Privacy policy

Last updated October 25, 2026

The Third Clover is a creative studio and boutique for families in Danville, California, run by The Third Clover, LLC ("The Third Clover," "we," "us"). This policy explains what personal information we collect, how we use and share it, and the choices you have. It covers our websites (thethirdclover.com and my.thethirdclover.com), your family account, our studio and boutique, and the emails and texts we send.

The short version

We collect what we need to run your family's bookings, membership and purchases, and to keep the studio safe.
Your children's details are entered by you, a grown-up. We keep only each child's first name and birth month and year.
We don't sell your personal information or share it for cross-context behavioral advertising. We never use children's information for marketing.
Marketing emails and texts are opt-in, and you can stop them at any time.

What we collect

What you give us

Contact and account details: your name, email address and mobile number, and the grown-ups and children in your family account.
Your children: each child's first name and birth month and year, so we can offer sessions that fit their age. Children never log in, and we don't ask for their photos, last names or medical information.
Waivers: each grown-up's signed waiver: their name, the date, the version they signed and, on the door iPad, their drawn signature.
Bookings, memberships and purchases: what you book, buy, cancel or return, your membership and its payments, session credits, gift cards and gifts.
Payment details: entered at Shopify's checkout and handled by Shopify and its payment partners. We never see or keep full card numbers.
Messages and choices: what you send us, and your email and text choices, with the wording you agreed to and when.

What we collect automatically

On our store: Shopify's cookies for signing in, your cart, checkout, fraud prevention and store analytics, and Klaviyo's cookies, which recognize visitors who've signed up or clicked one of our emails and note the pages and products they view.
In our emails: whether an email was opened and which links were clicked.
Device details: your browser, IP address and the pages you visit, kept by our store and hosting providers for security.
On thethirdclover.com: cookie-free visit counts from Framer, which hosts that site.

At the studio

Check-ins: who came to which session, recorded when you check in at the door.
The welcome board: when it's on, the board by our door greets families by their children's first names for a few minutes after check-in.
Cameras: we may use security cameras on the studio floor, for safety and security only.
Photos: see "Photos and video" below.

How we use it

To run your account, bookings, memberships, payments, refunds, gift cards and gifts.
To show sessions that fit each child's age, and to check families in.
To send messages about your bookings, membership and purchases, like confirmations, reminders, schedule changes and receipts.
To send news and offers, only if you've chosen to get them.
To keep the studio, our websites and your account safe, and to prevent fraud.
To understand what families enjoy, so we can plan better sessions and events.
To meet our legal, tax and accounting obligations and enforce our terms.

We never use children's information for marketing.

Who we share it with

We share personal information only with the companies that help us run The Third Clover, and only for that work:

Shopify hosts our store, checkout, customer accounts, point of sale and payments (Shopify Payments, Shop Pay, Apple Pay and Google Pay). Shopify also uses some information about your visits for its own purposes, as its Consumer Privacy Policy explains, and you can make requests to Shopify at privacy.shopify.com.
Klaviyo sends our emails and texts.
Render hosts our booking app and its database in the United States.
Apple delivers your family card to Apple Wallet, if you add one.
Our accountants and advisers, when they need it for their work.

We may also share information when the law requires it, to protect someone's safety, or as part of a sale or merger of our business.

We don't sell personal information or share it for cross-context behavioral advertising, and we haven't in the past 12 months. We don't use advertising pixels, like Meta's or Google's, on our websites. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text message opt-in data and consent are never shared with any third parties.

Children

The Third Clover is for families, but our websites and accounts are for grown-ups 18 or older. Children don't create accounts or give us information themselves.
We don't knowingly collect personal information online from children under 13. If you think a child has given us information, tell us and we'll delete it.
A child's details are deleted when their grown-up removes them or closes the family account, except anything the law requires us to keep.

Photos and video

We sometimes photograph or film sessions, events and the studio. We focus on the activity, the materials, hands and the room, and we won't knowingly publish a clearly identifiable photo of a child's face without their parent's or guardian's permission. If you see your child in something we've posted and want it taken down, tell us and we'll remove it from everything we control. Our Terms of service have the details.

Emails and texts

We send emails and texts about your bookings, account and purchases. They're part of our service.
We send marketing emails only if you've opted in. Every one has an unsubscribe link.
Texts are opt-in and never a condition of buying anything. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. Our Text message terms have the details.

Cookies and Do Not Track

You can block or delete cookies in your browser, though signing in, your cart and checkout may then stop working. Shopify and Klaviyo may collect information about your visits to our store over time, and Shopify across other stores that use Shopify, as their own privacy policies describe.

We treat a Global Privacy Control signal from your browser as a request to opt out of any sale or sharing of your information. We don't respond to other "Do Not Track" signals, and our websites work the same either way.

How long we keep it

Your account and family details: while your account is open. We delete them when you close it, except what we must keep.
Orders, payments and membership records: as long as tax and accounting law requires.
Signed waivers, check-ins and records of what you agreed to: at least three years, and longer when we need them for safety, insurance or legal reasons.
Security video: a short time, unless we need it for an incident.

Your choices and rights

Wherever you live, you can ask us to:

See or correct your information. Most of it is on your account's Family page.
Get a copy of the information we hold about you.
Delete your account and your family's information, except what the law requires us to keep.
Stop marketing emails or texts, from the link in any email, by replying STOP to a text, or in your account.

Email hello@thethirdclover.com with the subject "Privacy request." We may need to confirm it's you, and you can ask someone to make a request for you with your written permission. We'll never treat you differently for making a request. You can also choose whether Shopify shares your data on our Your privacy choices page.

California residents: we don't share personal information with other companies for their own direct marketing.

Keeping it safe

We use encrypted connections, give staff access only to what they need, and show other families nothing about yours: the door iPad shows only a first name and last initial. No system is perfectly secure, so please keep your account login to yourself and tell us right away if something looks wrong.