Tagnook — Children's Privacy & Consent

Business: 1001064988 Ontario Inc., carrying on business as Tagnook ("Tagnook", "we", "us", "our") Version: 1.0 Effective: August 12, 2026 Last updated: August 12, 2026 Applies to: our online store, our labels and tags, and our lost-and-found recovery service (together, the "Service").

1. In short

Tagnook makes personalized ID labels and tags for children's belongings, and runs a lost-and-found recovery service so that a lost item has a real chance of finding its way home. Because our labels often carry a child's first name, and because the person buying is almost always a parent or guardian, we handle a child's information with extra care.

Here is the whole policy in eight lines:

• You, the adult, are our customer. Accounts and orders are for adults. The Service is not directed to children, and we do not knowingly collect personal information from a child. Any information about a child comes from you, the responsible adult.
• The tag cannot track anyone. It is a passive printed label. No battery, no GPS, no beacon, no live location (section 2).
• We never ask you for a child's name for recovery. The name printed on a label is not copied into the recovery record (section 6).
• A finder never learns who your child is. No child's name, no photo, no address appears on the page a finder sees — for any item (section 7).
• We collect as little about a child as possible, and we ask you not to give us more than the Service needs (section 5).
• You stay in control. You can see, correct, or delete what we hold, and withdraw your consent (section 14) — after we have checked that the person asking really is you (section 15).
• We do not advertise to children, and we do not build advertising profiles from anything connected to a lost item (sections 10 and 11).
• We are not a child-safety device. If a child is missing, call 911 (section 20).

We sell and ship in Canada only, and all prices are in Canadian dollars (CAD).

2. The tag is passive — it cannot be used to track or locate a person

This is the single most important thing for a parent to understand about our product, so we say it plainly.

A Tagnook tag is a printed QR/NFC label. It has no battery, no GPS, no beacon, and no live location, and it cannot be used to track or locate a person. It does absolutely nothing until a human being finds the item and chooses to scan it with their own phone. There is no map, no history of where your child has been, no "last seen" pin, and nothing for anyone — including us — to watch.

When someone does scan a tag, all that happens is that a web page opens and offers them a way to send you a message. That is the entire mechanism.

3. Our accounts are for adults — which settles the age question

Different Canadian privacy rules use different ages for when a young person can consent for themselves. We have removed that question from the picture rather than leaving it open.

• Our accounts are adult-only. To hold an account, place an order, register or manage a tag, you must be 18 or older, or the age of majority in your province or territory if it is higher, and able to enter into a binding contract.
• A child never gives us information directly. A child does not open an account, does not buy from us, does not register a tag, and does not arrange a return. Information about a child reaches us because an adult chose to give it to us.
• So consent always comes from the responsible adult, whatever the child's age. Under Canada's federal private-sector privacy law (PIPEDA) and the guidance of the Office of the Privacy Commissioner of Canada, a child under 13 is generally not considered able to give meaningful consent, and a parent or guardian must consent instead. In Québec, Law 25 requires the consent of a person having parental authority for the information of a child under 14, and allows a young person of 14 and over to consent for themselves.
• That "14 and over" branch never applies to us. Because we do not permit anyone under the age of majority to hold an account or give us their information in the first place, there is no situation in which a 14-, 15-, 16- or 17-year-old consents to us on their own behalf. We treat every person under 18 as a child for whom the responsible adult consents. This is the more protective reading of both regimes, and it is the one we apply everywhere in Canada.

If we learn that we have collected personal information directly from a child, we will delete it. Email support@tagnook.com and we will act on it.

4. How we confirm you are the parent or guardian

A vague promise that "the customer confirms they have authority" protects nobody. Here is the actual mechanism, and its limits.

4.1 You confirm it twice, at the two moments that matter.

• At checkout, before you can complete an order, you confirm that you are 18 or older (or the age of majority in your province or territory if it is higher) and that you are the parent or guardian of, or are authorized to act for, any child whose name or details appear in what you are ordering. The order cannot be placed without that confirmation.
• At tag registration, before a recovery tag becomes active on your account, you confirm the same thing again. The tag does not activate without it.

4.2 We record the confirmation. We keep a record that you gave it, the date and time, and the version of this policy in force at that moment. That record protects you as much as us: it is a clear account of exactly what you agreed to and what the terms said at the time.

4.3 We deliberately do not ask for documents. We do not ask you for a birth certificate, a custody order, a court order, government ID, or proof of your relationship to your child as a condition of buying or registering. We could. We have chosen not to, because doing so would mean holding far more information about your child than this Service needs — and the entire design of this product is to hold less, not more. Your confirmation, plus the verification steps in section 15 before we act on any request about a child, is the balance we have struck.

