The Third Clover Privacy Policy
Privacy matters.
Last updated October 12, 2026
At The Third Clover, privacy is part of hospitality. When you join us, you trust us with your family: your children's names, the moments you make together, a quiet room to feed your baby. We take that trust seriously. You should always know what we collect, why we collect it, and what control you have. This Privacy Policy explains all of it in plain language. Please take a moment to read it, and contact us with any questions.
Our Privacy Principles
We collect only what we need.
We ask for the information required to welcome your family, keep sessions safe, and run our studio and shop. Nothing more.
We keep it close.
Where we can, we keep information on our own equipment or on your device instead of sending it elsewhere. Our security video stays at the studio, and analytics on our main website work without cookies.
You're in control.
You decide what you share, whether your family appears in our photos, and what we send you. You can see, change, or delete your information at any time.
We protect what you share.
We use strong safeguards, choose providers that meet high security standards, and limit access to the people who need it.
We do not sell your personal data, and we never will.
We don't share it with advertisers, and we don't track you across other companies' websites or apps.
What Is Personal Data at The Third Clover?
The Third Clover, LLC ("The Third Clover," "we," "us," or "our") is a family boutique and social studio at 408 Hartz Avenue, Danville, California 94526, where grown-ups and their children gather, make, and belong. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.
Personal data is any information that identifies you or your family, or that could reasonably be linked to you, directly or indirectly. It includes what you give us, like your name and your children's names, and what is created when you use our Services, like your bookings and purchases. Information that has been aggregated or de-identified so it can no longer be linked to you is not personal data. In this policy, "personal data" and "personal information" mean the same thing.
This policy applies to personal information we collect through:
•
Our websites, including thethirdclover.com, my.thethirdclover.com, and account.thethirdclover.com (the "Site")
•
Our online booking, membership, and account tools, and any mobile app we offer (the "App")
•
Our online shop and in-store purchases
•
Our studio, including creative sessions, Discovery Sessions, private events, the hospitality bar, and the grown-up lounge
•
Pop-ups, markets, and community events where we invite sign-ups
•
Email, text messages, and our social media pages
Together, these are our "Services." This policy does not cover third-party websites or services we link to; those have their own privacy policies. Other terms you agree to, such as membership or booking terms, may also apply.
Your Privacy Rights at The Third Clover
You should be able to see and control your personal data, wherever you live. You have the right to:
•
Know and access the personal data we hold about you and your children, and how we use and share it
•
Correct information that is inaccurate or incomplete
•
Delete your personal data or your account
•
Get a copy of your personal data in a portable format
•
Withdraw consent at any time, including for photos and marketing messages
•
Opt out of marketing emails and text messages
•
Opt out of the sale or sharing of personal data. We don't sell or share it, but you can still make this request.
•
Be treated fairly. We will never deny you service, charge you a different price, or offer a lesser experience because you exercised your privacy rights.
How to make a request
You can update most account and family details yourself in your online account or in our App. For anything else, email hello@thethirdclover.com with the subject line "Privacy Request," or speak with us at the studio. Parents and guardians can make requests on behalf of their children. You can also authorize someone to make a request for you; we'll ask for proof of their authorization.
Verification
To protect your family, we confirm each request through the email address or phone number on your account. We use the information you provide for verification only to verify your request.
Timing
We respond within 30 days. If we need more time, we'll tell you why and how long it will take.
Limits
Sometimes we must keep certain information, such as records required for tax purposes, signed waivers, or details needed to resolve a dispute or safety incident. If we can't fully complete a request, we'll explain why.
Appeals
If you disagree with our response, reply and let us know. We'll review the decision again and respond within 30 days.
Personal Data The Third Clover Collects from You
We collect information when you create an account, book a session, become a member, shop with us, visit the studio, or contact us. Sharing information is your choice, but some Services need certain details. For example, we need a signed waiver before your family joins a creative session.
Account and contact details
Your name, email address, phone number, ZIP code or mailing address, and sign-in details.
Your family
Your children's names, birth dates or ages, and, if you choose, an expected due date. The names and contact details of other grown-ups you authorize to bring your children, such as a partner, grandparent, or nanny.
Bookings and visits
The creative sessions, Discovery Sessions, and events you book, attend, cancel, or waitlist, and your check-in times.
Membership and billing
Your membership plan, founding member deposits, billing history, payment status, gift cards, and member discounts. Our payment processors handle your full card number. We see only limited details, such as card type, the last four digits, and expiration date.
