Names Done Right Privacy Policy

Last updated: August 9, 2026 Effective date: August 9, 2026

Names Done Right is a premium baby-naming service operated by Underline ("Underline," "Names Done Right," "we," "us," "our"). The business owner and data controller of record is Bharath Ramanidharan. We take privacy seriously because of what Names Done Right is: a service that helps expectant and new parents choose a name. To do that well, we sometimes collect information that is genuinely sensitive — including details about a baby (often before birth) and, if you opt in, birth dates, birth times, and birth places for parents and the child. This policy explains, in plain language, exactly what we collect, why, how long we keep it, who we share it with, and the rights you have to access or delete it.

If anything here is unclear, email us before you buy: [email protected]. We would rather answer a question than collect data you did not mean to share.

1. Who we are

We are honest about our size: Names Done Right is new and operated by an individual owner working with vetted contractors and software vendors (listed in Section 6). We are not a hospital, a medical provider, a financial advisor, a law firm, or a licensed counselor, and nothing we collect is used to provide medical, financial, or legal services.

2. The data we collect — and exactly why

We only collect what we need to deliver the naming service you purchased. We group it below by category so you can see precisely what is involved.

2.1 Information you give us during intake (the core of the service)

When you complete the guided intake questionnaire, you may provide:

• About the baby: sex if known (or that it is unknown/undisclosed), expected due date (we are pre-birth-first), and after birth, the actual date, time, and place of birth if you opt into the free post-birth nakshatra refinement.
• About the parents and family: first names, surnames you are considering or want to honor, family/heritage background, languages spoken at home, cultural or religious traditions you want reflected, names already used in the family, names you want to avoid, sibling names, and any "must-honor" relatives.
• Your preferences: style and sound preferences, meaning preferences, initials or monogram constraints, nickname tolerance, and any other guidance you write in free-text fields.
• Optional tradition inputs (only if you choose a tradition layer): for numerology, astrology, Vedic nakshatra, or gematria layers, we may collect parents' and/or child's birth date, birth time, and birth place (city/region). These are collected only if you explicitly opt in to that layer at intake — they are never required to use Names Done Right, and the consent for them is unbundled (see Section 4). Tradition layers are offered as a respected cultural practice, not as science, prediction, or a guarantee of fortune (see our Terms of Service).

We collect this so we can produce your curated, data-grounded name shortlist, the partner-tiebreaker, your keepsake report, and (if opted in) the tradition layers and post-birth refinement.

2.2 Information needed to take payment

Checkout is handled by Stripe. When you pay, you provide your name, email, billing address, and card or bank (ACH) details directly to Stripe — Names Done Right does not see or store your full card number or full bank account number. We receive from Stripe a transaction confirmation, the last four digits and card brand (or that ACH was used), and a payment status. The published price for your tier is the same regardless of which payment method you choose; we never describe card payments as carrying a "surcharge."

2.3 Information needed to deliver and support your order

• Email address — to send your scheduled "reveal," your keepsake report, order confirmations, and support replies.
• Free Name Check email copy — when you ask us to send a copy of a free Name Check, we use the email address you provide for that transactional message. We do not put the checked name or result into the short-lived delivery record described in Section 5.
• Communications — the content of emails or messages you send us, and our replies.
• Delivery scheduling — the planned time we provide for your crafted reveal.

2.4 Partner application information

If you apply to the performance partner program, we collect your name, business or channel name, business email, public website or profile, audience description, intended promotion channels, optional note, and the acknowledgements shown on the application form. We use this information only to review the application, communicate about approval, administer an approved relationship, and prevent fraud or non-compliant promotion. An application is not an acceptance and does not automatically create a referral code or payment right. Please do not submit customer, child, family, health, payment, tax, or identity-document information in this form.

2.5 Information collected automatically

When you visit our site we (and our infrastructure providers) automatically receive:

• Technical/security data: IP address, browser type, device type, pages viewed, referring page, and timestamps. Cloudflare processes this to deliver the site, block abuse, and provide security (e.g., bot protection).
• Limited analytics: aggregate, privacy-respecting usage data so we can understand which pages help people. We minimize this and avoid invasive cross-site advertising trackers.

Partner-referral attribution: if you arrive through a referral link, we may store a short public partner code in this browser tab and attach that code to Stripe Checkout. The code does not contain your name, email address, family brief, or payment credentials. We use it only to determine whether an approved partner may be owed a commission on a completed, non-refunded order and to prevent referral abuse.

2.6 What we do NOT collect

• We do not require any government ID, social security number, or financial account login.
• We do not collect medical records, and we do not ask for or want any pregnancy health information beyond a due date.
• We do not buy or append data about you from data brokers.
• We do not knowingly collect data from children. Names Done Right is for adults arranging a name for a child; the "subject" of a report may be a baby, but the user/customer is an adult.

3. How we use your information (purposes)

We use the data above strictly to:

1. Deliver the service — generate your curated shortlist, partner-tiebreaker, keepsake report, optional tradition layers, and post-birth nakshatra refinement.
2. Ground our work in real data — check candidate names against vetted name-meaning, etymology, popularity/usage, and pronunciation sources, with fixed data and safety controls (see our methodology page).
3. Process the AI-assisted analysis — portions of the shortlisting and write-up use AI tooling from Anthropic (see Section 6); we send only the intake content needed for that step, and we instruct our processors not to train their public models on it under our business terms.
4. Take payment and prevent fraud — via Stripe.
5. Communicate with you — confirmations, the scheduled reveal, support, and any service-critical notices.
6. Honor your refund/revision rights — including your one free revision and the 14-day satisfaction window described in our Refund Policy.
7. Keep the service secure and lawful — abuse prevention, security, and meeting legal/accounting obligations.

