Privacy policy

Palabra Garden is a small, founder-led studio. We collect only what we need to send you the things you asked for — your order, your printable, your weekly email — and we try to be honest about what that looks like. This page explains what we keep, why we keep it, and how to ask us to let it go.

Who we are

Palabra Garden is operated by Lindsey Carleton, MA, CCC-SLP, a Texas-based small business. When this policy says "we," "us," or "our," it means Palabra Garden. When it says "you" or "your," it means you — the person visiting our site, signing up for our newsletter, or buying one of our digital products.

What we collect

We collect a small, deliberate set of information. Here's the full list.

When you sign up for the newsletter

• Your email address.
• Your first name, only if you choose to share it.
• Which page you signed up from (for example, the freebie page or the footer form). This helps us understand which content is actually useful.
• The date and time you subscribed, and your confirmation status.

When you buy something

• Your name and email address.
• Your billing address and payment details — these are collected and stored by Stripe, our payment processor. We never see or store your full card number. We receive a confirmation, a transaction ID, and the last four digits of your card.
• The product you bought, the price you paid, and the date of the order.
• A link to your downloadable file, which is delivered by email.

When you contact us

• Your name, your email, and whatever you choose to write in the message. We use this only to reply to you.

When you visit the site

• Basic, anonymous analytics — pages viewed, approximate location (country and region, not address), the device and browser you used, and how you found us. This is aggregate data; we do not use it to identify individual visitors.
• Cookies and similar storage used by Stripe during checkout so the payment flow works correctly.

How we use what we collect

We use your information for four things, and only these four things.

1. To fulfill your order. Delivering your digital download, sending receipts, and resolving order problems.
2. To send the emails you signed up for. Weekly and monthly newsletters with bilingual tips, freebies, and seasonal printables. Welcome and onboarding emails after you subscribe. New-product announcements.
3. To answer your questions. When you email us at [email protected], we reply.
4. To understand what's working. Aggregate analytics tell us which blog posts and products resonate, so we can make better ones.

We do not sell your information. We do not rent your information. We do not share your information with advertisers, data brokers, or anyone else looking to target you.

Where your data lives

Your information is stored across a small set of trusted services:

• Cloudflare D1 — our database for newsletter subscribers, order records, and site content. Cloudflare hosts and protects this site.
• Stripe — payment processing and billing records. Stripe's privacy practices govern how your card data is handled; you can read theirs at stripe.com/privacy.
• Resend — our email delivery provider. Resend processes the email address we send to and logs delivery events (delivered, opened, clicked, bounced) so we know our newsletters are actually arriving.

Each of these services is contractually bound to protect your data and to use it only for the purpose we hired them for.

Cookies and similar storage

We use cookies and similar browser storage in two ways:

• Analytics. A small, privacy-respecting analytics cookie helps us count page views and understand site traffic in aggregate.
• Checkout. Stripe sets cookies during checkout that are necessary for the payment session to work — fraud prevention, session continuity, and the payment flow itself.

You can disable cookies in your browser settings. If you do, the site will still work, but checkout may not.

How long we keep your data

• Newsletter subscribers. Until you unsubscribe, then we keep a suppressed record (your email plus the fact that you unsubscribed) so we don't accidentally re-email you later.
• Order records. Seven years, because U.S. tax and recordkeeping laws require it.
• Contact form messages. Up to two years, then deleted.
• Analytics data. Aggregate analytics are retained per our analytics provider's defaults (typically 14 months).

Your choices

Unsubscribing from emails

Every email we send contains an unsubscribe link at the bottom. You can opt out of a single campaign (for example, just the weekly newsletter) or opt out globally. Both options take effect immediately.

Asking us what we have on you

You can ask us what personal information we hold about you. Email [email protected] with the subject "Data request" and we will send you a summary within 30 days.

Asking us to delete your data

You can ask us to delete the personal information we hold about you. Email [email protected] with the subject "Delete my data." We will remove your information within 30 days, except where we are required by law to keep it — for example, order records we are obligated to retain for tax purposes. We will tell you exactly what we deleted and what we had to keep.

Correcting your data

If something we have on you is wrong, email us and we will fix it.

Children's privacy

Our products are designed for families with young children, but the site itself is intended for adults — parents, caregivers, and educators. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, email us and we will delete it.

Security

We protect your information with industry-standard measures — TLS encryption in transit, encrypted storage at rest, access controls, and the same safeguards that Cloudflare, Stripe, and Resend provide to their customers. No system is perfectly secure, but we take this seriously and we work with reputable partners.

Changes to this policy

If we change this policy in a meaningful way, we will update the "last updated" date at the top and, for material changes, send a note to active newsletter subscribers. Small clarifications and typo fixes will not trigger a notification.

Contact us

Questions, requests, or concerns about your privacy — write to us.

Email: [email protected]
Mail: Palabra Garden, 1724 E Broad St Ste 128, PMB 515, Mansfield, TX 76063