Effective Date: April 9, 2026
1. Introduction
At Mombrite (accessible at mombrite.com and shop.mombrite.com), operated by Mombrite, LLC, your privacy is a top priority. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what rights you have regarding your data.
This policy applies to all information collected through our website, email newsletter, Shopify store, and any related services. It does not apply to information collected offline or through third-party websites we may link to.
This website is directed at parents, guardians, and educators – not at children. We do not knowingly direct our content or services at children under the age of 13.
2. Your Consent
By using our website, subscribing to our newsletter, or making a purchase through our store, you consent to this Privacy Policy. If you do not agree, please discontinue use of our site and services.
We will notify you of material changes to this policy by updating the effective date above and, where appropriate, by sending an email notification to subscribers.
3. Information We Collect
3.1 Information You Provide Directly
We collect personal information that you voluntarily provide, including when you:
- Subscribe to our email newsletter (name, email address)
- Make a purchase in our Shopify store (name, email, shipping address, phone number, order details)
- Contact us via email or contact forms (name, email, message content)
- Register for an account on our site or store
- Participate in surveys, contests, or promotions
3.2 Information Collected Automatically
When you visit our website, we and our service providers automatically collect certain technical information, including:
- IP address and approximate location (country/region)
- Browser type, version, and operating system
- Device type (desktop, tablet, mobile)
- Pages visited, time on page, and referring URLs
- Date and time of your visit
- Clicks and interactions with advertisements
This data is collected through server log files, cookies, and third-party analytics and advertising tools described in Section 6.
3.3 Information From Third Parties
We may receive information about you from third parties such as our advertising partners (Google, Raptive/CMI Marketing) and our email service provider, Kit.com, when you interact with our content on other platforms.
4. How we use your information
We use the information we collect for the following purposes:
- To operate, maintain, and improve our website and Shopify store
- To process and fulfill orders, send order confirmations, and handle returns
- To send our email newsletter with STEM activities, crafts, and educational content (only to subscribers who have opted in)
- To respond to your questions, comments, or customer service requests
- To personalize your experience on our site
- To analyze site traffic and usage patterns to improve content and user experience
- To serve relevant advertisements through our advertising partners
- To detect and prevent fraud and comply with legal obligations
- To communicate product updates, promotions, and offers (you may opt out at any time)
5. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:
Legal Obligation – to comply with applicable laws and regulations
Consent – for email marketing and non-essential cookies (you may withdraw consent at any time)
Contract – to fulfill orders and provide services you have requested
Legitimate Interests – to analyze site performance, prevent fraud, and improve our content
6. Cookies, Advertising, and Third-Party Partners
6.1 Cookies
Mombrite uses cookies — small text files stored on your device — to remember your preferences, analyze site traffic, and serve personalized advertising. You can control cookies through your browser settings. Note that disabling cookies may affect your experience on our site.
We use both first-party cookies (set by Mombrite) and third-party cookies (set by our advertising and analytics partners).
6.2 Google Analytics & Advertising
We use Google Analytics to understand how visitors use our site, and Google Ads for advertising. Google may use cookies and your data in accordance with their Privacy Policy: https://policies.google.com/privacy
6.3 Raptive (CMI Marketing, Inc.) Advertising
CMI Marketing, Inc., d/b/a Raptive (“Raptive”) is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive’s data usage, click here: https://raptive.com/creator-advertising-privacy-statement
6.4 Email Service Provider
We use Kit.com (formerly ConvertKit) to manage our email newsletter list and send emails. Kit.com stores subscriber names and email addresses on our behalf and is contractually prohibited from using your data for any other purpose. For more information on Kit’s data practices, visit: https://kit.com/privacy You may unsubscribe from our newsletter at any time by clicking the unsubscribe link in any email or by emailing [email protected].
6.5 Shopify
Our store (shop.mombrite.com) is powered by Shopify. When you make a purchase, Shopify processes your payment and shipping information. Shopify acts as a data processor on our behalf. For information on Shopify’s data practices: https://www.shopify.com/legal/privacy
We do not store your payment card details on our servers. Payment processing is handled by Shopify’s secure payment partners.
7. How We Share Your Information
We share data with our advertising partners for the purpose of serving targeted advertisements on our site. Under California law, this may constitute a “sale” or “sharing” of personal information. You may opt out of this sharing by using the opt-out links provided in the footer of our website or by contacting us at [email protected].
