Privacy Notice
1. Who is responsible
Banuta Florin Adrian, an individual sole trader based in Ireland trading as Parenting Together, is the data controller for https://helloparentingtogether.com.
For privacy questions or requests concerning your information, email hello@helloparentingtogether.com.
2. Information we use and why
| Information | Purpose | Legal basis |
|---|---|---|
| Email address, account identifier, confirmation status, account creation date and access status | Create and administer your account and provide the materials you request | GDPR Article 6(1)(b): necessary to perform our agreement with you |
| Password authentication information handled through Supabase Auth | Verify your identity and protect account access | GDPR Article 6(1)(b) for the sign-in needed to provide the service; Article 6(1)(f), legitimate interests, for account security and preventing unauthorised access |
| Session identifiers, encrypted authentication tokens and session timestamps | Keep you signed in and end sessions appropriately | GDPR Article 6(1)(b) to keep the signed-in service working; Article 6(1)(f), legitimate interests, for the security and protection of sessions |
| Account identifier, downloaded material, material version and download time | Diagnose download problems, support members, prevent abuse and keep a technical record of the materials downloaded | GDPR Article 6(1)(f): legitimate interests (see below) |
| Information you include in emails to us | Answer questions and handle account or privacy requests | GDPR Article 6(1)(f), legitimate interests, for answering questions and support; Article 6(1)(c), legal obligation, where your message is a request to access, export or delete your data; Article 6(1)(b) where the message is needed to administer your account |
Download history and our legitimate interests. We keep only your account identifier, the material, its version and the time of the download. Our application does not store your IP address, user agent or referrer with these records. The purpose is directly connected to running and supporting the service, the impact on you is low, and the records are deleted six calendar months after each download. You can object to this processing at any time by emailing hello@helloparentingtogether.com.
Your email and authentication details are needed for an account and account-only downloads. You can browse the public pages without creating an account.
The current account and download features do not ask for your child's name, age, health information or family history. Please avoid including unnecessary sensitive information in support emails.
Our application does not store IP addresses, user-agent strings or referrers in its account or download tables. Hosting, security and authentication providers may process technical information such as IP addresses and access logs when delivering their services.
3. Cookies
The current application uses these cookies for account and security functions:
| Cookie | Purpose | Browser lifetime |
|---|---|---|
pt_session | Identify your sign-in session | Up to 14 days |
pt_csrf | Help protect forms against unwanted cross-site submissions | Up to 12 hours |
pt_flow | Connect an email-confirmation or password-recovery request with the browser that started it | Up to 24 hours |
A session can end before its cookie expires, for example when you sign out or after inactivity. Blocking these cookies may prevent account functions from working.
Our application contains no advertising or analytics trackers and does not use localStorage, sessionStorage or IndexedDB.
4. Providers and access
We use Hostinger for website hosting and Supabase for authentication, account data and private storage of downloadable materials. Providers process information needed to deliver those services. Authorised operators may access account and download records to administer the service and handle support requests.
Account emails: confirmation and password-reset emails are initiated by Supabase Auth and sent through Hostinger's email (SMTP) service, so both Supabase and Hostinger process your email address and the message when one is sent.
Support: messages to hello@helloparentingtogether.com are received and answered in a mailbox hosted by Hostinger Mail.
We may disclose information where legally required or where necessary and lawful to protect the service or respond to a security incident.
Supabase: since 1 August 2026, Supabase's Data Processing Addendum forms part of its Terms of Service, without a separately signed agreement. The addendum identifies Supabase Pte. Ltd. and includes standard contractual clauses for international transfers of personal data, on the terms set out in that document. You can read it at https://supabase.com/legal/customer-resources/data-processing-addendum.
Each provider's own processing, including where it processes data, its internal logs and backup copies, and any transfers it makes, is governed by that provider's terms and privacy policy, and for Supabase also by the addendum above.
5. How long we keep information
- Account information: while your account remains open. You may request deletion. Automatic deletion of inactive accounts is not currently active.
- Download history: six calendar months from each download. An hourly maintenance job deletes eligible records; deletion may take longer if a run fails or the database is unavailable.
- Application sessions: sessions end at absolute expiry, inactivity expiry or revocation, whichever occurs first. The current maximum duration is 14 days, with a seven-day inactivity limit. Stored authentication credentials are cleared when the application handles a sign-out or revocation, or when the scheduled maintenance handles a session that has ended; the maintenance includes a short clock-tolerance margin. Session records are deleted by the scheduled maintenance 30 days after their effective end.
- Support correspondence: six months after the enquiry or request is resolved. Relevant correspondence may be retained longer where necessary to comply with a legal obligation or establish, exercise or defend a legal claim; any exception is limited to the information and period needed for that purpose.
- Provider logs and backups: kept according to each provider's own policies and terms. Removing a record from our application does not necessarily remove it at once from a provider's backup copies.
Deleting your account does not remove a PDF you have already downloaded to your own device.
6. Your choices and rights
Depending on the circumstances and applicable law, you may request access to your personal data, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting processing that was lawful before withdrawal.
Send requests to hello@helloparentingtogether.com, preferably from the email address associated with your account. The links on the account page open an email draft; you still need to send the message. Requests are handled manually. We may seek proportionate information needed to confirm your identity.
We respond without undue delay and normally within one month. Where the law permits an extension for a complex request, we will explain the reason and extension within that first month. Some rights have exceptions; we will explain if an exception applies.
You can complain to the Irish Data Protection Commission at https://www.dataprotection.ie or to another competent data protection authority, including where you live or work when applicable.
7. Personalisation and marketing
The current service does not use your download history to send personalised recommendations. We would explain any proposed use of that kind and request your separate consent before starting it. Creating an account or acknowledging this notice does not itself subscribe you to marketing.
The current service does not make automated decisions with legal or similarly significant effects about you.
8. Updates
We will update this notice when our practices change and identify the effective date. Material changes will be communicated as appropriate before new processing begins.