1. The short version
- This website is for parents and caregivers aged 18 or older. Children should not use it or give us information.
- We collect very little. There are no accounts, newsletters or sign-up forms. The only personal data we receive is what you give us when you order a Name Song or email us.
- We never sell your information and we don't use advertising cookies or tracking pixels.
- Your child's name is used only to make their song and is removed from our production files within 90 days.
- You can see your data or ask us to delete it at any time by emailing privacy@miaandmoo.com.
2. Who we are
Mia & Moo (this website, the free printable cards and the Personal Name Song service) is operated by:
Forest Road B.V.Herengracht 449A, Amsterdam, the Netherlands
Chamber of Commerce (KvK) number: [KvK number]
Email: privacy@miaandmoo.com
Forest Road B.V. is the "controller" of your personal data under the EU General Data Protection Regulation (GDPR). That means we decide how and why your data is used and we are responsible for protecting it.
The Mia & Moo brand, the characters Mia and Moo and all related content are the intellectual property of our group company Forest Road Capital B.V., also based in Amsterdam. Forest Road Capital B.V. does not receive your personal data for its own purposes.
Name Song orders are sold and fulfilled by our partner company ForYouGaming Inc., 260 Newport Center Drive, Ste 100, Newport Beach, CA 92660, USA. ForYouGaming Inc. receives your order, payment and delivery details and your child's first name for that purpose only. It is responsible for that order data together with Forest Road B.V., and it handles it exactly as described in this policy. You can use your rights with either company through privacy@miaandmoo.com.
Mia & Moo videos are also published on YouTube. When you or your child watch on YouTube, Google's own privacy policy applies to what YouTube collects. This policy covers only what we collect ourselves.
3. Children's privacy
Our videos are made for babies and toddlers, but this website, our emails and our shop are meant for adults. We do not create accounts for children and we do not knowingly collect personal information directly from children.
- Name Song orders can only be placed by parents and caregivers aged 18 or older.
- The only information about a child we receive is a first name (and, if you choose, a note on how to pronounce it) that a parent or guardian gives us when ordering a Name Song. See section 5.
- We comply with the US Children's Online Privacy Protection Act (COPPA) and the GDPR's rules for children. Child data that a parent provides for a Name Song is never used for marketing, profiling or advertising.
- If you believe a child has given us personal information, email privacy@miaandmoo.com and we will delete it promptly.
4. What we collect
Information you give us
- Name Song orders: your name, email address (so we can send you the song), country, your child's first name and any pronunciation note you add, plus order details such as date and amount.
- Payments: handled entirely by our payment provider. We see that a payment was made, but we never see or store your full card number.
- Messages: anything you send us by email, for example a support question or a partnership proposal.
Information collected automatically
- Privacy-friendly analytics: counts of page views, downloads and button clicks, the referring website, and your country and device type. This is collected without cookies and without storing your IP address, so it cannot identify you.
- Free printable cards: downloading them requires no sign-up and no personal data.
- Server logs: our hosting provider records technical data such as IP address and browser type to keep the site secure and working. These logs are deleted after 30 days.
We do not collect precise location, photos, voice recordings or any special categories of personal data (such as health information) through this website.
5. Name Songs and your child's name
When you order a Personal Name Song, you confirm that you are the child's parent or legal guardian, or that you have the parent's permission. We then use your child's first name for one purpose only: producing and delivering their song.
- We may use AI audio tools to help produce the song. We only use providers whose terms do not allow them to use your content to train their own AI models.
- We do not use your child's name to train AI models, for marketing, or to build any profile of your child.
- We do not publish your child's song or use it in our own promotion unless you give us separate, explicit permission.
- We remove your child's name and the finished song from our production files within 90 days of delivery. The order record (your details and the amount paid) is kept for accounting, as explained in section 10.
- You can ask us to delete your child's name and song sooner at any time.
