Names Done Right Privacy Policy

Last updated: August 31, 2026 Effective date: August 9, 2026

Names Done Right is an independent baby-naming service ("Names Done Right," "we," "us," "our") currently operated by Amarnath Holdings LLC, which is the data controller. We take privacy seriously because of what Names Done Right is: a service that helps expectant and new parents choose a name. To do that well, we sometimes collect information that is genuinely sensitive — including details about a baby (often before birth) and, if you opt in, birth dates, birth times, and birth places for parents and the child. This policy explains, in plain language, exactly what we collect, why, how long we keep it, who we share it with, and the rights you have to access or delete it.

If anything here is unclear, email us before you buy: [email protected]. We would rather answer a question than collect data you did not mean to share.

1. Who we are

We are honest about our size: Names Done Right is new and operated by Amarnath Holdings LLC, working with a small number of vetted contractors and software vendors (listed in Section 6). We are not a hospital, a medical provider, a financial advisor, a law firm, or a licensed counselor, and nothing we collect is used to provide medical, financial, or legal services.

2. The data we collect — and exactly why

We only collect what we need to deliver the naming service you purchased: the $149 Decision Sprint digital report, $299 Keepsake with Naming Studio and a softcover book, or $597 Heirloom with Naming Studio, a hardcover book and one 15–30 minute call. Paid orders are currently for U.S. adults only. The groups below explain the additional information needed for printing, shipping and call coordination.

2.1 Information you give us during intake (the core of the service)

When you complete the guided intake questionnaire, you may provide:

• About the baby: sex if known (or that it is unknown/undisclosed), expected due date (we are pre-birth-first), and after birth, the actual date, time, and place of birth if you opt into the free post-birth nakshatra refinement.
• About the parents and family: first names, surnames you are considering or want to honor, family/heritage background, languages spoken at home, cultural or religious traditions you want reflected, names already used in the family, names you want to avoid, sibling names, and any "must-honor" relatives.
• Your preferences: style and sound preferences, meaning preferences, initials or monogram constraints, nickname tolerance, and any other guidance you write in free-text fields.
• Optional tradition inputs (only if you choose a tradition layer): for numerology, astrology, Vedic nakshatra, or gematria layers, we may collect parents' and/or child's birth date, birth time, and birth place (city/region). These are collected only if you explicitly opt in to that layer at intake — they are never required to use Names Done Right, and the consent for them is unbundled (see Section 4). Tradition layers are offered as a respected cultural practice, not as science, prediction, or a guarantee of fortune (see our Terms of Service).

We collect this so we can produce your curated, data-grounded name shortlist, the partner-tiebreaker, your digital Decision Sprint report, and (if opted in) the tradition layers and post-birth refinement.

2.2 Information needed to take payment

Checkout for all three one-time offers is handled by Stripe. When you pay, you provide your name, email, billing address, and card or bank (ACH) details directly to Stripe — Names Done Right does not see or store your full card number or full bank account number. Our application records the transaction and order references, amount, currency, offer identifier, payment status, and the payment-method type Stripe reports. It also records applicable tax and the physical tier's shipping details where needed. The published product price is the same regardless of which available payment method you choose; we never describe card payments as carrying a "surcharge." The digital-only Decision Sprint does not require shipping information. For Keepsake and Heirloom, Stripe collects the recipient name and U.S. shipping address; we retain those restricted order details and confirm them with you before printing.

2.3 Information needed to deliver and support your order

• Email address — to send your scheduled "reveal," your digital report, order confirmations, and support replies.
• Free Name Check email copy — when you ask us to send a copy of a free Name Check, we use the email address you provide for that transactional message. We do not put the checked name or result into the short-lived delivery record described in Section 5.
• Waitlist or launch-interest signup — if you choose to join, we collect the name and email address you enter, the offer you indicate interest in, and the signup timestamp. We use these fields only to manage and contact that signup.
• Communications — the content of emails or messages you send us, and our replies.
• Delivery scheduling — the planned time we provide for your crafted reveal.
• Printed edition and shipping — for Keepsake and Heirloom, the approved print content, proof approval, recipient name, confirmed shipping address, vendor order reference, tracking and delivery status. The print edition can contain names and family wording you specifically approve. We do not send raw intake answers, birth dates, birth times, birth places, private report links or internal notes to the printer. A person reviews the edition before upload; payment alone does not authorize automatic print dispatch.
• Included Heirloom call — your order email, scheduling preferences and time zone are used to coordinate the paid 15–30 minute call. We record whether it was completed for support and order reconciliation. We do not record or transcribe the call without separate agreement. A call link is sent only after the paid order is verified.

