Privacy Policy

Last updated December 31, 2024

This Privacy Notice for Mind Body Spiritual Connections, LLC (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services and/or purchase our product, including when you:

• Visit our website at mindbodyspiritualconnections.com or any of our affiliated sites that link to this Privacy Notice.
• You can also engage with us through related activities like sales, marketing, or events.
• If you have any questions or concerns, reading this Privacy Notice will help you understand your rights and choices regarding your privacy. We are responsible for how we process your personal information. If you disagree with our policies and practices, please refrain from using our services.
• For further questions or concerns, please contact us at mbsconnections.7@gmail.com.

Summary of Key Points

This summary provides key points from our Privacy Notice. Still, you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about the personal information you disclose to us.
• Do we process any sensitive personal information? Some of the information may be considered “special” or “sensitive” in certain jurisdictions, for example, your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.
• Do we collect any information from third parties? We do not collect any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you for security and 1 fraud prevention, and comply with the law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason. Learn more about how we process your information.
• In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.
• How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request or contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Interested in learning how we handle the information we collect? Please review our Privacy Notice in full.

Table of Contents

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE PROCESS YOUR INFORMATION?

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

5. HOW LONG DO WE KEEP YOUR INFORMATION?

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

7. DO WE COLLECT INFORMATION FROM MINORS?

8. WHAT ARE YOUR PRIVACY RIGHTS?

9. CONTROLS FOR DO-NOTTRACK FEATURES

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

11. DO WE MAKE UPDATES TO THIS NOTICE?

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

**Personal Information You Provide to Us**

• We collect personal information you voluntarily provide when you register for our services, express interest in our products or services, participate in activities on the platform, or contact us for any reason.
• The personal information we collect varies based on how you interact with us and our services, the choices you make, and the products and features you use. This personal information may include the following:

– names
– phone numbers
– email addresses
-mailing addresses
– usernames
– credit card numbers
– billing addresses

• Sensitive Information: We do not process sensitive information.
• Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Squareup. You may find their privacy notice link(s) here: https://squareup.com/us/en/legal/general/privacyno- account.
• All personal information you provide must be true, complete, and accurate, and you must notify us of any changes to such personal information.
• We automatically collect certain information when you visit, use, or navigate our Services, Online Classes, and Products. This information does not identify you personally, such as your name or contact details, but it may include data related to your device and usage. This can encompass your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, 3 and other technical details. We primarily collect this information to ensure the security and proper functioning of our Services and for internal analytics and reporting purposes. The information we collect may include the following:

**Log and Usage Data**: Log and usage data refers to the service-related, diagnostic, usage, and performance information that our servers automatically collect when you access or use our services. This information is recorded in log files. Depending on your interactions with us, this log data may include details such as your IP address, device information, browser type, settings, and information related to your activity within the services. This includes date and time stamps associated with your usage, the pages and files you view, searches you perform, and other actions you take, such as the features you use. Additionally, we may collect device event information, including system activity, error reports (often called “crash dumps”), and hardware settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

• In Summary, we process your information to provide, improve, and manage our services, to communicate with you regarding security and fraud prevention, and to comply with legal requirements. With your consent, we may also process your information for additional purposes.
• We process your personal information for various reasons, depending on how you interact with our services, including:
• Facilitating account creation and authentication: We may process your information to help you create and log into your account and manage it effectively.
• Protecting an individual’s vital interests:** We may process your information when necessary to preserve or protect an individual’s vital interests, such as preventing harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

• In Summary, We only process your personal information when we believe it is necessary and have a valid legal reason (or “legal basis”) under applicable law. This includes obtaining your consent, complying with legal obligations, providing 4 you with services, fulfilling our contractual obligations, protecting your rights, or serving our legitimate business interests.
• This section applies to you if you are in the EU or UK. The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following legal bases:
• **Consent:** We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about how to withdraw your consent.
• **Legal Obligations:** We may process your information when it is necessary for compliance with our legal obligations, such as cooperating with law enforcement or regulatory agencies, exercising or defending our legal rights, or disclosing your information as evidence in litigation in which we are involved.
• **Vital Interests:** We may process your information when it is necessary to protect your vital interests or those of a third party, such as in situations involving potential threats to anyone’s safety.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

• In Summary, we do not disclose any information under the circumstances outlined in this section or share such information with third parties. As a small enterprise, we prioritize confidentiality and will only release personal information if we obtain written consent from the client.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

• In Summary: We retain your information only for as long as necessary to achieve the purposes outlined in this Privacy Notice unless required by law to keep it longer. We will only keep your personal information for the duration needed to fulfill the goals stated in this notice unless a longer retention period is specified or allowed by law (such as for tax, accounting, or other legal obligations). No purpose in this notice will require us to retain your personal information longer than the time you maintain an account with us.
• When we no longer have a legitimate business reason to process your personal information, we will delete it. If deletion is not immediately possible (for instance, if your information is stored in backup archives), we will securely store your personal information and separate it from any further processing until we can delete it.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

• In Summary: We are committed to protecting your personal information through organizational and technical security measures.
• We have implemented reasonable and appropriate security measures to safeguard any personal information we process. However, despite our efforts and safeguards, no method of electronic transmission over the Internet or information storage can be guaranteed 100% secure. Therefore, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized parties will not compromise our security and unlawfully collect, access, steal, or alter your information. While we strive to protect your personal information, transmitting such information to and from our Services is at your own risk. We advise you to access our Services only within a secure environment.