Purchases
What you buy in the studio or online, your shipping or pickup details, and any returns or exchanges.
Waivers and safety information
Signed participation waivers, including names, signatures, and dates; emergency contacts; and any allergies or other notes you choose to share so our guides can care for your family. If an incident happens at the studio, we record what happened.
Private events
For celebrations and buyouts, the host's contact details, event date, number of guests, children's ages, and preferences.
Communications and feedback
Messages you send us, survey responses, reviews, and requests you make.
Sign-ups
Your name and email, and sometimes your phone number, ZIP code, or children's ages, when you join our list on our website, at a pop-up, or at a community event.
Content you share
Photos or other content you choose to upload to your account.
App permissions
If you allow it, our App uses your camera to scan product tags. Scanning happens on your device, and we don't keep the images. With your permission, we also send push notifications. You can change these permissions at any time in your device Settings.
Information collected automatically
When you use our Site or App, we and our providers collect limited technical information, such as your device and browser type, operating system, approximate location based on IP address (city or region, never precise location), pages viewed, and the website that referred you. "Cookies and Other Technologies" explains how. When you visit the studio, our security cameras and guest Wi-Fi collect some information, described in "Photos, Video, and Your Visit to the Studio."
Personal Data The Third Clover Receives from Other Sources
We may receive personal data about you from:
Your family account
If an account holder adds you as an authorized grown-up, they give us your name and contact details.
Event hosts
A host may share your name or email so we can welcome you to a private event or send you a waiver. We use it only for that event.
Gift givers
If someone buys you a gift card, they give us your name and email so we can deliver it.
People who invite you
If someone invites you to visit, they may share your name and email. We use it only to send that invitation.
Payment and commerce providers
Shopify and Stripe confirm your payments and help us detect fraud.
Social media and review platforms
When you follow, tag, message, or review us on Instagram, Google, or Apple Maps, those platforms show us your public profile and what you share with us.
The Third Clover's Use of Personal Data
We use personal data to welcome your family and run The Third Clover. Specifically, we use it to:
Provide our Services
Create and manage your account, process bookings and check-ins, manage memberships and billing, complete purchases, host private events, and deliver member benefits.
Keep everyone safe
Manage waivers, emergency contacts, and allergy notes; maintain security at the studio; and respond to incidents.
Communicate with you
Send confirmations, reminders, receipts, waitlist updates, and important notices. With your permission, we also send newsletters and offers.
Personalize your experience
Suggest creative sessions suited to your children's ages, remember your preferences, and apply your member benefits.
Improve what we do
Understand which sessions, products, and features families value, using aggregated information wherever possible.
Protect our community and business
Prevent fraud, secure our systems, and enforce our terms.
Meet legal obligations
Keep tax and accounting records, respond to valid legal requests, and comply with the law.
AI-assisted features
Some features, such as help finding the right session or answers to common questions, may use artificial intelligence services. These providers process data only on our behalf, and we do not allow them to use your personal data to train their models. We don't use automated systems to make decisions that have legal or similarly significant effects on you.
What we don't do
We don't sell your personal data. We don't use it for third-party advertising. We don't build profiles of children, and we never use children's information for marketing.
The Third Clover's Sharing of Personal Data
We share personal data only as described here.
Service providers
Companies that help us operate, listed below. They may use your information only to provide services to us, and they must protect it.
Our team
Guides and team members see only what they need. For example, a guide leading a session sees the roster, children's first names, and allergy notes.
Your family account
The account holder can see activity on the account. Authorized grown-ups can see the bookings and check-ins they're part of.
Event hosts
If you attend a private event, the host may see your RSVP and attendance.
Legal and safety
We disclose information when required by law or valid legal process, or when we believe in good faith it's needed to protect the safety of a child, a family, our team, or the public.
Business changes
If The Third Clover is involved in a merger, acquisition, or sale of assets, personal data may transfer to the new owner, who must continue to honor this policy.
With your permission
For example, when you agree to let us feature your family in our marketing.
Our service providers
Shopify
Online shop, in-studio checkout, customer accounts, bookings, and memberships
Stripe and Shopify Payments
Payment processing
Framer
Website hosting and cookie-free site analytics
Flodesk
Email newsletters and sign-up forms
Xero
Accounting
We also work with professional advisors, such as accountants, attorneys, and insurers, who are bound by confidentiality. Each provider's own privacy policy is available on its website.
We do not sell personal data or share it for cross-context behavioral advertising, and we have not done so in the past 12 months.
We don't share personal data with data brokers or with other companies for their own marketing.
