent's authority and may ask the consumer to verify identity or confirm permission directly. Parents and legal guardians may submit requests concerning their child's information, subject to verification of identity and relationship.

Some information may be exempt from a request, such as information needed to complete a transaction, protect security, comply with law, exercise legal rights, or maintain a suppression record. We will explain a denial when required and provide appeal instructions where applicable.

17. U.S. STATE PRIVACY RIGHTS

Residents of California and certain other U.S. states may have rights concerning access, confirmation of processing, correction, deletion, portability, targeted advertising, sale, profiling in furtherance of decisions with legal or similarly significant effects, sensitive data, and appeals. These rights vary by state and apply only when the relevant law covers F.I. for Kids and the particular information.

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects concerning a consumer. We do not process sensitive personal information for the purpose of inferring characteristics about an individual or for targeted advertising.

You may exercise applicable rights through the methods in Section 16. We will respond within the period required by law and may extend the response period when permitted. If we deny an appeal, you may have the right to contact your state attorney general or another regulator.

18. CALIFORNIA PRIVACY NOTICE

This Section supplements the rest of this Policy for California residents and applies only to the extent the California Consumer Privacy Act, as amended ("CCPA"), covers F.I. for Kids and the relevant information.

Categories collected. In the 12 months before the Effective Date, depending on how individuals interacted with us, we may have collected the following CCPA categories: identifiers; customer-record information; characteristics of protected classifications, such as age or disability information supplied for a participant; commercial information; internet or electronic-network activity; approximate geolocation; audio, electronic, visual, or similar information; professional or employment-related information; inferences; and sensitive personal information, including account credentials and health-related or child information supplied for an Experience. We do not intentionally collect biometric information for identification or precise geolocation through ordinary Website features.

Sources and purposes. We collect these categories from the sources in Section 3 and use them for the business and commercial purposes in Section 4, including providing Products and Experiences, processing transactions, customer service, safety, security, analytics, marketing to adults, and legal compliance.

Categories disclosed for business purposes. In the preceding 12 months, we may have disclosed each category listed above to the recipient categories in Section 10 as reasonably necessary for a business purpose. Relevant recipients may include service providers, contractors, payment and fulfillment providers, Experience personnel and venues, professional advisers, authorities, transaction parties, and recipients you direct.

Categories sold or shared. We do not sell personal information for money. Subject to our actual Website configuration, we may have sold or shared, as those terms are defined by the CCPA, identifiers, commercial information, internet or electronic-network activity, and approximate geolocation with advertising, analytics, or social-media partners for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16. We do not sell or share allergy, health, accessibility, or child registration information for cross-context behavioral advertising.

Sensitive personal information. We use sensitive personal information only for purposes reasonably expected in connection with the requested service, including account security, payment, safety, accommodation, Experience administration, legal compliance, and other permitted purposes. We do not use or disclose sensitive personal information for purposes that require a right-to-limit link under the CCPA. If that practice changes, we will update this notice and provide the required choice.

California rights. Subject to exceptions and verification, California residents may request to know, access, correct, or delete personal information; request information about categories collected, sources, purposes, and disclosures; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive non-discriminatory treatment. Instructions appear in Sections 11 and 16.

Shine the Light. California Civil Code Section 1798.83 may permit certain California residents to request information about disclosure of personal information to third parties for their own direct-marketing purposes. To make a request, contact us using Section 21 and write "California Shine the Light Request" in the subject line.

California minors. The Website's account and submission features are intended for adults. If a California resident under 18 has posted content to the Website, the resident or a parent or legal guardian may request removal by contacting us and identifying the content. Removal does not ensure complete deletion if others copied the content, it was deidentified, or the law permits retention.

Financial incentives. We do not currently offer a loyalty, rewards, or financial-incentive program that is subject to a CCPA notice of financial incentive. If we introduce one, we will provide the required notice before enrollment.

19. CONSUMER HEALTH DATA NOTICE

This Section provides additional disclosures for information that may be "consumer health data" under Washington's My Health My Data Act, Nevada's consumer health data law, or similar laws. It applies only to the extent the relevant law covers F.I. for Kids, the individual, and the information.

Categories collected. We may collect allergy information, dietary restrictions connected to health or safety, disability and accessibility needs, relevant medical or developmental information, emergency instructions, and information about a person's request for an accommodation or participation in an Experience. We do not use Website activity to infer a medical diagnosis or health condition for advertising.

Sources. We collect this information directly from an adult participant; from a parent, legal guardian, educator, healthcare professional, or other authorized adult acting for a child; and, where necessary, from an Experience venue, facilitator, or service provider involved in the requested service.

Purposes. We collect and use consumer health data to provide an Experience or accommodation requested by the consumer or responsible adult; determine whether we can safely provide the requested activity; communicate with authorized adults; respond to emergencies and incidents; maintain safety and insurance records; comply with law; and protect legal rights. We will obtain consent for another collection or use when required.

Disclosures. When reasonably necessary for these purposes, we may disclose relevant consumer health data to authorized F.I. for Kids personnel; instructors and facilitators; host venues, schools, or healthcare organizations; booking, waiver, cloud, security, and IT providers; emergency responders and healthcare providers; insurers and professional advisers; government or legal recipients; transaction parties; and other recipients directed by the consumer or responsible adult. We do not sell consumer health data, and we do not disclose it for targeted advertising.

Categories shared. Depending on the requested Experience or accommodation, the categories disclosed may include only the relevant allergy, dietary, disability, accessibility, medical, developmental, emergency, accommodation, or participation information needed by the recipient. We do not disclose more consumer health data than we reasonably believe is necessary for the authorized purpose.

Rights. Depending on applicable law, a consumer may confirm whether we collect, share, or sell consumer health data; access it; receive a list of recipients; withdraw consent; or request deletion. A verified parent or legal guardian may make a request for a child. Submit a request using Section 21 and write "Consumer Health Data Request" in the subject line. If we deny a request, we will provide appeal instructions where required.

Authorization and processors. We will obtain a separate authorization before selling consumer health data if a future practice requires it. Processors may handle this information only under appropriate instructions and contracts. We will not allow employees, processors, or contractors to access consumer health data unless access is necessary for an authorized purpose.

20. INTERNATIONAL VISITORS AND POLICY CHANGES

International visitors. F.I. for Kids is based in the United States, and the Website is currently intended primarily for a U.S. audience. Personal information may be processed and stored in the United States and other countries where our service providers operate. Those countries may have privacy laws different from those where you live. If we intentionally offer Products or services in another jurisdiction, we may provide supplemental disclosures and rights required there.

Changes to this Policy. We may update this Policy to reflect changes in our practices, technologies, Products, Experiences, vendors, or legal obligations. We will post the revised Policy and update the Effective Date. If a change is material, we may provide additional notice through the Website, email, or another appropriate method. We will obtain consent to a change when required by law.

21. CONTACT US

Questions, concerns, privacy requests, parental requests, or complaints may be directed to:

F.I. for Kids Co.

Attn: Privacy

8 The Green Ste B, Dover, DE 19901

Email: info@fiforkids.com

Phone: (773) 627-8777

For faster handling, describe the request, identify the state where you live, and provide enough information for us to locate the relevant records. Please do not send full payment-card numbers, government identification numbers, or unnecessary medical details by email.