COPPA Compliance

Our commitment to protecting children's privacy online

Last Updated: December 2025

About COPPA

The Children's Online Privacy Protection Act (COPPA) is a federal law that protects the privacy of children under 13 years of age. COPPA requires websites and online services to:

  • Obtain verifiable parental consent before collecting personal information from children
  • Provide clear notice to parents about information collection practices
  • Give parents control over their child's personal information
  • Implement reasonable security measures to protect collected information
  • Retain children's information only as long as necessary
Our Commitment:

SuppliedVibes takes children's privacy seriously and has implemented comprehensive measures to comply with COPPA requirements and protect young users.

Age Requirements & Verification

Minimum Age Policy

Our services have the following age requirements:

  • Account Creation: Users must be at least 13 years old to create an account independently
  • Purchases: Users must be at least 18 years old or have parental permission to make purchases
  • Subscriptions: Users under 18 must have a parent or legal guardian manage their subscription

Age Verification Process

  • Users are asked to provide their date of birth during registration
  • Accounts indicating users under 13 trigger our parental consent workflow
  • We use neutral age-screening mechanisms that don't collect personal information before verification
  • Suspicious account activity is reviewed to prevent age misrepresentation

Parental Consent Requirements

For users under 13, we require verifiable parental consent before:

  • Collecting, using, or disclosing personal information
  • Allowing participation in interactive features (reviews, comments, forums)
  • Sending marketing or promotional communications
  • Creating user accounts or profiles
Important for Parents:

If we discover that we have collected personal information from a child under 13 without proper parental consent, we will delete that information as soon as possible.

Information Collection from Children

What We Collect

When a child under 13 uses our service with parental consent, we may collect:

  • Contact Information: Parent/guardian name and email address (for consent and communication)
  • Shipping Information: Name and address (necessary for product delivery)
  • Order Information: Purchase history and subscription details
  • Technical Information: IP address, device type, browser type (for security and functionality)
  • Customer Service Records: Communications with support (for service quality)

What We Don't Collect from Children

We do NOT collect the following from users under 13:

  • Social Security numbers or government IDs
  • Precise geolocation information
  • Photos, videos, or audio files of the child
  • Biometric information
  • Social media profile information
  • Personal information through surveys or contests without parental consent
Data Minimization:

We only collect the minimum information necessary to provide our services and fulfill orders. We don't require children to provide more information than is reasonably necessary.

How We Use Children's Information

Information collected from children under 13 (with parental consent) is used only for:

  • Order Fulfillment: Processing and shipping products
  • Customer Service: Responding to inquiries and support requests
  • Account Management: Maintaining subscription and account records
  • Legal Compliance: Meeting legal and regulatory obligations
  • Safety & Security: Preventing fraud and protecting our services

Parental Rights & Controls

Your Rights as a Parent

Parents and legal guardians have the following rights regarding their child's information:

  • Review: Request to review the personal information we have collected from your child
  • Delete: Request deletion of your child's personal information
  • Refuse Collection: Refuse to permit further collection or use of your child's information
  • Revoke Consent: Withdraw previously given consent at any time
  • Update Information: Correct or update your child's information
Easy Access for Parents:

You can exercise these rights at any time by contacting us at contact@suppliedvibes.com or calling our dedicated parent support line.

Parental Consent Process

Our verifiable parental consent process includes:

Step-by-Step Consent

  • Parent/guardian receives email notification when child attempts to register
  • Parent reviews our privacy practices and data collection details
  • Parent provides consent through one of our approved verification methods
  • Parent receives confirmation and instructions for managing child's account
  • Parent can access controls and settings through dedicated parent dashboard

Parental Control Features

Our parent dashboard allows you to:

  • View all information collected about your child
  • Update shipping and contact information
  • Manage subscription settings and preferences
  • Control marketing and promotional communications
  • Download a copy of your child's data
  • Request account deletion at any time

Data Protection & Security

Security Measures

We implement industry-standard security measures to protect children's information:

  • Encryption: All data transmitted is encrypted using SSL/TLS protocols
  • Access Controls: Strict limitations on employee access to children's information
  • Secure Storage: Data stored on secure servers with regular backups
  • Regular Audits: Periodic security assessments and compliance reviews
  • Third-Party Vetting: All service providers sign agreements to protect children's data

Data Retention

We retain children's personal information only as long as necessary to:

  • Fulfill the purpose for which it was collected
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
Automatic Deletion:

When a child's account is closed or parental consent is withdrawn, we delete the child's personal information within 30 days unless retention is required by law.

Information Sharing

We do not share children's personal information except:

  • Service Providers: Companies that help us operate our business (shipping, payment processing) under strict confidentiality agreements
  • Legal Requirements: When required by law or to protect safety
  • Business Transfers: In the event of a merger or acquisition (with continued COPPA compliance)

We never:

  • Sell children's personal information to third parties
  • Use children's information for targeted advertising
  • Share information for marketing purposes
  • Allow third-party behavioral tracking of children

Third-Party Services & Links

External Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage parents to:

  • Review the privacy policies of any websites their children visit
  • Monitor their children's online activities
  • Teach children about online safety and privacy
Parent Advisory:

Links to third-party sites leave our COPPA-compliant environment. We recommend parents review and approve any external sites before allowing children to visit them.

Service Providers

We work with trusted service providers who assist with:

  • Stripe: Payment processing (PCI-DSS compliant)
  • Shipping Partners: Product delivery (USPS, FedEx, UPS)
  • Cloud Hosting: Secure data storage
  • Email Services: Parent communications

All service providers sign Data Processing Agreements that require them to:

  • Maintain COPPA compliance for children's information
  • Use information only for specified purposes
  • Implement appropriate security measures
  • Delete information upon request

Contact Information for Parents

Get in Touch

We're here to help parents manage their child's privacy. Contact us through any of these methods:

Dedicated Parent Support

  • Email: contact@suppliedvibes.com (24-48 hour response time)
  • Mail: SuppliedVibes COPPA Compliance
  • Online Form: Available in your parent dashboard

What to Include in Your Request

When contacting us about your child's information, please provide:

  • Your full name and relationship to the child
  • Child's username or email address
  • Specific request (review, delete, update, etc.)
  • Verification information (to protect your child's privacy)
Response Time:

We respond to all parental requests within 48 hours and complete most requests within 5-7 business days.

Policy Updates

Changes to This Policy

We may update this COPPA Compliance Policy from time to time. When we make material changes:

  • We will update the "Last Updated" date at the top of this page
  • Parents will receive email notification of significant changes
  • We will obtain new parental consent if required by law
  • Previous versions will be archived and available upon request

Staying Informed

We encourage parents to:

  • Review this policy periodically
  • Subscribe to parent notifications in your dashboard
  • Contact us with any questions or concerns
  • Report any potential violations of children's privacy