2.4 Partner application information

If you apply to the performance partner program, we collect your name, business or channel name, business email, public website or profile, audience description, intended promotion channels, optional note, and the acknowledgements shown on the application form. We use this information only to review the application, communicate about approval, administer an approved relationship, and prevent fraud or non-compliant promotion. An application is not an acceptance and does not automatically create a referral code or payment right. Please do not submit customer, child, family, health, payment, tax, or identity-document information in this form.

2.5 Information collected automatically

When you visit our site we (and our infrastructure providers) automatically receive:

• Technical/security data: IP address, browser type, device type, pages viewed, referring page, and timestamps. Cloudflare processes this to deliver the site, block abuse, and provide security (e.g., bot protection).
• Limited analytics: Cloudflare may provide aggregate, privacy-respecting website measurements so we can understand which pages help people. We do not currently load Google Ads, Meta Pixel, or GA4 tags on public or post-checkout pages. We avoid invasive cross-site advertising trackers.

Partner-referral attribution: if you arrive through a referral link, we may store a short public partner code in this browser tab and attach that code to Stripe Checkout. The code does not contain your name, email address, family brief, or payment credentials. We use it only to determine whether an approved partner may be owed a commission on a completed, non-refunded order and to prevent referral abuse.

Campaign-source attribution: if you arrive through one of our published campaign links, we may store one pre-registered campaign code in this browser tab and attach that fixed code to Stripe Checkout. The code identifies only the campaign cohort; it contains no name, email address, family brief, payment credential, or customer-entered value. We do not store a Google click ID (gclid), raw UTM value, raw referrer, search query, or other free-text campaign value in the order record. We use the fixed code only to count verified paid orders from the tagged path and compare those orders with the separately recorded campaign cost.

2.6 What we do NOT collect

• We do not require any government ID, social security number, or financial account login.
• We do not collect medical records, and we do not ask for or want any pregnancy health information beyond a due date.
• We do not buy or append data about you from data brokers.
• We do not knowingly collect data from children. Names Done Right is for adults arranging a name for a child; the "subject" of a report may be a baby, but the user/customer is an adult.

3. How we use your information (purposes)

We use the data above strictly to:

1. Deliver the service — generate and electronically deliver your curated shortlist, partner-tiebreaker, digital report, optional tradition layers and post-birth nakshatra refinement; provide the premium Naming Studio; and, for physical tiers, prepare the approved print edition, fulfill shipping and coordinate the included Heirloom call.
2. Ground our work in real data — check candidate names against vetted name-meaning, etymology, popularity/usage, and pronunciation sources, with fixed data and safety controls (see our methodology page).
3. Process the AI-assisted analysis — portions of the shortlisting and write-up use AI tooling from Anthropic (see Section 6); we send only the intake content needed for that step, and we instruct our processors not to train their public models on it under our business terms.
4. Take payment and prevent fraud — via Stripe.
5. Communicate with you — confirmations, the scheduled reveal, support, and any service-critical notices.
6. Honor your refund/revision rights — including your one free revision and the 14-day satisfaction window described in our Refund Policy.
7. Keep the service secure and lawful — abuse prevention, security, and meeting legal/accounting obligations.

We also use partner application information to evaluate and administer the program, a non-sensitive partner code to attribute approved referrals and administer any commission only after payment, delivery, refund-window, and dispute checks, and a fixed non-sensitive campaign code to measure verified paid orders from a pre-registered acquisition test.

We do not sell your personal information. We do not use your intake details for advertising. We do not share your baby-naming data with anyone except the processors listed in Section 6, who act on our instructions.

Legal bases (for EEA/UK users, GDPR)

• Contract — to deliver the service you purchased and provide support.
• Consent — for optional tradition layers and the birth date/time/place data they use; you may withdraw consent at any time (Section 7).
• Legitimate interests — site security, fraud prevention, and basic, privacy-respecting analytics, balanced against your rights.
• Legal obligation — tax/accounting records for completed purchases.

4. Unbundled, opt-in consent for sensitive inputs

Because birth date/time/place and family/heritage details are sensitive, we keep their consent separate from the act of buying:

• The core naming service never requires birth time, birth place, or astrology/numerology inputs.
• Each tradition layer (numerology, astrology, Vedic nakshatra, gematria) has its own checkbox at intake. You can buy Names Done Right, complete intake, and receive a full shortlist without ticking any of them.
• We tell you, at the point of each checkbox, what the layer uses and that it is offered as cultural practice, not scientific fact or a guarantee.
• The post-birth nakshatra refinement (free) similarly only collects the child's birth date/time/place if you choose to use it after the birth.

You are never penalized for declining any optional input.

5. How long we keep your data (retention)

We aim to keep personal information only for as long as it is needed to provide and support Names Done Right. Some short-lived service records expire automatically. We are still implementing a single automated deletion schedule for paid-order, intake, and report records. Until that work is live, some of those records may remain in our active service systems longer than our intended 12-month service window.