We also use partner application information to evaluate and administer the program, and a non-sensitive partner code to attribute approved referrals and administer any commission only after payment, delivery, refund-window, and dispute checks.

We do not sell your personal information. We do not use your intake details for advertising. We do not share your baby-naming data with anyone except the processors listed in Section 6, who act on our instructions.

Legal bases (for EEA/UK users, GDPR)

• Contract — to deliver the service you purchased and provide support.
• Consent — for optional tradition layers and the birth date/time/place data they use; you may withdraw consent at any time (Section 7).
• Legitimate interests — site security, fraud prevention, and basic, privacy-respecting analytics, balanced against your rights.
• Legal obligation — tax/accounting records for completed purchases.

4. Unbundled, opt-in consent for sensitive inputs

Because birth date/time/place and family/heritage details are sensitive, we keep their consent separate from the act of buying:

• The core naming service never requires birth time, birth place, or astrology/numerology inputs.
• Each tradition layer (numerology, astrology, Vedic nakshatra, gematria) has its own checkbox at intake. You can buy Names Done Right, complete intake, and receive a full shortlist without ticking any of them.
• We tell you, at the point of each checkbox, what the layer uses and that it is offered as cultural practice, not scientific fact or a guarantee.
• The post-birth nakshatra refinement (free) similarly only collects the child's birth date/time/place if you choose to use it after the birth.

You are never penalized for declining any optional input.

5. How long we keep your data (retention)

We aim to keep personal information only for as long as it is needed to provide and support Names Done Right. Some short-lived service records expire automatically. We are still implementing a single automated deletion schedule for paid-order, intake, and report records. Until that work is live, some of those records may remain in our active service systems longer than our intended 12-month service window.

Referral retention: the browser-tab copy of a partner code ends when that tab session ends. If a purchase is completed, the public partner code may be retained with payment and order-administration records so we can verify eligibility, handle refunds or disputes, prevent abuse, and account for any approved commission.

You may request access, correction, withdrawal of consent, or deletion by emailing [email protected]. We may need to verify the request and may need to retain limited information where appropriate. We will explain the action we take.

If you withdraw consent for optional birth-data processing, contact us before relying on any existing report or refinement that uses that information. We are still implementing automated removal of birth data and related derived report content across all active copies.

6. Who we share data with (sub-processors and third parties)

We use a small set of reputable vendors to run Names Done Right. They process data on our behalf and under contract, only for the functions listed. We do not sell data to anyone.

If we ever add or change a sub-processor, we will update this list. We choose vendors with recognized security and privacy practices, and we share the minimum necessary with each.

We may also disclose information if required by law (e.g., a valid legal request), to protect rights and safety, or as part of a business transfer — in which case we will require any successor to honor this policy or notify you.

We may transfer and process data in the United States and other countries where our processors operate. For EEA/UK transfers, we rely on appropriate safeguards such as our processors' Standard Contractual Clauses.

7. Your rights and choices

You have meaningful control over your data. Depending on where you live, your rights include:

For everyone

• Access — ask what we hold about you.
• Correction — fix inaccurate details.
• Deletion — ask us to delete your intake, birth data, and report (subject to records we must keep for tax/legal reasons).
• Copy/portability — get a copy of the data you provided in a usable format.
• Withdraw consent — turn off a tradition layer or withdraw birth-data consent at any time; this does not affect processing already done lawfully.

For EEA/UK residents (GDPR)

In addition to the above: the right to restrict or object to certain processing, the right not to be subject to solely automated decisions with legal/similar effects (our naming output is AI-assisted, subject to data and safety controls, and has no legal or similarly significant effect on you), and the right to lodge a complaint with your supervisory authority.

For California residents (CCPA/CPRA)

• The right to know what we collect, use, and disclose; the right to delete; the right to correct; and the right to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for purposes requiring a separate opt-out beyond delivering the service you asked for.
• We will not discriminate against you for exercising any right.
• Categories we collect map to: identifiers (name, email), commercial information (your purchase), internet/network activity (technical logs), and — only if you opt in — sensitive information (birth date/time/place, heritage/family details). We use these solely for the purposes in Section 3.

How to exercise any right: email [email protected] with your request. We will verify it reasonably (usually by confirming control of the order email) and respond within the timeframe the law requires. You may use an authorized agent.

8. Security

We protect your data with encryption in transit (HTTPS via Cloudflare), reputable hosting and payment infrastructure (Stripe handles card/bank data so we never store it), access limited to the owner and vetted contractors on a need-to-know basis, and data minimization (we don't ask for what we don't need). No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and any required authorities if a breach materially affects your personal data.

9. Children's privacy

Names Done Right is intended for adults (typically expectant or new parents). While a report may concern a baby, we do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Cookies and tracking

We use technologies needed to run the site securely (including Cloudflare security functions), limited analytics, and conversion measurement where configured. If you arrive through a partner referral link, we store only the public partner code in sessionStorage for the current browser tab and send it to Stripe as a checkout reference; it expires from the browser when that tab session ends. It contains no name, email address, family brief, or payment credentials. Where consent is legally required for a technology, we will present an appropriate choice and honor applicable "Global Privacy Control" signals.

11. Changes to this policy

If we change this policy, we will update the "Last updated" date and, for material changes, take reasonable steps to notify customers (e.g., by email or a site notice). Because we are a new business and may add or change tools as we grow, we commit to keeping this page accurate and honest.

12. Contact

Underline / Names Done Right Owner & data controller: Bharath Ramanidharan Privacy & support: [email protected]

We are a small, independent business and a real person reads these messages. If you have a privacy concern, tell us — we want to fix it.

Questions? [email protected] · namesdoneright.com