Privacy Policy

1. Who We Are

Rainbow Kids Preschool ("the School," "we," "us," or "our") is located in Ripley, Mississippi. This Privacy Policy describes how we collect, use, and protect information when you use our parent portal at app.rainbowkidsripley.com (the "Portal").

2. Information We Collect

We collect information you provide directly when you:

• Create a parent/caregiver account
• Submit an enrollment application for your child
• Complete forms, upload documents, or sign documents electronically
• Make tuition payments through the Portal
• Send messages to the school through the Portal

This information may include:

• Parent/caregiver name, email address, and phone number
• Child's name, date of birth, and health/allergy information
• Emergency contact details
• Payment information (processed securely by Stripe — we do not store card numbers)
• Uploaded documents such as immunization records and signed forms

3. How We Use Your Information

We use the information we collect to:

• Manage your child's enrollment and maintain their school record
• Communicate with you about school events, payments, and important notices
• Process tuition payments and generate receipts
• Comply with applicable state childcare licensing requirements
• Ensure the safety of all children in our care

4. Third-Party Services

We use a small number of trusted third-party services to operate the Portal. Information is shared with these providers only as necessary to deliver our services:

• Stripe — processes card payments. Card numbers are never transmitted to or stored on our servers. Stripe's privacy policy is available at stripe.com/privacy.
• Email delivery provider — used to send transactional emails such as payment confirmations, reminders, and school announcements.

We do not sell your personal information to any third party. We do not use your information for advertising purposes.

5. Children's Privacy (COPPA)

Rainbow Kids Preschool is subject to the Children's Online Privacy Protection Act (COPPA) because we serve children under 13. We collect information about enrolled children only from their parents or legal guardians — never directly from children. We do not knowingly allow children to create accounts or submit information through the Portal.

Social media consent (photo/video sharing) is captured separately via our Social Media Waiver form and is always opt-in. We do not share photos or identifying information about children on public platforms without explicit parental consent.

6. Data Security

All data transmitted to and from the Portal is encrypted using HTTPS/TLS. Passwords are stored as secure hashes and are never stored or logged in plain text. Uploaded documents are stored on our server outside the publicly accessible web directory and are served only through authenticated access.

The school director's account is protected by two-factor authentication. Access is limited by role — staff members can only view information relevant to their classroom, and parent accounts are scoped to their own children only.

7. Data Retention

Active student records are retained for the duration of enrollment and for a reasonable period afterward for compliance and reference purposes. Parent/caregiver portal accounts for former students are deactivated approximately one year after the child's enrollment concludes. You may request copies of your records or account deletion by contacting the school directly.

8. Your Rights

You have the right to:

• Access and review the personal information we hold about you and your child
• Request correction of inaccurate information
• Request deletion of your account and associated data (subject to legal retention requirements)
• Withdraw consent for optional data uses (such as photo sharing) at any time

To exercise any of these rights, please contact the school director directly.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Rainbow Kids Preschool
Ripley, Mississippi
Director: Tonya James

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Portal after any changes constitutes your acceptance of the updated policy.