Privacy policy

Privacy Policy and Information Practices

Effective Date: 02/20/2026

Last Updated: 02/20/2026

--- 

INTRODUCTION

myScanBandz ("we," "us," or "our") operates the website myscanbandz.com and provides QR code-enabled safety products designed to help reunite lost children with their parents and/or guardians. This Privacy Policy and Information Practices (“Privacy Policy”) explains how we collect, use, store, and protect your information and your children’s information. 

---

IMPORTANT INFORMATION ABOUT CHILDREN’S PRIVACY

We take children's privacy seriously. Our products are designed for use by children, and we collect information about children under the age of 13. We comply with the Children's Online Privacy Protection Act, 16 CFR Part 312 (“COPPA”), and obtain verifiable parental/guardian consent before collecting, using, or disclosing personal information from children under 13.

Parents and Guardians: You have certain rights regarding your child's information, including the right to review, delete, or refuse further collection of your child's information. See the "Parental Rights" section below for details.

---

INFORMATION WE COLLECT 

Information You Provide to Us

When you register a myScanBandz product, we collect the following information: 

Information about the parent/guardian: 

  • Name
  • Email address
  • Phone number(s)
  • Relationship to child (parent, guardian, etc.)

Information about the child:

  • First name only – we do NOT collect last names
  • Age or age range (optional)
  • Important medical information (optional)

We do not collect any information from children directly. All information we collect on a child is provided directly by the child’s parent or guardian. 

Information Collected Automatically

When you visit our website or someone scans a myScanBandz QR code, we automatically collect:

  • Device information (browser type, operating system, etc.)
  • IP address
  • Pages visited and time spent on pages
  • Referring website
  • Date and time of QR code scans (to verify product functionality)

We use Shopify's built-in analytics tools to collect this information. Shopify's privacy practices are governed by its own privacy policy. Shopify’s privacy policy is available at shopify.com/legal/privacy. If this link does not work, visit Shopify’s website for more information. 

Information We Do NOT Collect 

We do NOT collect:

  • Social Security numbers
  • Financial information (payments are processed securely through Shopify)
  • Precise geolocation data
  • Children's photographs
  • Children's last names
  • School names or addresses
  • Any information unnecessary for the reunification purposes of our products

 How We Use Your Information

We use the information we collect ONLY for the following purposes:

  • User Data: User data includes information you provide for the purposes of ordering, registering, and using our products, such as first name, last name, phone number, email, and any information requested to be included when registering your product. The purpose of collecting and processing this data is to provide you with our products or services, to authenticate your identity, and to display your contact information when a myScanBandz QR code is scanned, enabling the safe reunion of lost children with their families. 
  • Communication Data: Communication data includes any communication that you may send to us through the website, email, or social media, including through web forms. We process this data to: 
    • Communicate with you;
    • Fulfill your orders;
    • Confirm product registration;
    • Provide important product updates, safety notices, or policy updates; 
    • Provide customer support and customer service responses;
    • Record logs of our communication, and;
    • Store information to respond to legal claims. 
  • Technical Data: Technical data includes data about your use of our website, as described in the “Information Collected Automatically” section. We process this data to analyze your use of the website, to route website traffic, to administer and secure the website, and to troubleshoot problems with the website. Our lawful ground for collecting and processing this technical data is our legitimate interests in administering and offering the website and to grow its business and marketing strategy.
  • Marketing Data: Marketing data includes data about your preferences in receiving and interacting with our advertisements or content on our website. We collect this data from your use of the website and from advertising IDs created through advertising programs. Our lawful ground for collecting and processing this marketing data is our legitimate interests in administering and offering the website and our products to grow our business and marketing strategy by providing advertisements. 
  • Personally Sensitive Data: Personally sensitive data includes data about your child’s health or medical conditions you wish to provide. The decision to provide this information is completely optional. The purpose of providing this information would be to ensure a third party who finds a lost child is aware of a child’s medical condition in case of a medical emergency when the parent or guardian is not present. We do not collect any other personally sensitive data.
  • Product Improvement: We may use your information to improve our products and services, using aggregated, non-identifiable data only.
  • Legal Compliance: We may use your information and data to comply with legal obligations and to protect rights and safety.

We do NOT:

  • Sell your information to third parties;
  • Use your information for advertising or marketing purposes without explicit consent, or;
  • Share your children's information with anyone except as described in this Privacy Policy.