4.4 If the confirmation is not true. Almost every person who ticks that box is a parent doing an ordinary thing for their own child. Because a small number are not, we say this clearly: putting a child's information into an order or a registration without the authority to do so is a breach of our Terms of Service. Section 17 sets out what we may do about it, including cancelling the order, refunding what we have not supplied, deactivating the tag, and closing the account.

5. What information about a child we handle, and where it comes from

Almost everything we hold about a child is information you gave us, not information we collected from your child.

• A first name or other text you choose to print on a label. You type it into the customizer. We print it. See section 6 for exactly where that text does and does not go.
• An item description you add for your own use ("blue backpack", "grade 2 lunch bag").
• An optional display name for an item — see section 6.
• Optional private notes you add for your own reference. A finder never sees them.
• A "this belongs to a child" indicator. You can tell us an item belongs to a minor, and when you do we apply stronger protections automatically (sections 6, 7 and 9).

The contact details tied to a recovery record are yours, the adult's — an email address so a finder's message can reach you. We notify you by email. The Service does not send SMS.

We do not ask you for, and we do not want, a child's surname, birthdate, home address, school, class list, student number, photograph, health information, or location. None of it is needed to print a label or to reunite you with a lost bag. Please do not put information like that in a note, a display name, or on a label.

6. Names: what is printed, and what is stored

This is the point parents ask about most, so we want to be precise rather than reassuring.

We never ask you for a child's name for recovery. The name printed on a label is not copied into the recovery record. You can optionally set a display name for an item; we ask you not to use a child's name, and if you flag an item as a child's, any display name is removed from the finder page automatically.

In other words, there are two separate things:

• Ink on the label. If you choose to print your child's first name, it is printed on the physical label so a teacher or a caretaker can recognize whose bag it is. That printed text is not part of the recovery record a finder reaches by scanning.
• The recovery record. What sits behind the tag is the adult's record: your display choices, your item description, and a way for us to relay a message to you.

The display name is the one place where free text you type can travel into the recovery system, because you may want to recognize your own items in your account ("Sam's soccer bag"). That is why we ask you to keep a child's name out of it, and why flagging an item as a child's removes any display name from the finder page automatically. If you would rather not think about it at all, use a neutral description of the object.

For our school and child-focused label formats, the default is a code with no printed name at all. Adding a first name is a choice you make on purpose, not a default we make for you.

7. What a finder sees — never a child's identity

When someone finds an item and scans its tag, they reach a finder page. It is built to reveal as close to nothing as a page can while still being useful.

• For every item — not only a child's — the finder page never displays a child's name, any photo, or any address.
• The physical tag carries only a random, non-guessable code. Not a child's name, not your name, not your address, not your phone number, not your email.
• Nothing about you is shown unless you specifically turn it on. By default the finder page shows a minimal, neutral set of fields and a way to send you a message. Your surname, your contact details, your private notes, and any exact reward amount are never shown.
• The child's-item protection is applied server-side, not in the browser — so it holds regardless of your other settings, and regardless of what the finder does on their end.

Instead of showing anyone's identity, the Service relays a message between the finder and you.

8. How messages between a finder and you work

If you choose to receive messages through the Service, both you and any finder are told, before messaging, that:

• Messages are relayed. The finder does not see your name, email, or phone number, and you do not see theirs, unless one of you chooses to share it in the message itself.
• Messages are recorded, retained, and always visible to the item's owner. They are not private, and no part of the Service is zero-knowledge or end-to-end encrypted. Please do not send anything through the relay that you would not want recorded, read by the item's owner, or lawfully produced.
• Messages may be reviewed to prevent abuse and may be produced in response to a lawful request, such as a valid court order or law-enforcement demand.
• Child sexual abuse material, and any content that sexually exploits or endangers a child, are prohibited without exception. Where we become aware of apparent material of that kind, we may preserve it and report it to the appropriate authorities, including Cybertip.ca (<https://www.cybertip.ca>) and/or police, as our legal obligations require. Nothing in this policy limits those obligations. This applies to the text relay as it exists today. If you encounter suspected child sexual abuse material or a situation of imminent harm, contact local police and report to Cybertip.ca.

These are not fine print. A stranger-to-stranger channel that nobody can see is a channel that gets misused, and the people at the end of this one are often children. We chose a recorded relay on purpose, and we would rather tell you that than describe it as "secure".

Message content is kept on the schedule in section 18 and then deleted.