Protection of Personal Data at The Third Clover
We protect your information with administrative, technical, and physical safeguards.
•
Our Site, store, and App use encryption (HTTPS) to protect information in transit.
•
Card payments are processed by PCI DSS-certified providers and encrypted from the moment you tap or insert your card. We never store full card numbers.
•
Access to customer information is limited to team members who need it for their role, and the systems that hold it require two-factor authentication.
•
Our studio devices are passcode-protected and encrypted.
•
Security video is stored on our own equipment at the studio, not in the cloud.
Where your data is stored
We're based in the United States, and our providers store and process personal data primarily in the United States. If a provider processes data elsewhere, we require it to protect that data as described in this policy.
No method of transmission or storage is completely secure. If a breach affects your personal data, we'll notify you as required by law.
Children and Personal Data
The Third Clover is made for grown-ups and the children who come with them, from pregnancy through early childhood. Accounts are created and managed by grown-ups age 18 or older. Children don't create accounts, and we don't knowingly collect personal data directly from children under 13.
Information comes from you
Everything we know about your children, such as their names, birth dates, and allergy notes, comes from you or another grown-up on your family account.
You're in control
You can review, correct, or delete your children's information at any time in your account or by contacting us.
Used only to care for your family
We use children's information to book sessions, keep children safe, and suggest age-appropriate creative sessions. We never sell it, use it for advertising, or build profiles of children.
Photos only with permission
We don't publish identifiable images of a child without a parent or guardian's permission.
If we learn that we have collected personal data directly from a child under 13 without verified parental consent, we'll delete it promptly. If you believe this has happened, contact us at hello@thethirdclover.com.
Photos, Video, and Your Visit to the Studio
Photography, only with permission
We love sharing the moments families make together, but only when you say yes. We ask before featuring you or your children on our website, on social media, in emails, or in printed materials. You can give or change your permission at any time in your account, at check-in, or by contacting us.
•
Without your permission, we won't publish identifiable images of your children.
•
Even with permission, we never publish a child's full name alongside their image.
•
We won't tag you or your children on social media without asking.
•
If you change your mind, we'll remove the images from our website and social media accounts. We can't recall printed materials already distributed.
Photos by other guests
Other grown-ups may take photos during sessions and events. We ask everyone to respect other families' privacy and not post images of other people's children without permission. At private events, the host and their guests or photographers manage their own photos.
Security cameras
For everyone's safety, we use video cameras in the shop, the Session space, and at entrances. Our cameras:
•
Record video only, never audio
•
Are never placed in the restroom or the mother's room
•
Store footage on our own equipment at the studio
•
Can be viewed only by our owners and authorized team members
•
Keep footage for 30 days, then delete it automatically, unless we need it to investigate an incident or the law requires us to keep it
We share footage only when needed to respond to an incident, such as with law enforcement or our insurer.
The mother's room
The mother's room is a private space. It has no cameras, and we don't track who uses it.
Check-in
When you check in on our studio iPad or in the App, we record who attended and when, so we can manage capacity, member benefits, and safety.
Guest Wi-Fi
If you connect to our guest Wi-Fi, our network equipment logs technical details, such as your device's identifier and connection times, to keep the network running and secure. We don't use our network to monitor what you do online, and we don't use it for marketing.
Cookies and Other Technologies
Cookies are small files a website stores on your device. We use as few as possible.
Our main website (thethirdclover.com)
Uses Framer's built-in analytics, which counts visits without cookies or persistent identifiers. It tells us things like which pages are popular and which countries visitors come from, never who you are.
Our store and account pages (my.thethirdclover.com and account.thethirdclover.com)
Use cookies set by Shopify to keep you signed in, remember your cart, complete checkout, and prevent fraud. Shopify also uses cookies to give us store analytics, such as how many people viewed a product.
Our App
Contains no third-party tracking or advertising software and doesn't use your device's advertising identifier.
Our emails
May include a small image that tells us whether an email was opened, so we know what's useful. You can block it by turning off images in your email app. Some email apps, such as Apple Mail with Mail Privacy Protection turned on, hide this information automatically.
No advertising trackers
We don't use advertising cookies or pixels, and we don't let ad networks track you across other websites or apps through our Services. Because we don't track you across other companies' apps and websites, we never need to ask your permission to do so.
Your choices
You can block or delete cookies in your browser settings. If you block the cookies our store needs, sign-in and checkout may not work.