Marketing Communications 


As stated above, we may send you marketing communications if you have asked for information concerning our goods or services or if you have agreed to, and have not opted out from, receiving marketing communications. You may opt-out of our marketing messages at any time by emailing support@myscanbandz.com or by following the opt-out link in any of our marketing communications sent to you. 

How We Share Your and Your Child’s Information

The only information about your child we require is your child’s first name. We will not process your child’s personal data for the purposes of:

  • Targeting advertising;
  • The sale of personal data, or; 
  • Profiling in furtherance of decisions that produce legal or similarly significant effects as targeted advertising or the sale of personal data. 

We use your child’s name and/or other optional information you provide us exclusively to fulfill the purpose of our products, which is to safely reunite lost children with their families. We will not retain your child’s information for longer than is reasonably necessary to provide our products and/or services. We will not collect your child’s geolocation data. 

However, the information you provide us with about you and your child may be shared with the third parties described below. 

Third Parties Who Scan a QR Code

When someone scans a registered myScanBandz product, the product displays the child’s first name and the parent/guardian’s contact information provided during registration. If you opt to include additional information about your child in this display (i.e. medical information), this information will display as well. Sharing this information fulfills our product’s purpose to reunite lost children with their families.  

Service Providers

We share information with the following trusted service providers to operate our business:

  • Shopify: Our e-commerce platform provider (hosting, payment processing, etc.)
  • Airtable: Our database provider where registration information is securely stored

These providers are contractually obligated to protect your information and use it only for the services they provide to us. Please visit these providers’ websites for more information about their individual privacy policies. 

Legal Compliance


We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to:

  • Comply with legal processes;
  • Protect the rights, property, or safety of myScanBandz, our users, or others, or;
  • Prevent fraud or security threats.

Business Transfers

If myScanBandz is acquired by or merged with another company, your information may be transferred to the new owner. We will notify you before your information becomes subject to a different privacy policy.

How We Store and Protect Your Information

Data Retention Policy

We will only retain your information for so long as necessary to fulfill the purposes for which it is collected under this Privacy Notice or for the purposes of satisfying any legal, accounting, or reporting requirements. We will also retain your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws, such as the Colorado Consumer Privacy Act), resolve disputes, and enforce our legal agreements and policies.

Registration information is stored in Airtable's secure cloud database. Airtable encrypts data both in transit (using SSL/TLS) and at rest. We retain your information indefinitely to ensure the product remains functional, UNLESS you request deletion (see "Your Rights" below). Per COPPA 312.10, we do not collect any information from children and thus do not retain any information collected from children. 

Security Measures

We implement reasonable security measures to protect your information, including:

  • Encrypted data transmission (HTTPS/SSL)
  • Secure database access controls
  • Regular security reviews
  • Limited employee access to personal information

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

---

PARENTAL RIGHTS UNDER COPPA

As a parent or legal guardian, you have the following rights regarding your child's information:

1. Right to Review

You may review the personal information we have collected about your child by contacting us at support@myscanbandz.com.

2. Right to Delete

You may request that we delete your child's personal information at any time. To request deletion, email us at support@myscanbandz.com with the subject line "Delete Child Information." Include the product code and your contact information for verification. We will delete the information within 30 days of your request

Important: Deleting your child's information will deactivate the product. The QR code will no longer display your contact information.

3. Right to Refuse Further Collection

You may refuse to allow further collection or use of your child's information by:

  • Not completing the registration process
  • Requesting deletion as described above

4. Parental Consent

By registering a myScanBandz product, you represent that you are the parent or legal guardian of the child and that you provided verifiable parental consent for us to collect and use the child's information as described in this policy.  

Your Rights (All Users) 

In addition to the parental rights above, pursuant to C.R.S. § 6-1-1306, all users have the right to:

  • Access: Request a copy of the information we have about you.
  • Correction: Request that we correct inaccurate or outdated information.
  • Deletion: Request that we delete your information.
  • Portability: Request the transmission of data to another entity without hinderance. 
  • Opt-out: Opt-out from the processing of personal data for purposes of targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects as targeted advertising or selling personal information. 

To exercise your right to opt-out or to exercise any of these rights generally, contact us at support@myscanbandz.com. We will send you receipt of our notice of your request.

