Information collected
| Service | Information used |
|---|---|
| Application | Authorized contact name and email, organization, product identity, intended use and users, labels, instructions, images, claims and supporting evidence. |
| Access | Contact email, verification request, one-time link and necessary session information. |
| Review | Completeness checks, clarification requests, submitted evidence, assessment notes, decision and relevant dates. |
| Public recognition | Approved product identity, image, category, scope, award year, reference, status and updates. |
| Contact and concerns | Reply details, topic, reference, message and relevant supporting information. |
| Physical-item service | Authorized recipient, requested item and quantity, quote and proof information, delivery details for an agreed order, and service correspondence. |
| Website operation | Request and connection information needed to deliver the site, protect private access and investigate misuse or service errors. |
Do not submit personal information about children or unrelated health records. Product evidence should describe the product, rather than identify an individual family.
Why information is used
We use application information to establish eligibility, check the submitted evidence, review the specified product, request clarification and communicate a decision. For recipients, we use the approved identity to issue free digital files and maintain an accurate public record.
Access information protects private applications, recipient downloads and order records. Contact information allows us to respond to the request you made. Physical-order information is used to prepare a quote, confirm a proof, arrange an agreed order and resolve fulfillment matters.
Physical purchasing activity is not used to decide award outcomes or access to free digital benefits. An application does not subscribe the contact to unrelated marketing.
What is made public
Only approved product-record fields are published. These include the product name, brand, model or version, category, intended users, scope, award year, public reference, relevant dates and status. An approved product image or official information link may also appear.
The same approved record is available through Mom’s Pick Awards and the NPF registry. Private applicant contacts, evidence files, assessment notes, verification links, order information and service messages are not part of that public record.
Service providers and transfers
Cloudflare provides the website infrastructure and program services: D1 stores service records, R2 stores files, and Cloudflare email services handle program notifications. These services process the information needed for their stated function. Information may be processed in the locations used by the provider's infrastructure.
An agreed physical order may require relevant delivery details to be shared with its production or shipping provider. The quote and order arrangements identify the necessary fulfillment services. This contact form does not collect payment card details. Any payment arrangement for an actual order is identified before purchase.
We do not sell applicant contact lists or provide supporting application evidence for public advertising.
Retention and security
| Information | Retention approach |
|---|---|
| Uncompleted application drafts | Deleted after 90 days without completion. |
| Unrecognized or withdrawn applications and evidence | Retained for 24 months after the final decision. |
| Evidence needed to support recognized records | Retained while recognition remains active and for 24 months after it ends. |
| Contact and concern requests | Retained for 24 months after the request is closed. |
| Physical-item inquiries and order service data | Retained for 24 months after closure. Actual financial records that must be retained for applicable accounting or legal requirements are handled separately. |
| Public award records | Retained to allow identification of current and historical recognition, corrections and status changes. |
Deletion or removal of identifying data is carried out under these schedules, subject to information that must be kept for an applicable legal requirement or an unresolved matter. Public product identity may remain in the historical record when private contact data is removed.
Private services require verified access. One-time links expire after 30 minutes and can be used once; the necessary private session lasts 24 hours. Access and storage controls help protect information, but no online service can promise absolute security.
Choices and requests
You may ask to access, correct or delete your personal information, update an authorized contact, or clarify how a record is used. State the service and reference involved. We verify the requester's authority and explain any information that needs to be retained rather than deleted.
A product-record correction follows the recipient process because it may affect a certificate or award statement. Withdrawing an application is separate from canceling a physical order.
Children and technical data
Applications and private recipient services are intended for adults acting on behalf of an organization. We do not ask children to provide application information and do not need identifiable children's data to assess a product.
The website uses a necessary access cookie for private services and does not use advertising trackers or optional audience analytics. Search and filter choices are carried in the page URL.
Changes and contact
The date on this notice identifies the published version. If a material change affects the use of information associated with an active application, recipient service or order, we provide appropriate notice through that service or its authorized contact.
Use the privacy topic on the contact form. Do not send identification documents unless specifically requested through an appropriate private process.