7. DO WE COLLECT INFORMATION FROM MINORS?

• In Summary: We do not knowingly collect data from or market to children under 18 years of age.
• We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to delete such data from our records promptly. If you become aware of any data we may have collected from children under 18, please contact us at cdunn841@gmail.com.

8. WHAT ARE YOUR PRIVACY RIGHTS?

• Depending on your state of residence in the U.S. or certain regions—such as the European Economic Area (EEA), the United Kingdom (UK), and Switzerland— you have specific rights that grant you increased access to and control over your personal information. You may review, modify, or terminate your account at any time, depending on the laws applicable to your country, province, or state of residence.
• You have certain rights under relevant data protection laws in some regions, such as the EEA, UK, and Switzerland. These rights may include:

1. 1. The right to request access to and obtain a copy of your personal information.
   2. The right to request rectification or erasure of your data.
   3. The right to restrict the processing of your personal information.
   4. The right to data portability, if applicable. •
   5. The right not to be subject to automated decision-making.

• In certain situations, you may also have the right to object to the processing of your personal information. To make such a request, please contact us using the details provided in the section titled “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. We will consider and act upon any request in accordance with applicable data protection laws.
• Suppose you are in the EEA or the UK and believe we are unlawfully processing your personal information. In that case, you can file a complaint with your respective Member State data protection authority or the UK data protection authority. If you are in Switzerland, you can contact the Federal Data Protection and Information Commissioner.
• Withdrawing your consent: If we are processing your personal information based on your consent—express or implied, depending on the applicable law—you can withdraw your consent at any time. You can do this by contacting us using the details provided in the section titled “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below or by updating your preferences. Please note that withdrawing your consent will not affect the legality of any processing that occurred before your withdrawal. Additionally, if allowed by law, it will not impact the processing of your personal information conducted under lawful processing grounds other than consent. Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send you or by contacting us using the information provided in the section titled “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” below. After unsubscribing, you will be removed from our marketing lists. However, we may still send you communications essential for the administration and use of your account, such as service-related messages, responses to service requests, or other non-marketing purposes.
• **Account Information**
• If you would like to review or change your account information, or if you wish to terminate your account, please follow these steps:
• Contact us using the provided contact information.
• Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our records to prevent fraud, troubleshoot issues, assist with investigations, enforce our legal terms, and comply with applicable legal requirements.
• If you have questions or comments about your privacy rights, please email us at mbsconnections.7@gmail.com.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

• Most web browsers, as well as some mobile operating systems and applications, offer a Do-Not-Track (DNT) feature that you can activate to indicate your privacy preference, specifically to avoid having your online browsing activities monitored and collected. However, no standardized technology for recognizing and implementing DNT signals exists. Therefore, we do not respond to DNT browser signals or other methods that automatically communicate your choice not to be tracked online.
• Per California law, we must inform you of our response to web browser DNT signals. Since there is no established industry or legal standard for recognizing or honoring these signals, we do not respond to them at this time. If a standardized approach for online tracking is adopted in the future that we need to follow, we will update this Privacy Notice to inform you of that change.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

• In Summary: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.
• Categories of Personal Information We Collect
• We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	Yes
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history	Yes
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race, marital status, and other demographic data	Yes
D. Commercial information	Transaction information, purchase history, financial details, and payment information	Yes
E. Biometric information	Fingerprints & voiceprints	No
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	No
G. Geolocation data	Device location	No
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	No
I. Professional or employment-related information	Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us	Yes
J. Education Information	Student records and directory information	No
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	No
L. Sensitive personal Information		No

• We may also collect additional personal information outside of the categories mentioned when you interact with us in person, online, by phone, or through mail in the following contexts:

– Receiving assistance through our customer support channels.
– Participating in customer surveys or contests.
– Facilitating the delivery of our services and responding to your inquiries.

• We will use and retain the personal information collected as necessary to provide our services based on the following categories:

– Category A: As long as the user maintains an account with us.
– Category B: As long as the user maintains an account with us.
– Category I: As long as the user maintains an account with us.
– Category J: As long as the user maintains an account with us.