9. Privacy by default

Any setting that could make information about a child more visible starts in its most protective state:

• Fields that could identify or locate someone are off until you actively turn them on.
• The child's-item protection in sections 6 and 7 applies automatically as soon as you flag an item as a minor's.
• We do not switch on any profiling or location feature about a child on our own. There is nothing of that kind to switch on (section 2).

10. We do not advertise to children

• We do not direct advertising or promotional messages at children. Our marketing, where we do any, is addressed to adult customers.
• We do not use a child's information — including anything connected with a lost item or a recovery — to build advertising profiles or to send marketing.
• Any commercial email we send follows Canada's anti-spam law (CASL): it identifies us and carries a working unsubscribe link. Service messages, such as an order confirmation or a notification that your tag was scanned, are not marketing and are not something you can be opted out of while you hold an active tag.
• Québec law prohibits advertising directed at children under 13. We write and review our messaging with that rule in mind.

11. Cookies and tracking

Our store uses strictly necessary cookies — the ones that keep you signed in, keep your cart working, and keep the checkout secure. We do not run advertising pixels or cross-site tracking pixels on our storefront, and we do not sell personal information. You can control or clear cookies through your browser settings at any time; blocking the strictly necessary ones will stop parts of the store from working.

12. Schools, daycares, camps, teams and other organizations

We are glad to supply groups, and we do it through sales@tagnook.com. Because a group order involves other people's children, a few things have to be true.

12.1 An administrator is not a parent or guardian. A teacher, principal, daycare operator, camp director, coach or office administrator cannot consent on behalf of someone else's child. Only a parent, guardian, or person with parental authority can.

12.2 The organization must already have each parent's consent, and be able to show it. If you order labels for a group, you confirm that you have obtained the consent of each child's parent or guardian to provide that child's information for this purpose, that you are acting within the authority they gave you, and that you can produce evidence of that consent if we or a privacy regulator asks. Keep your own consent records; we do not hold them for you.

12.3 Send us the minimum. Give us only the text that needs to be printed. Do not send us class lists with surnames, student numbers, birthdates, home addresses, health information, or photographs. If we receive information we did not need, we delete it.

12.4 Recovery tags are registered by the parent, never by the organization. An organization can buy tags and hand them out unregistered. Each tag is then registered by the child's own parent or guardian, to that adult's own account. The organization does not hold the recovery record, does not appear as the owner, does not receive relayed messages, and does not get access to a family's account. We do not create a child's recovery record on an organization's instruction.

12.5 If a child's item is found at your facility, treat it as ordinary lost property: hold it at your office and return it to the family through your normal process. That is safer and faster than any online arrangement, and it is what we recommend to finders anyway (section 13).

12.6 If consent was not obtained. Where we reasonably believe a group order was placed without the parental consent described above, we may decline or cancel it, refund anything we have not supplied, and deactivate any tags registered contrary to this section. We would much rather have a five-minute conversation with you first — write to sales@tagnook.com before you order and we will help you get it right.

13. If a child is the one who finds a lost item

Children find things. A child who picks up a lost water bottle in a schoolyard may be the person scanning the tag, and we have designed for that.

• A finder needs no account, no app, and no personal information. The finder page asks nothing about who the finder is. A message can be sent without a name, an email address, or anything else. The Service does not let a finder share their location, and it does not let a finder attach a photo.
• Our advice to any child who finds something: give it to a trusted adult — a teacher, a parent, the front desk, the school office — and let the adult handle it. That is the fastest route home for the item and the safest route for everyone.
• No meeting, ever, with a child involved. We strongly recommend against arranging any in-person handover, and in-person handover for a minor's item is not supported. Never involve a child in arranging a return or a reward.
• We do not knowingly collect a finder's personal information from a child. If a child does send us contact details through the relay, a parent or guardian can ask us to delete them by emailing support@tagnook.com, and we will.
• We do not pay children. Reward credit is issued only to an adult. Nothing in the Service offers a child money or anything of value for returning an item, and there is no cash payout of any kind: a Tagnook thank-you is store credit, capped at CAD $10 per confirmed return, issued after a 3-day review period and human review, on the terms in our Recovery & Reward Program Terms.

14. Your rights over your child's information

As the parent or guardian who provided the information, you can ask us to:

• Access the information we hold about your child;
• Correct anything inaccurate or incomplete;
• Delete it, or stop displaying it — noting that deleting the record behind a physical tag deactivates that tag, so a later scan will no longer reach you;
• Withdraw your consent to our use of it, which may mean we can no longer provide part of the Service;
• Receive a copy of the computerized information you provided, in a structured, commonly used technological format, where the law requires.