Appeals 

In the event that we fail take action on a request to exercise these rights, you may file an appeal with us within a reasonable time after receiving the notice of your request. Within 45 days of our receipt of an appeal, we will inform you of any action taken or not taken in response to the appeal, along with a written explanation of the reasons in support of our response. We may extend the forty-five-day period by sixty additional days where reasonably necessary, taking into account the complexity and number of requests serving as the basis for the appeal. In the event we require an extension, we will inform you of the extension within forty-five days after receipt of the appeal, together with the reasons for the delay. 

If you have concerns about the result of an appeal, you have the right to contact the attorney general.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies through Shopify's platform. These are used for:

  • Essential website functionality (i.e. shopping cart, checkout)
  • Analytics (understanding how visitors use our site)

You can control cookies through your browser settings, but disabling cookies may affect your ability to use certain features of our website.

Third-Party Links

Our website may contain links to third-party websites such as social media platforms. We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of these third-party websites. 

Changes to This Privacy Policy

We may update periodically update this Privacy Policy. If we make material changes, especially those affecting children's information, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email of these changes if we have your email address
  • Obtain new parental consent, if required by COPPA

Your continued use of our products after any changes are made to the Privacy Policy indicates your acceptance of the updated policy.

---

RIGHTS OF CALIFORNIA RESIDENTS 

This section contains disclosures required by the California Consumer Privacy Act (“CCPA”) and other relevant California laws. 

California residents have the right to be notified which categories of personally identifiable information are being collected and the purposes for which the information is being used. In particular, we collected the following categories of personal information as defined in the California Consumer Privacy Act within the last twelve months. Our uses of this personal information are detailed above in this Privacy Notice:

  • Identifiers: Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
  • Customer records information: Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit or debit card number, other financial information, medical information, health insurance information.
  • Characteristics of protected classifications under California or federal law: Race, religion, sexual orientation, gender identity, gender expression, age.
  • Commercial information: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • Internet or other electronic network activity information: Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.
  • Professional or employment-related information

We obtain these categories of personal information directly from California residents when they complete forms through our website, register a product, or provide it to us as a part of a transaction or inquiry concerning our products. We also obtain these categories of personal information indirectly from California residents while observing their actions on our website and from third parties or service providers that they have authorized to receive and share personal information.

California residents may exercise their rights with respect to their personal information:

  • Access: You have the right to request information on the categories of personal information that we collected in the previous twelve (12) months, the categories of sources from which the personal information was collected, the specific pieces of personal information we have collected about you, and the business purposes for which such personal information is collected and shared. You also have the right to request information on the categories of personal information which were disclosed for business purposes, and the categories of third parties in the twelve (12) months preceding your request for your personal information.
  • Erasure: You have a right to request us to delete personal information that we collected from you. However, please be aware that we may not fulfill your request for deletion if we (or our service provider(s)) are required to retain your personal information for one or more of the following categories of purposes: (1) to complete a transaction for which the personal information was collected, provide a good or service requested by you, or complete a contract between us and you; (2) to ensure our website integrity, security, and functionality; (3) to comply with applicable law or a legal obligation, or exercise rights under the law; (4) to otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
  • Opt-Out: You have a right to opt-out of certain disclosures of personal information to third parties, if such disclosures constitute a “sale” under California law. We do not sell your personal information. Despite this, California law requires us to disclose to you that California residents have the right to opt out of the sale or sharing of their personal information.

To exercise your right to opt-out or exercise any of the above rights, contact us by emailing us at support@myscanbandz.com. Include a description of your request, including which right you are exercising. To verify your request, we may request certain information from you to confirm that you are a myScanBandz user, such as your phone number, email, or address. You have a right not to receive discriminatory treatment by any business when you exercise your California privacy rights. For additional inquiries, requests, or concerns, please contact us at: 

myScanBandz

12 Midland Ave. Suite 454

Basalt, CO 81621

720-273-0521

support@myscanbandz.com

---

PARENT/GUARDIAN ACKNOWLEDGMENT 

By registering a myScanBandz product, you acknowledge that:

  1. You have read and understood this Privacy Policy.
  2. You are the parent or legal guardian of the child(ren) using our product.
  3. You consent to the collection and use of your child's information as described above.
  4. You understand your rights and how to exercise them.

---

CONTACT US

For all inquiries from parents/guardians concerning our Privacy Policy and the use of children’s information, please contact:

myScanBandz

12 Midland Ave. Suite 454

Basalt, CO 81621

720-273-0521

support@myscanbandz.com

For COPPA-related requests (reviewing, deleting, or refusing collection of children's information), please include "COPPA Request" in your email subject line.