Privacy Policy

1. Overview and Scope

This Privacy Policy describes how The Acorn House Preschool LLC, operating as Acorn House, collects, uses, stores, shares, and protects information obtained from visitors to this website and from clients who engage our computer integrated systems design and digital infrastructure services. By accessing or using our website located at www.acornhouse.hair, or by engaging our professional services, you acknowledge that you have read and understood this Policy.

Acorn House is committed to handling all personal and technical data with the same rigor and discipline we apply to our systems engineering practice. We treat privacy as a core architectural requirement, not an afterthought.

This Policy applies to all interactions with Acorn House through our website, email communications, telephone inquiries, and service engagements. It does not apply to third-party websites or services that may be linked from our site; we encourage you to review their respective privacy policies independently.

2. Information We Collect

2.1 Information You Provide Voluntarily

When you contact us through our website form, send us an email, call our office, or engage our services, we may collect: your full name, email address, telephone number, company name and title, physical mailing address, project requirements and technical specifications, billing and payment information where applicable, and any other information you choose to share in the course of our communications.

2.2 Information Collected Automatically

When you visit our website, our servers automatically record certain information sent by your browser. This may include: your IP address and approximate geographic location derived from it, browser type and version, operating system and device type, referring URL and exit pages, pages visited and time spent on each page, date and time stamps of your visit, and clickstream data. This information is collected through standard server logs and is used solely for operational monitoring, security analysis, and aggregate traffic analytics.

2.3 Cookies and Similar Technologies

Our website uses only essential cookies necessary for its operation and basic analytics. We do not use advertising cookies, tracking pixels from third-party ad networks, or behavioral profiling technologies. You may configure your browser to refuse cookies; however, some website functionality may be affected.

2.4 Information We Do Not Collect

We do not knowingly collect sensitive personal data such as government identification numbers, biometric data, health information, or financial account credentials through our website. We do not purchase or acquire personal data from data brokers or third-party aggregators.

3. How We Use Collected Information

Acorn House uses the information we collect for the following purposes:

• Service Delivery: To respond to your inquiries, provide technical consultations, prepare proposals, deliver contracted systems integration services, and maintain ongoing client relationships.
• Communication: To send you project updates, technical documentation, invoices, service announcements, and responses to your questions. We do not send unsolicited marketing communications.
• Website Operations: To monitor server performance, detect and prevent security threats, analyze traffic patterns for capacity planning, and improve the user experience of our website.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests, as well as to protect our rights, property, and safety.
• Business Operations: For internal record-keeping, accounting, tax compliance, audit purposes, and quality assurance reviews.

The legal bases for processing your information under applicable data protection laws include: performance of a contract or pre-contractual steps at your request, our legitimate business interests in operating and improving our services, compliance with legal obligations, and your consent where specifically obtained.

4. Data Sharing and Disclosure

Acorn House does not sell, rent, lease, or trade personal information to third parties for their marketing or commercial purposes. We may share information in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors to perform functions on our behalf, including cloud hosting, email delivery, payment processing, and analytics. These providers are bound by contractual obligations to process data only according to our instructions and to maintain appropriate security measures.
• Legal Requirements: We may disclose information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, information held by Acorn House may be among the transferred assets. We will notify you via email or prominent notice on our website of any such change in ownership or control.
• With Your Consent: We may share your information for any other purpose with your explicit prior consent.

5. Data Security

Acorn House implements and maintains technical, administrative, and physical security measures designed to protect the information we hold against unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption of data in transit using TLS 1.3 and encryption of sensitive data at rest using AES-256.
• Multi-factor authentication for all administrative access to systems and databases.
• Regular vulnerability assessments, penetration testing, and security audits conducted by our internal security team.
• Strict access controls based on the principle of least privilege, with access logs and periodic reviews.
• Continuous network monitoring and intrusion detection systems operating 24 hours a day, 7 days a week.
• Secure software development lifecycle practices, including code review, dependency scanning, and static analysis.
• Employee training on data protection, privacy obligations, and incident response procedures.

While we strive to protect your information using commercially reasonable means, no method of electronic storage or transmission over the Internet is absolutely secure. We cannot guarantee the absolute security of any information.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The specific retention periods depend on the nature of the information and the context of collection:

• Client project data: Retained for the duration of the engagement plus seven years for legal and tax compliance.
• Inquiry and correspondence records: Retained for up to three years after the last communication.
• Website server logs: Retained for a rolling period of 90 days for security and operational analysis.
• Billing and financial records: Retained in accordance with applicable tax and accounting regulations, typically seven years.

When information is no longer needed, we securely delete or anonymize it using industry-standard data destruction methods.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

• Access: The right to request confirmation of whether we process your personal data and to obtain a copy of that data.
• Rectification: The right to request correction of inaccurate or incomplete personal data we hold about you.
• Erasure: The right to request deletion of your personal data under certain circumstances, subject to legal retention requirements.
• Restriction: The right to request limitation of our processing of your personal data in specific situations.
• Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Objection: The right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Withdrawal of Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the information provided in the Contact Information section below. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

8. Children Privacy

Our website and services are directed at business professionals and enterprises. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 16. If we become aware that a person under 16 has provided us with personal information without verifiable parental consent, we will take immediate steps to delete such information from our systems. If you believe that a minor has provided us with personal data, please contact us promptly.

9. International Data Transfers

Acorn House is based in the United States. Information we collect is processed and stored on servers located within the United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central database are located. The data protection laws of the United States may differ from those of your country of residence. By using our website or services, you consent to the transfer of your information to the United States for processing consistent with this Privacy Policy.

10. Third-Party Services and Links

Our website may contain links to third-party websites, platforms, or services that are not owned or controlled by Acorn House. This Privacy Policy does not apply to those third-party resources. We are not responsible for the privacy practices, content, or security of any third-party sites. We recommend reviewing the privacy policies of any third-party services before providing them with your information.

We may use certain third-party service providers for hosting, analytics, and communication infrastructure. These providers have their own privacy policies governing their handling of data. We select providers who demonstrate a commitment to data protection consistent with industry standards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or operational needs. When we make material changes, we will revise the effective date at the top of this page and, where appropriate, provide additional notice such as a banner on our website or a direct notification to active clients.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after any changes to this Policy constitutes your acceptance of the updated terms.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

The Acorn House Preschool LLC
472 E 200 S
Hyde Park, UT 84318-3515
United States

Email: serve@acornhouse.hair
Phone: +1 (775) 898-8264
Website: www.acornhouse.hair

We aim to acknowledge all privacy-related inquiries within two business days and to resolve any concerns promptly and fairly. If you believe we have not adequately addressed your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

13. Developer Attribution

This website was designed and developed by Acorn House. For inquiries regarding the technical implementation or design of this website, please refer to the contact information listed above.