We respond within 30 days, at no charge — except, if it ever applies, a reasonable fee for transcription or reproduction, which we would tell you about before doing the work so you can decide.

We do not sell personal information. We do not make decisions about you or your child based solely on automated processing.

One physical limit, stated honestly: once a label has been printed and shipped, we cannot un-print it. Deleting your records removes information from our systems; it does not change an object already in your home.

15. How we check who is asking — before we act on a child's information

The right to delete a child's information is only as good as the check that stops the wrong person from using it. So before we give out, change, or delete anything about a child, we verify two things: who is asking, and whether they have authority to ask.

15.1 How we verify. We match the request against records we already hold — control of the account email address, and details of the order or registration that the account holder would know. We ask for the least we can, and we use what you give us only to answer the request.

15.2 We do not build a file on your child to do it. As in section 4.3, we do not routinely ask for a birth certificate, a custody order, or government ID. Verification should not cost you more privacy than the request was meant to protect.

15.3 If we cannot verify, we do not act. We will tell you plainly that we could not verify the request, and what would let us proceed — usually as simple as sending the request from the email address on the account. We will not disclose a child's information, and we will not delete or alter a record, on the word of someone we cannot place. We would rather inconvenience an honest parent for a day than hand a child's information to the wrong adult, and we think most parents would want it that way round.

15.4 If adults disagree. Where two adults give us conflicting instructions about the same child's item — which happens, and usually during a hard time in a family — we are not able to decide who is right, and we will not try. We will hold the current position, restrict what is visible where we reasonably can, and act on the joint direction of both adults or on a court order.

15.5 If we later learn the person lacked authority. We may reverse what was done where it is still possible, restore or re-restrict the record, and take the steps in section 17.

15.6 A request from a child. If a young person contacts us about information we hold, we do not refuse them out of hand — we explain that the account is held by an adult, and we act through that adult, unless the circumstances in section 16 apply.

16. Safety

Two situations override our normal preference to hold as little as possible for as short a time as possible:

• Risk to a child. Where we reasonably believe a child's safety is at risk, we may retain information we would otherwise delete, and disclose it to police, a child-protection authority, or another appropriate authority. We may do this without notice where notice would increase the risk. This is deliberate and we are not going to hedge about it.
• Legal holds and lawful requests. Where we are required to preserve records, or receive a valid legal demand, we suspend the ordinary automatic deletion for the affected records until the hold is lifted, and we respond as the law requires.

Tagnook is not an emergency service. We cannot locate a person, and we have no information that would help find one (section 2). If a child is missing, call 911 and contact your local police immediately.

17. Keeping the Service honest

Almost everyone who uses Tagnook is a parent doing an ordinary thing — labelling a lunch bag, registering a tag, hoping a backpack comes home. Nothing here is aimed at you. But a service that carries children's belongings and connects strangers has to have limits with real force behind them, so these are ours.

17.1 Only the rightful buyer or owner may activate a tag. Activating a tag you did not buy and do not control, claiming someone else's tag, bulk-activating tags for resale, or scanning tags to harvest owners' contact details is prohibited. It voids the tag with no refund, and we may refuse, suspend, or reverse any activation, registration, or reward we reasonably believe to be fraudulent.

17.2 The relay is for arranging a return, and nothing else. Harassment, threats, extortion ("pay me and I'll return it"), scams, spam, phishing, contact-harvesting and unlawful content are prohibited. To keep the channel safe we may read, moderate, retain and disclose relay messages for safety purposes and to answer lawful requests; we may block a sender, suspend return access on a tag, and report to police. Report anything of this kind to support@tagnook.com — a person reads it. This does not create any obligation on us to monitor everything.

17.3 Rewards are reviewed before they are issued. Fabricated "found" reports, collusion between an owner and a finder, self-return, inflated claims, and farming rewards across accounts or tags are prohibited. We may decline, withhold, reverse, or cancel reward credit and suspend the feature. The 3-day review period before any credit is issued exists for exactly this reason. Every such decision involves human review, not an automated verdict alone, and if you think we got it wrong you can appeal by emailing support@tagnook.com.

17.4 We may refuse, suspend, or unwind. Where we reasonably suspect fraud, abuse, breach of our Terms, or a request made without the authority described in sections 4 and 15, we may refuse or cancel an order, refuse service, suspend or close an account, deactivate tags, and reverse an action already taken where that is still possible. Anything we have not supplied is refunded. Where it is practical and appropriate, we tell you first and give you a chance to explain — most of what looks odd at first has an ordinary explanation.