• **Sources of Personal Information** To learn more about the sources of personal information we collect, please refer to the section titled “What Information Do We Collect?”
• **How We Use and Share Personal Information** For more details on how we use your personal information, see the section “How Do We Process Your Information?”
• **Will Your Information Be Shared with Anyone Else?** We will only disclose your personal information to our MSBC team through written consent. For more information on how we share personal information, refer to the section “When and With Whom Do We Share Your Personal Information?”
• We have not disclosed, sold, or shared any personal information with third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information belonging to website visitors, users, and other consumers in the future.

Your Rights

You have rights under specific U.S. state data protection laws. However, these rights are not absolute, and in some cases, we may decline your request as permitted by law. The rights you may have include:

1. **Right to Know:** You have the right to know whether we are processing your personal data.
2. **Right to Access:** You can access your personal data.
3. **Right to Correct:** You have the right to correct any inaccuracies in your personal data.
4. **Right to Delete:** You can request the deletion of your personal data.
5. **Right to Obtain a Copy:** You are entitled to receive a copy of the personal data you previously shared with us. 
6. **Right to Non-Discrimination:** You have the right not to be discriminated against for exercising your rights.
7. **Right to Opt-Out:** You can opt out of processing your personal data if it is used for targeted advertising, the sale of personal data, or profiling that leads to significant decisions.

Depending on the state where you live, you may also have the following additional rights:

1. **Right to Access Categories:** You can access the categories of personal data being processed (as permitted by applicable law, including Minnesota’s privacy law).
2. **Right to Obtain Third-Party Lists:** You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data (as permitted by applicable law, including California’s and Delaware’s privacy laws).
3. **Right to Specific Third-Party Information:** You can obtain a list of specific third parties to whom we have disclosed personal data (as permitted by applicable law, including Minnesota’s and Oregon’s privacy laws).
4. **Right to Review Profiling:** You have the right to review, understand, question, and correct how your personal data has been profiled (as permitted by applicable law, including Minnesota’s privacy law).
5. **Right to Limit Sensitive Data Use:** You can limit the use and disclosure of sensitive personal data (as permitted by applicable law, including California’s privacy law).
6. **Right to Opt-Out of Sensitive Data Collection:**

You can opt out of collecting sensitive personal data and personal data collected through voice or facial recognition features (as permitted by applicable law, including Florida’s privacy law).

How to Exercise Your Rights

• To exercise your rights, please contact us by submitting a data subject access request. You can reach us by emailing mbsconnections.7@gmail.com or referring to the contact details at the bottom of this document.
• Under specific U.S. state data protection laws, you have the option to designate an authorized agent to submit a request on your behalf. Please note that we may deny requests from an authorized agent if they do not provide proof of their authorization to act for you in accordance with applicable laws.  

Request Verification

• Upon receiving your request, we will need to verify your identity to ensure that you are the same person related to the information we have in our system. We will only use the personal information you provide in your request to verify your identity or your authority to make the request. Suppose we cannot verify your identity using the information we already have. In that case, we may ask you to provide additional information for identity verification and security and fraud prevention purposes.
• If you submit the request through an authorized agent, we may need to collect extra information to verify your identity before processing it. Additionally, the agent must provide written and signed permission from you to submit the request on your behalf.

Appeals

• Under specific data protection laws in the U.S., if we decline to act on your request, you can appeal our decision by emailing us at mbsconnections.7@gmail.com. We will then provide you with a written response detailing any actions taken or not taken in response to your appeal and explaining the reasons for our decision. You can submit a complaint to your state attorney general if your appeal is denied.
• **California “Shine The Light” Law**
• California Civil Code Section 1798.83, also known as the “Shine The Light” law, allows California residents to request and receive information from us once a year, free of charge. This includes details about the categories of personal information we may have shared with third parties for direct marketing purposes and the names and addresses of all third parties with whom we shared personal information in the previous calendar year. If you are a California resident and would like to make such a request, please submit it in writing using the contact details provided in the section titled “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?”

11. DO WE MAKE UPDATES TO THIS NOTICE?  

• In summary, we will update this notice to comply with relevant laws.
• We may periodically update this Privacy Notice with a new “Revised” date at the top. If we make significant changes, we may inform you by prominently posting a notice or directly sending you a notification. We encourage you to review this Privacy Notice regularly to stay informed about how we protect your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at cdunn841@gmail.com, by phone at 617-750-8685, or contact us by post at:

Mind Body Spiritual Connections, LLC
Data Protection Officer
209 W. Central Street Suite 121
Natick, MA 01760 United States

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

According to the laws of your country or state of residence in the US, you have the right to request access to the personal information we collect from you. You can also inquire about how we process this information, correct any inaccuracies, or request to delete your personal information. Additionally, you have the right to withdraw your consent so that we can process your personal information. Please note that applicable law may limit these rights in certain circumstances. If you want to review, update, or delete your personal information, please complete and submit a data subject access request.