Do Not Track and Global Privacy Control
Because we don't track you across sites or sell or share your data, we treat every visitor the same way whether or not their browser sends a Do Not Track signal. We honor Global Privacy Control (GPC) signals as a request to opt out of any sale or sharing of personal data.
Email, Text Messages, and Notifications
Service messages
We send emails and, if you choose, texts about your account, bookings, membership, billing, and purchases, such as confirmations, reminders, receipts, and schedule changes. Because these messages are part of the service, you'll receive them while you have an active account or booking.
Newsletters and offers
With your permission, we send updates about creative sessions, events, new arrivals, and member news. Every marketing email includes an unsubscribe link, or you can email us to stop.
Text messages
If you opt in to texts, we may send booking reminders, waitlist openings, and updates, and, if you choose, occasional offers. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help. Consent to receive texts is not a condition of any purchase.
Push notifications
If you allow notifications from our App, you can turn them off at any time in your device Settings.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
We may share it only with providers that help us deliver messages and support you. All other categories of sharing in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
How Long We Keep Personal Data
We keep personal data only as long as we need it for the purposes in this policy or as the law requires, and we choose the shortest period that works. When we no longer need it, we delete or de-identify it.
Account and family details
While your account is open. When you close it, we delete or de-identify these details, except the records below.
Allergy and safety notes
Until you remove them or close your account.
Security camera video
30 days, unless needed for an incident or required by law.
Purchase, membership, and payment records
Seven years, to meet tax and accounting requirements.
Signed waivers and incident reports
As long as a legal claim could be brought, which can be many years for matters involving children.
Email and text sign-ups
Until you unsubscribe. We keep a record of your opt-out so we can honor it.
Photo permissions and published photos
Until you withdraw permission, after which we remove images from our website and social media.
Guest Wi-Fi logs
Only as long as needed to keep our network secure.
Third-Party Services and Social Media
Our Services link to or work with services run by other companies. Their own privacy policies apply to what they collect.
Digital wallets
If you pay with a digital wallet such as Apple Pay, Shop Pay, or Google Pay, that provider handles your payment details under its own policy. With Apple Pay, we never receive your actual card number.
Social media
When you follow, message, or tag us on Instagram, Meta's privacy policy applies to what Instagram collects.
Maps and reviews
Reviews and ratings you post on Google or Apple Maps are public and governed by those companies' policies.
Links
We aren't responsible for the privacy practices of websites we link to.
Additional Information for California Residents
We extend the privacy rights described above to everyone. California law also asks businesses to describe their practices using specific categories. We collect the following categories of personal information, from the sources and for the purposes described in this policy:
Identifiers
Examples: name, email, phone number, address, account sign-in. Disclosed to: service providers.
Customer records
Examples: signatures, limited payment details, emergency contacts. Disclosed to: service providers.
Characteristics of protected classifications
Examples: children's ages and birth dates. Disclosed to: service providers.
Commercial information
Examples: bookings, memberships, purchases. Disclosed to: service providers.
Internet or network activity
Examples: pages viewed, device and browser type, approximate location from IP address, guest Wi-Fi connection details. Disclosed to: service providers.
Audio, electronic, and visual information
Examples: security camera video; photos shared with your permission. Disclosed to: law enforcement or insurers, only for incidents; published photos only with your permission.
Inferences
Examples: session suggestions based on your children's ages. Not disclosed.
Sensitive personal information
Examples: account sign-in credentials; health information you choose to share, such as allergies. Disclosed to: our guides and service providers, only to provide the Services.
No sale or sharing
We don't sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
How we use sensitive personal information
We use it only to provide the Services you request and keep your family safe, never to infer characteristics about you.
Shine the Light
We don't disclose personal information to third parties for their own direct marketing purposes.
Residents of other states
You have the same rights described in "Your Privacy Rights at The Third Clover," and you can make requests the same way.
Our Commitment to Your Privacy
Privacy at The Third Clover is personal. Our co-founders, Aimee and Ryan Callahan, are accountable for how we handle your information. Everyone on our team, including our guides, learns this policy, accesses only what their role requires, and agrees to keep family information confidential.
Privacy Questions
If you have questions about this policy or how we handle your information, or you'd like to make a request, contact us:
The Third Clover, LLC, Attn: Privacy, 408 Hartz Avenue, Danville, CA 94526
In person
Ask any member of our team at the studio.
We respond to privacy questions within 30 days.
Changes to this policy
We may update this policy as our Services change. When we make a material change, we'll post the update here at least seven days before it takes effect, and we'll notify you by email or in the App if we have your contact information. The "Last updated" date at the top shows when this policy last changed.