17.5 Nothing here takes away your rights. These are limits on misuse, not on your consumer or privacy rights, which are preserved in full (section 22).

18. Where information is stored, and how long we keep it

Recovery data is stored in Canada, in the AWS Canada region (ca-central-1), on our CloakTag recovery platform, which processes it on our behalf.

Shopify is our order and customer system of record, and Shopify may store order data outside Canada, including in the United States. That means your order information — your name, email, shipping address, and what you bought, including any text you asked us to print — is handled under Shopify's infrastructure and may be stored outside the country. We tell you this because a flat "your data stays in Canada" would not be true of the ordering side of the business, and you are entitled to know which half is which. Wherever information is stored, it remains subject to this policy and to contractual protections, and Canadian privacy law continues to apply to us.

We keep information only as long as we need it:

• Relay message content: about 90 days.
• Safety and audit records: about 24 months.
• Breach register: 5 years.
• Order records: as long as required for tax, accounting, warranty and consumer-law purposes.
• Legal hold: where a hold applies, ordinary automatic deletion is suspended for the affected records until it is lifted (section 16).

We use reasonable technical and organizational safeguards. No system is perfectly secure, and we will not claim otherwise; if a breach ever creates a real risk of serious harm, we will notify the affected people and the appropriate regulators as the law requires.

19. What the Service does not include

So that nothing in our materials reads as a promise we have not made:

• The Service does not include photo upload. You cannot attach a photo to an item, and a finder cannot attach a photo to a message.
• The Service does not let a finder share their location. There is no location field, coarse or precise.
• The Service does not offer an encrypted vault, and no part of the Service is zero-knowledge or end-to-end encrypted.
• We notify you by email. The Service does not send SMS.
• There is no cash payout of any kind. A Tagnook thank-you is store credit redeemable only with us. We do not hold, route, escrow, or take a cut of money between an owner and a finder.
• The Service is offered in Canada only.

20. What Tagnook is not

The recovery service helps a stranger contact you about an item. It is not:

• a GPS, real-time, or continuous location-tracking service;
• a child-safety, child-monitoring, emergency, or medical device or service;
• a theft-prevention, security, or surveillance service;
• insurance, a warranty, or a guarantee against loss, theft or damage;
• an official lost-and-found or custodian — we never take possession of your item.

We do not guarantee that any lost item will be found or returned. Recovery depends on a stranger choosing to help. If a child is missing, call 911.

21. Complaints, and who to go to if we get it wrong

Tell us first — email support@tagnook.com and we will look into it properly. If you are not satisfied with our answer, you can complain to:

• Québec residents: the Commission d'accès à l'information du Québec (CAI);
• Elsewhere in Canada: the Office of the Privacy Commissioner of Canada (OPC).

Nothing in this policy prevents you from going to a regulator at any time.

22. Governing law, and your rights that cannot be waived

This policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable there. Venue for any proceeding is Toronto, Ontario.

Nothing in this section prevents you from bringing proceedings in the courts of the province or territory where you live. If you live in Québec, you may bring proceedings in Québec, and nothing here waives any right you have to participate in a class action or any right you have under Québec's Consumer Protection Act.

Nothing in this policy excludes, restricts, or modifies any right or remedy you have that cannot lawfully be excluded — including your rights under Canadian privacy legislation, under Québec's Law 25, and under consumer-protection legislation such as Québec's Consumer Protection Act. Where any part of this policy is not permitted by the law that applies to you, that part does not apply to you and the rest continues in effect.

23. Contact

Questions, requests, or complaints about a child's information:

• Privacy contact: the Privacy Officer, Tagnook — support@tagnook.com
• Schools, daycares, camps, teams, wholesale and bulk: sales@tagnook.com

Registered business address: 226 Kinloch Court, Nepean, Ontario K2J 5S9, Canada Telephone: 1 (613) 262-8136

24. Changes to this policy

We may update this policy. The current version and its effective date are posted on our website, and we note when it was last changed. Where a change is material, we will give notice by email or on the site. The version in force when you gave a confirmation under section 4 is the version recorded against that confirmation.

25. Related policies

• Terms of Service — the agreement covering your account, orders and use of the Service.
• Privacy Policy — how we handle personal information generally.
• Recovery & Reward Program Terms — how the lost-and-found service and reward credit work, including reward limits.
• Refund, Return & Reprint Policy — the 30-day return window and the 12-month reprint guarantee.
• Shipping & Delivery Policy — delivery within Canada.

If this policy and another Tagnook document ever conflict on a point about a child's information, this policy controls.