Privacy Policy · Growing Mindfully

Growing Mindfully is the mindfulness-based infant, toddler, and preschool program operated by Present Pathways, Inc., a California for-profit corporation doing business as Growing Mindfully ("Growing Mindfully," "we," "us," or "our"), located on the top floor of 750 N Street, Sacramento, California 95814. We care for children, and we know the trust that requires. This policy explains, in plain English, what personal information we collect about families and children, why we collect it, how we protect it, how long we keep it, and the choices and rights you have — including your rights under California law.

This policy covers information we collect through our website at growingmindfully.org, our online waitlist and enrollment application, and the email and forms connected to them. It does not change any separate enrollment agreement, admission agreement, or notice you sign with us as a licensed child care provider; where those documents are more specific, they govern that relationship.

1. Who we are

Legal entity: Present Pathways, Inc., a California corporation, doing business as Growing Mindfully.
Address: 750 N Street, Top Floor, Sacramento, CA 95814.
Privacy contact: enrollment@growingmindfully.org · (916) 626-2739.
Licensing: We are a licensed child care center regulated by the California Department of Social Services, Community Care Licensing Division.

2. The information we collect

We collect only what we need to run a waitlist, evaluate eligibility, offer and process enrollment, bill tuition, communicate with you, and meet our legal and licensing obligations. Almost all of the information below is provided directly by a parent or guardian when they apply to our waitlist or enroll a child. We do not knowingly collect information directly from children online, and our website and application are designed for parents and guardians, not for use by children.

Information about the parent or guardian

First and last name of the applying parent or guardian, and of a second parent or guardian if provided.
Email address(es) and phone number(s).
Employer and, where relevant to our state-employee and neighbor-building tuition rates, the building you work in.
How you heard about us, and any free-text notes you choose to include with your application.
Whether you have a sibling already enrolled with us (and that sibling's name, if you tell us), which affects waitlist priority.

Information about the child

Child's first and last name.
Child's date of birth (or, for expecting families, an indication that a due date is being used in place of a birth date), which determines the age band and waitlist placement.
Requested schedule (the days of care needed) and desired start date.

When a child is actually enrolled as a student, we collect the additional records that California child care licensing requires — for example emergency contacts, the child's physician and dentist, immunization and medical-assessment information, dietary restrictions and allergies, and signed admission and authorization forms. Much of that enrollment recordkeeping is maintained in our child care management system (Brightwheel) and in the licensed child's record we are required to keep on site; this policy describes the privacy practices that surround it.

Account, application, and technical information

A unique application ID and a secure portal access token that lets you return to your application.
Email-verification tokens and timestamps used to confirm your email address.
Records that prove you accepted our waitlist terms — the version of the terms shown to you, the timestamp of acceptance, and the IP address and browser (user-agent) at the moment you accepted. We keep these solely as evidence of agreement.
Offer, response, and status information as your application moves through our waitlist and onboarding (for example, when an offer was made, when it expires, and your response).
Standard website and analytics data collected through Google Analytics / Google Tag Manager (such as pages visited and general device and usage information). See "Cookies and tracking" below.

Payment information

We collect records of the payments you make to us — for example the waitlist fee, the enrollment fee, and any deposit or prepaid tuition — including the fact and date of payment and the processor's transaction or payment-intent identifiers. We do not collect or store your full credit/debit card number or full bank-account number on our own systems. See "How payments are handled" below.

3. Why we collect it (and our legal basis)

At or before the point of collection, our application tells you what we collect and why. We use the information above to:

Operate our waitlist, including determining age band and priority and communicating about openings.
Evaluate eligibility for state-employee and neighbor-building VIP tuition rates.
Make, track, and process enrollment offers, agreements, deposits, and tuition billing.
Communicate with you about your application, your child, your account, and our program.
Keep the records and provide the care that California child care licensing law requires of us.
Protect the security and integrity of our systems and resolve disputes.

We do not sell your personal information, and we do not share it with third parties for those third parties' own direct-marketing purposes.

4. How we share information — our service providers

We do not sell or rent personal information. We share it only with the service providers who help us run the program, and only to the extent they need it to perform their service for us. These providers are contractually obligated to protect the information and to use it only on our behalf. Our key providers are:

Cloudflare — hosts our website and the waitlist/enrollment application and its database.
Stripe — processes card and bank (ACH) payments. Stripe receives your payment details directly; see below.
Brightwheel — our child care management and family-billing platform for enrolled families.
Resend — delivers our transactional email (verification, confirmations, offers).
DocuSign — handles electronic signing of our enrollment and tuition agreement.
Google (Analytics / Tag Manager) — provides website analytics.
Internal program systems we use to manage enrollment and your family's portal experience.

We may also disclose information when required by law, by a court order, or by our child care licensing authority, or to protect the safety of a child or the rights and safety of others.

5. How payments are handled

We never see or store your full card or bank-account numbers. When you pay us, your card or bank details are entered into secure fields hosted by our payment processors (Stripe, and Brightwheel for enrolled-family billing) and sent directly to them. Those processors are certified to the Payment Card Industry Data Security Standard and handle the sensitive payment data on their own systems. Our application only ever receives and stores a non-sensitive transaction or payment-intent identifier and the fact, amount, and date of payment.