6. Why we use your information
Under the GDPR we need a legal reason ("legal basis") for each use of personal data. Here is ours:
| What we do | Data used | Legal basis |
|---|---|---|
| Make and deliver a Name Song | Your details, child's first name, pronunciation note | Performance of our contract with you |
| Process payments and keep accounting records | Order and payment details | Contract, and our legal obligation to keep financial records |
| Answer your questions and partner proposals | Name, email, message | Our legitimate interest in replying to you |
| Understand which pages and buttons are used | Anonymous, cookieless analytics | Our legitimate interest in improving the site |
| Keep the website secure | Server logs | Our legitimate interest in security |
We do not send marketing emails. We only email you about your own order. We do not use your information for automated decision-making that has legal or similarly significant effects on you.
7. Cookies and analytics
We do not use advertising cookies, social media tracking pixels or cross-site tracking. Our analytics tool works without cookies and does not store IP addresses. Because of this, we don't show a cookie banner. If we ever add cookies that are not strictly necessary, we will ask for your permission first and update this policy.
YouTube video: our welcome video is embedded using YouTube's privacy-enhanced mode (youtube-nocookie.com). Nothing loads from YouTube until you press play. Once you do, YouTube (Google) may collect data under Google's privacy policy.
8. Who we share it with
We never sell or rent your personal information. We share it only with service providers ("processors") that help us run Mia & Moo, under written agreements that require them to protect it and use it only on our instructions:
- Payment and checkout provider: Stripe, to take Name Song orders and payments and send order confirmations.
- File delivery: to send you the finished song ([delivery or email service]).
- Website hosting: to run this website ([hosting provider]).
- Analytics: cookieless, anonymous statistics ([analytics provider]).
- Audio production tools: to help produce Name Songs, under the conditions in section 5.
Name Song order data is shared with ForYouGaming Inc., which sells and delivers Name Songs (see section 2). We may also share information within our group (Forest Road B.V. and Forest Road Capital B.V.) where this is needed to operate the brand, always under this policy. We may disclose information if the law requires it, to protect the safety of a child or others, or as part of a sale or reorganization of the business, in which case the new owner must keep honoring this policy.
9. International transfers
We are based in the Netherlands and aim to keep data in the European Economic Area. Some of our providers may process data in other countries, including the United States. When that happens we use legal safeguards approved by the European Commission, such as the EU-US Data Privacy Framework or Standard Contractual Clauses. You can ask us for more information about these safeguards.
10. How long we keep it
| Data | How long |
|---|---|
| Child's first name, pronunciation note and finished song | Removed from production files within 90 days of delivery, sooner on request |
| Order and payment records | 7 years, as required by Dutch tax law |
| Emails you send us | Up to 2 years after our last contact |
| Server logs | 30 days |
11. Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you or your child, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data or your child's data;
- stop or limit how we use it, or object to a use based on our legitimate interests;
- send your data to you or another company in a common format (portability);
- withdraw any consent you have given, at any time.
Email privacy@miaandmoo.com to use any of these rights. We will reply within one month. We may ask you to confirm your identity first, so we don't hand someone else's data to the wrong person. Using your rights is free.
If you are unhappy with how we handle your data, please tell us first so we can fix it. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the data protection authority in your own country.
12. US and California notice
Parents in the United States: under COPPA you can review the information we hold about your child, ask us to delete it, and refuse further collection or use of it. Email privacy@miaandmoo.com to do so.
California residents: under the California Consumer Privacy Act (as amended by the CPRA) you have the right to know what personal information we collect and how we use it, to correct it, to delete it, and not to be treated differently for using these rights. The categories we collect are listed in section 4 and the purposes in section 6. We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16.
13. Security
We use encryption in transit (HTTPS), access controls and reputable providers to protect your information, and we limit access to the people who need it to do their work. No system is perfectly secure, but if a breach ever puts your data at risk we will tell you and the relevant authorities as the law requires.
14. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change is significant, for example if we start collecting a new kind of data, we will tell you by email before it takes effect.
15. Contact us
Forest Road B.V. (Mia & Moo)Herengracht 449A, Amsterdam, the Netherlands
privacy@miaandmoo.com