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:
- Email subscriber data: Retained for as long as you remain subscribed, plus up to 12 months after unsubscribe (for suppression list purposes).
- Customer/order data: Retained for 7 years to comply with tax and accounting obligations.
- Contact form submissions: Retained for up to 2 years.
- Website analytics data: Retained per our Google Analytics (GA4) settings — event data for 2 months and user data for 14 months.
- Server log files: Retained for up to 90 days.
You may request deletion of your data at any time (subject to legal retention requirements) by contacting [email protected].
9. Children’s Privacy (COPPA Compliance)
Mombrite is designed for parents, guardians, and educators — not for children. Our site provides content to help adults plan activities and learning experiences for children. We do not direct our website or services to children under 13, and children under 13 should not submit any personal information to our site.
We do not knowingly collect personal information from children under the age of 13. If you believe your child has provided personal information to us without your consent, please contact us immediately at [email protected] and we will promptly delete such information from our records.
Parents and guardians are encouraged to monitor and guide their children’s online activity and to review this Privacy Policy with them.
10. Your GDPR Data Protection Rights (EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you have the following rights regarding your personal data:
- Right to Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete data.
- Right to Erasure (‘Right to be Forgotten’): You may request deletion of your data, subject to certain legal exceptions.
- Right to Restrict Processing: You may request that we limit how we use your data.
- Right to Data Portability: You may request that we transfer your data to another organization or directly to you.
- Right to Object: You may object to our processing of your data based on legitimate interests, including for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
11. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out of Sale or Sharing: We share data with advertising partners for targeted advertising, which may constitute “sharing” under California law. You may opt out of this sharing by using the opt-out link provided in the footer of our website, by sending a request to [email protected], or by using the Global Privacy Control (GPC) signal in your browser.
- Right to Correct: You may request correction of inaccurate personal information we hold about you.
- Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of your sensitive personal information to purposes necessary to provide our services.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To submit a California privacy request, contact us at [email protected] or by mail at Mombrite, LLC. We will respond within 45 days (extendable by an additional 45 days with notice).
California residents may also use the ‘Do Not Sell or Share My Personal Information’ link in our website footer.
11.1 Shine the Light (California Civil Code Section 1798.83)
California residents may request, once per calendar year and free of charge, information about any personal information we shared with third parties for their own direct marketing purposes in the preceding calendar year, including the names and addresses of those third parties.
To make a Shine the Light request, send an email to [email protected] with the subject line ‘California Shine the Light Request’ and include your name and California mailing address. We will respond within 30 days.
11.2 Do Not Track (CalOPPA Disclosure)
Some web browsers offer a ‘Do Not Track’ (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Our website does not currently respond to DNT signals because no uniform technical standard for recognizing and honoring DNT signals has been established. We will continue to monitor developments and may update this practice if a standard is adopted.
For more information about Do Not Track, visit www.allaboutdnt.org.
11.3 Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request for the sale or sharing of personal information under applicable state laws. If your browser sends a GPC signal, we will treat it as a request to opt out.
12. Email Communications & CAN-SPAM Compliance
We send marketing emails only to individuals who have subscribed to our newsletter. In compliance with the CAN-SPAM Act:
- Every marketing email we send includes a clear and conspicuous unsubscribe link.
- We honor all opt-out requests within 10 business days.
- We do not use deceptive subject lines or sender information.
To unsubscribe from our newsletter, click the unsubscribe link in any email or contact us at [email protected]. Transactional emails (such as order confirmations) are not subject to opt-out.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. Our Shopify store uses industry-standard SSL/TLS encryption for all transactions.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
14. Third-Party Links and Websites
Our website may contain links to third-party websites, including affiliate links and advertising links. This Privacy Policy applies only to Mombrite.com and shop.mombrite.com. We are not responsible for the privacy practices of external websites and encourage you to review their privacy policies before providing any personal information.
15. International Data Transfers
Mombrite is based in the United States. If you access our site from outside the US, your data may be transferred to and processed in the United States, which may have different data protection laws than your country. By using our site, you consent to such transfers. For EEA/UK users, we rely on appropriate transfer mechanisms (such as standard contractual clauses) where required.
16. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the ‘Effective Date’ at the top of this document and, where appropriate, notify subscribers by email.
We encourage you to review this policy periodically. Your continued use of our site after any changes constitutes acceptance of the updated policy.
17. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Mombrite, LLC
Website: www.mombrite.com
Privacy Contact: [email protected]
We will respond to all privacy-related inquiries within 30 days.