Children's Privacy Notice

Gardspace is operated by The Citadel - Épopée SAS (SIREN 999 058 829), Chatou (78), France. This Children's Privacy Notice explains how Gardspace handles data related to children in compliance with the Children's Online Privacy Protection Act (COPPA, United States), the General Data Protection Regulation (GDPR, Article 8, European Union), and the UK Children's Code (Age Appropriate Design Code). Gardspace accounts are created exclusively by adults aged 18 or over. Children do not create accounts, interact with the application directly, or have any visibility into the platform. The application is not directed at children.

What child data we collect

The only child-related data collected is information entered by a parent or legal guardian at the time of Care Space creation:

First name — used to identify the child within the Care Space.

Date of birth — used to contextualise Daily Reports and session records.

Gender — used solely for grammatical accuracy in Daily Reports generated in French (masculine/feminine agreement). Never used for profiling, advertising, or any commercial purpose.

Profile photo (optional) — stored within the Care Space, never shared publicly.

Session logs, Daily Reports, photos and videos are created by parents and nannies during active care sessions — not by the child. Photos and videos are automatically deleted after 48 hours. Parents may download media during this period. No media is stored permanently.

Verifiable Parental Consent

Before creating a Care Space for any child, Gardspace requires explicit parental confirmation via a mandatory checkbox presented at the time of Care Space creation. By checking this box, the parent or legal guardian confirms that:

· They are the parent or legal guardian of the child named in this Care Space.

· They consent to Gardspace collecting and storing the limited data described above.

· They understand that this confirmation constitutes their verifiable parental consent under COPPA and equivalent regulations in their country.

This consent is logged in our system with a timestamp and the account identifier of the confirming parent. It is retained as a legal record for the duration of the account's existence. If the child is under 13 years of age, this mechanism constitutes Gardspace's Verifiable Parental Consent procedure under COPPA. No Care Space can be created without this confirmation.

How child data is used

Child data is used solely to provide the Gardspace service — to organise the Care Space, generate Daily Reports, and build the child's record within the family's secure environment. Child data is never used for advertising, behavioural analytics, third-party sharing, or any purpose other than the direct operation of the Gardspace service within the family's Care Space.

How child data is protected

Child data is accessible only to members of the Care Space at the time the data was created. A new nanny joining an existing Care Space does not have access to data created before their arrival. The family retains full access to all historical data at all times, as the owner of the Care Space.

Photos are captured directly in Gardspace — they never pass through the nanny's personal gallery or any personal storage. Data is encrypted in transit and at rest. Media is accessible only via time-limited signed URLs and is never publicly accessible.

Data retention

Child data is retained for the duration of the family's active account. Upon deletion of the family account, all child data — including session logs, Daily Reports, and Care Space records — is permanently deleted in cascade. No child data is retained after account deletion.

Media files (photos and videos) are automatically purged after 48 hours regardless of account status. The gender field and date of birth are retained only for the purpose of generating accurate Daily Reports during active sessions. They are included in the family account deletion cascade.

Parental rights

Parents and legal guardians have the following rights at all times:

Right to access — view all child data stored within your Care Space at any time.

Right to correction — update child information (first name, date of birth, gender) at any time from the Care Space settings.

Right to deletion — request complete deletion of your child's data and Care Space at any time.

Right to revoke consent — revoke the parental consent given at Care Space creation at any time. Revoking consent triggers complete deletion of the Care Space and all associated child data.

To exercise any of these rights, contact privacy@gardspace.com or visit our Data Deletion page. Requests are processed within 30 days.

If you believe Gardspace has collected information from a child without proper parental consent, please contact us immediately at privacy@gardspace.com. We will investigate and delete the data promptly.

Contact

For COPPA-related enquiries specifically, contact privacy@gardspace.com with the subject line: COPPA Request — [your request type].

The Citadel - Épopée SAS · 66 Rue du Lieutenant Ricard · Chatou 78400 · France
ICO Registration Number: ZC114076 (registered 01 April 2026)