Lactation Consultation Privacy Policy
Effective Date: July 26, 2026
Last Updated: July 26, 2026
1. INTRODUCTION & PURPOSE
Root Technology, Ltd. and its affiliates and subsidiaries (“Momcozy”, “we”, “us”, or “our”) respect your privacy. We provide maternal and baby products and related services. For the purposes of the GDPR and similar data protection laws, we are the data controller of your personal data. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your information when you participate in the Momcozy World Breastfeeding Week Free Hotline Consultation Initiative (“Service”).
The Service provides general breastfeeding education, information, and non-clinical lactation support through live chat, phone, or email. The Service is intended to provide educational guidance and support only and does not provide medical diagnosis, treatment, prescriptions, or clinical healthcare services.
By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before processing your personal data for specific purposes.
2. INFORMATION WE COLLECT
To provide breastfeeding education and support, we may collect the following information that you voluntarily provide:
(1) Contact Information: Name (or preferred name), email address, and phone number.
(2) Coarse Location Information: Country of residence, and U.S. state or territory (if applicable). We only collect coarse location information at the country and state level to determine whether the Service may be provided based on applicable jurisdiction-specific professional practice requirements and service availability restrictions. We do not collect or process precise geolocation data (such as GPS coordinates).
(3) Breastfeeding and Equipment Information: General information you voluntarily provide regarding your breastfeeding experience, including infant age, feeding and milk storage/pumping routines, breast pump brand and model details, and general breastfeeding inquiries or challenges. We only collect information reasonably necessary to provide general breastfeeding education, equipment guidance, and informational support.
(4) Consultation and Correspondence Records: Records of your interactions with the Service through live chat, phone, or email, including the inquiries you submit and our responses. Phone consultations are not recorded; if any quality monitoring is to be conducted on a call, we will notify you at the beginning of the call and obtain your consent where required by applicable law.
IMPORTANT NOTICE REGARDING MEDICAL INFORMATION AND SENSITIVE CONTENT
The Service is designed solely for general breastfeeding education and informational support. You must not submit or share any medical records, test results, hospital documents, or sensitive images/media (including photos or videos showing breasts, nipples, bodily fluids, or infant body parts).
Any unsolicited medical records or sensitive media received through the Service will not be used for consultation purposes and will be securely deleted or handled in accordance with our applicable data retention and deletion procedures.
3. HOW WE USE YOUR PERSONAL DATA
We process your information for the following purposes: Where the GDPR or similar laws apply, our legal bases for processing are: (i) your consent (for information you voluntarily provide during consultations); (ii) performance of the Service you request; and (iii) our legitimate interests in operating, securing, and improving the Service, balanced against your rights and freedoms.
(1) Providing Support and Education: To respond to your inquiries, manage service requests, and deliver general breastfeeding guidance and equipment support.
(2) Service Availability and Compliance: To verify whether the Service is available in your jurisdiction based on your country and state/territory, and to adhere to applicable practice requirements.
(3) Communication and Customer Care: To conduct follow-up communications, address support requests, and maintain service logs. Where required by applicable law (e.g., in Canada), we send commercial electronic messages only with your express consent, which you may withdraw at any time. We do not send marketing text messages without your prior express written consent.
(4) Service Improvement: To review anonymized or de-identified interaction records for consultant training, quality monitoring, and service enhancements.
4. How We Share Your Personal Data
4.1. Affiliates and Service Providers
We may share your personal data with our affiliates, related entities, and trusted third-party service providers acting on our behalf for legitimate business purposes and to operate the Services, including:
(1) providing customer support and managing ticket systems;
(2) delivering communications and managing customer relationships;
(3) analytics, quality monitoring, and service improvement activities;
(4) hosting, storing, and maintaining databases; and
(5) providing data security and anti-fraud services.
For the above purposes, we may utilize third-party application programming interfaces (“APIs”) and software development kits (“SDKs”). These service providers are bound by strict contractual data protection obligations and are only permitted to process your data according to our instructions.
In particular, the Service is operated on the Zendesk customer service platform (provided by Zendesk, Inc.). Your consultation records and related personal data are hosted and stored on Zendesk’s servers in its designated data centers. Zendesk processes personal data on our behalf to provide the Service and in accordance with applicable data protection requirements and Zendesk’s Privacy Notice. For details, please refer to Zendesk’s Privacy Notice available on its website.