6. Children's privacy

Growing Mindfully cares for children, but our website and online application are intended for, and used by, parents and guardians — not children. We do not knowingly allow children to create accounts, and we do not knowingly collect personal information directly from children through our online services. Information about a child that we hold is provided to us by that child's parent or guardian, or is created in the ordinary course of caring for and keeping records on an enrolled child as a licensed provider.

We treat children's information with heightened care: access is limited to staff who need it, it is not used for advertising, and it is retained and disposed of according to the schedule below. If you believe a child has provided us information directly through our website, please contact us at enrollment@growingmindfully.org and we will address it.

7. How long we keep information (retention)

We keep personal information only as long as we have a legitimate need for it, or for as long as the law requires us to keep it — whichever is longer — and then we delete or de-identify it. Our standard schedule:

Growing Mindfully data-retention schedule (standard practice; specific records may be held longer where law requires).
Information	How long we keep it	Why
Waitlist applicants who never enroll	Up to about 2 years after your last activity or after the child ages out of our bands, then deleted or de-identified	To administer the waitlist fairly while the application is live; removed once it is no longer relevant.
Enrolled children's licensed records	At least 3 years after care ends, per California licensing law	California Title 22 requires children's records to be kept at least three years following termination of service.
Enrolled families' account & contact data	Duration of enrollment, then archived and retained in line with the licensed-record and financial-record periods	To serve your family during enrollment and meet our recordkeeping duties afterward.
Children who age out (turn 6) and are archived	Archived at graduation; the licensed child's record is then kept at least 3 years from the end of care before secure disposal	Same Title 22 licensing basis; archiving limits day-to-day access while we meet the retention minimum.
Payment & financial records	Generally up to 7 years	Tax, accounting, and audit needs. (We hold only transaction identifiers and amounts — never full card/bank numbers.)
Terms-acceptance evidence (version, timestamp, IP, browser)	For the life of the related application/agreement plus a reasonable dispute window	To show what you agreed to, if a question ever arises.
Website analytics data	Per our analytics provider's retention settings	To understand and improve the site; not tied to your identity by us.

These periods are our standard practice. We may keep specific information longer when we are required to (for example, to comply with a legal hold, an audit, or a licensing investigation), and we may delete information sooner on a valid request where no law requires us to keep it.

8. How we protect information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including access controls that limit personal information to staff who need it, encryption in transit, reputable hosting and processing providers, and the payment-passthrough approach described above so that the most sensitive financial data never lands on our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly if something goes wrong.

9. Cookies and tracking

Our site uses cookies and similar technologies, including Google Analytics and Google Tag Manager, to understand how the site is used and to improve it. You can control cookies through your browser settings. Some browsers offer a "Do Not Track" signal; because there is no common industry standard for how to respond, our site does not currently respond differently to Do Not Track signals. Third parties (such as our analytics provider) may collect information about your activity on our site over time; we do not use this for cross-site advertising.

10. Your California privacy rights

This section explains how California privacy laws apply to us and the rights you have.

Privacy policy requirement (CalOPPA)

California's Online Privacy Protection Act requires commercial websites that collect personal information from California residents to post a privacy policy describing what is collected and with whom it is shared. This page is that policy.

California Consumer Privacy Act (CCPA/CPRA)

The CCPA, as amended by the CPRA, imposes detailed obligations on businesses that meet certain size or data thresholds (broadly: more than $25 million in annual revenue, buying/selling/sharing the personal information of 100,000 or more consumers or households per year, or deriving 50% or more of revenue from selling or sharing personal information). As a single-site local child care program, we do not meet these thresholds, so the CCPA's business obligations do not currently apply to us. Even so, we voluntarily follow its spirit: we tell you what we collect and why, we do not sell or share your personal information, we limit our use of sensitive information to providing our services, and we honor reasonable requests to access, correct, or delete your information as described below. If our operations ever grow to where the CCPA applies, we will update this policy and provide the full set of CCPA rights and disclosures.

"Shine the Light" (Civil Code § 1798.83)

California's "Shine the Light" law lets residents ask businesses how they shared personal information with third parties for those third parties' direct marketing. Businesses with fewer than 20 employees are exempt, and in any case we do not share your personal information with third parties for their own direct marketing, so we have nothing to disclose under this law.

Requests to access, correct, or delete

Regardless of whether a particular law strictly requires it, you may ask us to:

Tell you what personal information we hold about you and your child;
Correct information that is inaccurate; or
Delete information, where we are not required by law (for example, licensing or financial-record rules) to keep it.

To make a request, email enrollment@growingmindfully.org from the email address on your account, or call (916) 626-2739. We will take reasonable steps to verify your identity before acting, and we will not discriminate against you for exercising these rights. Note that some children's records must be kept for a minimum period under California licensing law and cannot be deleted before that period ends.

11. Data-breach notification

If a security incident ever exposes your unencrypted personal information, we will notify affected California residents as required by California law (Civil Code § 1798.82), within the timeframe the law requires, and we will report to the California Attorney General when the law requires it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective" date at the top. Material changes will be communicated as appropriate. Please review this page periodically.

13. Contact us

Questions about this policy or your information? We're glad to help.

Email: enrollment@growingmindfully.org
Phone: (916) 626-2739
Mail: Present Pathways, Inc. (dba Growing Mindfully), 750 N Street, Top Floor, Sacramento, CA 95814

Present Pathways, Inc., doing business as Growing Mindfully · Effective June 17, 2026.