Referral retention: the browser-tab copy of a partner code ends when that tab session ends. If a purchase is completed, the public partner code may be retained with payment and order-administration records so we can verify eligibility, handle refunds or disputes, prevent abuse, and account for any approved commission.

Campaign-code retention: the browser-tab copy of a fixed campaign code ends when that tab session ends. If a purchase is completed, that non-sensitive code may be retained with the minimal payment and order-administration record so we can reconcile the tagged paid order, refunds or disputes, and the separately recorded campaign cost.

You may request access, correction, withdrawal of consent, or deletion by emailing [email protected]. We may need to verify the request and may need to retain limited information where appropriate. We will explain the action we take.

If you withdraw consent for optional birth-data processing, contact us before relying on any existing report or refinement that uses that information. We are still implementing automated removal of birth data and related derived report content across all active copies.

6. Who we share data with (sub-processors and third parties)

We use the vendors below for the listed functions. Service providers process data under their applicable terms; payment providers, printers and carriers may also retain data for their own legal, security and fulfillment obligations. We share the minimum needed for the function. We do not sell data to anyone.

If we ever add or change a sub-processor, we will update this list. We choose vendors with recognized security and privacy practices, and we share the minimum necessary with each.

We may also disclose information if required by law (e.g., a valid legal request), to protect rights and safety, or as part of a business transfer — in which case we will require any successor to honor this policy or notify you.

We may transfer and process data in the United States and other countries where our processors operate. For EEA/UK transfers, we rely on appropriate safeguards such as our processors' Standard Contractual Clauses.

7. Your rights and choices

You have meaningful control over your data. Depending on where you live, your rights include:

For everyone

• Access — ask what we hold about you.
• Correction — fix inaccurate details.
• Deletion — ask us to delete your intake, birth data, and report (subject to records we must keep for tax/legal reasons).
• Copy/portability — get a copy of the data you provided in a usable format.
• Withdraw consent — turn off a tradition layer or withdraw birth-data consent at any time; this does not affect processing already done lawfully.

For EEA/UK residents (GDPR)

In addition to the above: the right to restrict or object to certain processing, the right not to be subject to solely automated decisions with legal/similar effects (our naming output is AI-assisted, subject to data and safety controls, and has no legal or similarly significant effect on you), and the right to lodge a complaint with your supervisory authority.

For California residents (CCPA/CPRA)

• The right to know what we collect, use, and disclose; the right to delete; the right to correct; and the right to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for purposes requiring a separate opt-out beyond delivering the service you asked for.
• We will not discriminate against you for exercising any right.
• Categories we collect map to: identifiers (name, email), commercial information (your purchase), internet/network activity (technical logs), and — only if you opt in — sensitive information (birth date/time/place, heritage/family details). We use these solely for the purposes in Section 3.

How to exercise any right: email [email protected] with your request. We will verify it reasonably (usually by confirming control of the order email) and respond within the timeframe the law requires. You may use an authorized agent.

8. Security

We protect your data with encryption in transit (HTTPS via Cloudflare), reputable hosting and payment infrastructure (Stripe handles card/bank data so we never store it), access limited to the owner and vetted contractors on a need-to-know basis, and data minimization (we don't ask for what we don't need). No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and any required authorities if a breach materially affects your personal data.

9. Children's privacy

Names Done Right is intended for adults (typically expectant or new parents). While a report may concern a baby, we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Cookies and tracking

We use technologies needed to run the site securely, including Cloudflare security functions, and limited aggregate Cloudflare website analytics. We do not currently load Google Ads, Meta Pixel, or GA4 tags on public or post-checkout pages. If you arrive through a partner referral link, we store only the public partner code in sessionStorage for the current browser tab and send it to Stripe as a checkout reference. If you arrive through a pre-registered campaign link, we may similarly store only that fixed campaign code in sessionStorage and send it as a separate, non-commission-bearing Stripe checkout reference. Both codes expire from the browser when that tab session ends and contain no name, email address, family brief, payment credentials, raw UTM value, gclid, referrer, search query, or free text. We will not enable advertising or other consent-dependent tracking without first implementing the appropriate choice and honoring applicable Global Privacy Control signals.

11. Changes to this policy

If we change this policy, we will update the "Last updated" date and, for material changes, take reasonable steps to notify customers (e.g., by email or a site notice). Because we are a new business and may add or change tools as we grow, we commit to keeping this page accurate and honest.

12. Contact

Names Done Right Current operator & data controller: Amarnath Holdings LLC Privacy & support: [email protected]

We are a small, independent business and a real person reads these messages. If you have a privacy concern, tell us — we want to fix it.

Questions? [email protected] · namesdoneright.com