4.2. Law Enforcement and Legal Obligations
We may disclose personal data when required to do so by law or when we believe such disclosure is necessary to comply with a legal obligation, court order, subpoena, or regulatory request; to enforce our terms and policies; or to protect the rights, property, safety, and security of us, our users, or others.
4.3. Corporate Transactions
If we undergo a merger, acquisition, financing, reorganization, or sale of assets, your personal data may be transferred as part of that transaction to a successor entity bound by this Privacy Policy.
5. Data Security and Retention
5.1. Data Security
We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized processing, in accordance with applicable laws.
However, despite these efforts to store personal data in a secure operating environment, we cannot guarantee the security of personal data during its transmission or storage on our systems. Further, while we attempt to ensure the integrity and security of personal data, we cannot guarantee that our security measures will prevent third parties such as hackers from illegally obtaining access to personal data.
5.2. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, provide our Services, or comply with statutory retention requirements (such as tax or legal obligations). When data is no longer needed, we securely delete or anonymize it. In particular, consultation records generated during this Initiative (August 1 – August 14, 2026) will be securely deleted or anonymized within 90 days after the Initiative ends. De-identified, aggregated data that no longer identifies you may be retained for consultant training, quality monitoring, and service statistics.
6. International Transfers of Personal Data
To provide our international Services, your personal data may be transferred to, stored, and processed in jurisdictions outside your country of residence. When we transfer personal data across borders, we implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy and applicable law. For transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and UK/Swiss equivalents) and/or our service providers’ certification under the EU-U.S. Data Privacy Framework. You may contact us to obtain a copy of the applicable safeguards.
7. Children’s Privacy
Our Services are designed for adults only and are not directed to children under the age of 18 (or other age as required by applicable laws). We do not knowingly collect or solicit any personal data from children as users of the Service. Personal data about infants (such as infant age and feeding routines) is provided to us by their parents or legal guardians using the Service, and is processed solely to provide the requested breastfeeding education and support.
In the event that we learn that a child has provided us with personal data in violation of applicable laws, we will promptly take steps to delete that data. If you are a parent or legal guardian and think your child has given us their personal data, you can contact us as described in “Contact Us” below.
8. YOUR PRIVACY RIGHTS
Depending on your jurisdiction, you may have the following rights regarding your personal data under applicable data protection laws:
8.1. Right to Access and Know
You may have the right to request information about the categories and specific pieces of personal data we process, the business purposes for collecting it, and the categories of third parties to whom it is disclosed, as well as to receive a copy of your personal data.
8.2. Right to Rectification and Correction
You may have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you.
8.3. Right to Erasure (Deletion)
You have the right to request the deletion of your account and personal data. Please note that we may retain certain information where required or permitted by applicable law (e.g., to comply with statutory record-keeping or financial obligations).
8.4. Right to Restrict or Object to Processing
You may have the right to object to or request the restriction of our processing of your personal data under certain circumstances. We will honor your request unless compelling legal grounds require us to continue processing.
8.5. Right to Withdraw Consent
Where we process your personal data (including any sensitive feeding details voluntarily provided during consultation) based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.
8.6. How to Exercise Your Rights
You may exercise your privacy rights by contacting us as specified in the “Contact Us” section below. To protect your privacy and security, we may require verification of your identity before fulfilling your request. We will respond to your request within the timeframe required by applicable law — generally within 30 days for requests under the GDPR (extendable where permitted) and within 45 days for requests under U.S. state privacy laws such as the CCPA/CPRA.
Requests are generally processed free of charge. However, where a request is manifestly unfounded, repetitive, or excessive, we may charge a reasonable administrative fee or decline to act on the request as permitted by law. You also have the right to lodge a complaint with your local data protection authority.
8.7. No Sale or Sharing of Personal Data; Non-Discrimination
We do not sell your personal data, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. We will not discriminate against you for exercising any of your privacy rights.
9. CONTACT US
If you have any questions about our practices or this Privacy Policy, please contact us at Dataprivacy@momcozy.com.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service page or by email before the changes take effect. The “Last Updated” date at the top of this Policy indicates when it was last revised.