Privacy Policy

About This Policy

This Privacy Policy explains how Palo Santo Holistic Care, LLC, doing business as Copper Holistic Care and Copper Holistic Creations ("we," "us," or "our"), collects, uses, shares, and protects your personal information when you visit our website or use our services.

By using our site, you agree to the practices described in this policy. If you do not agree, please do not use our site. We reserve the right to update this policy at any time, and we will notify you of significant changes by posting the updated policy on this page and, where required by law, by email.

Who We Are

We are a holistic healing business based in Tucson, Arizona, USA. We offer Reiki sessions, crystal products, spell jars, and related digital content. For privacy-related inquiries, contact us at [email protected] with the subject line: Privacy Policy Support.

What Information We Collect

Information You Give Us

When you place an order, book a session, subscribe to our newsletter, or contact us, we may collect:

• Name and email address
• Mailing address and phone number
• Payment information (processed securely through Stripe — we never store your card details)
• Session intake information, including any personal or health-related details you voluntarily share

Information Collected Automatically

When you visit our site, we automatically collect certain technical data, including:

• IP address and browser type
• Pages visited and time spent on the site
• Referring website (where you came from)
• Cookie and tracking data (see Section 6 for details)

Why We Collect Your Information

We collect and use your information for the following purposes. Where required by law (including GDPR for visitors from the EU or UK), we process your data only when we have a valid legal basis to do so.

To fulfill orders and deliver services

Legal basis: Contract performance. We use your name, address, and payment information to process orders, book sessions, and communicate with you about your purchase.

To send you emails you've signed up for

Legal basis: Consent (for marketing emails) / Contract (for transactional emails like order confirmations). You can unsubscribe from marketing emails at any time via the link in any email we send.

To improve our site and services

Legal basis: Legitimate interest. We use aggregated, anonymous analytics data to understand how people use our site and to make it better.

To comply with legal obligations

Legal basis: Legal obligation. We may retain certain records as required by applicable law.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

Payment Processing

All payments are processed by Stripe, a PCI-DSS-compliant third-party payment processor. We never see, store, or have access to your full credit card number. By completing a purchase, you are also subject to Stripe's Privacy Policy, available at stripe.com/privacy.

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only in these limited circumstances:

• Service providers who help us operate our business (e.g., website hosting through FG Funnels, video conferencing through Zoom, payment processing through Stripe). These parties are contractually required to keep your data confidential and may only use it to provide services on our behalf.
• Law enforcement or government authorities, if required by law or to protect the rights, safety, or property of Copper Holistic Care or others.
• In connection with a business transaction (e.g., a sale or merger), in which case the incoming party would be bound by this policy.

We may share non-identifying, aggregated data (such as overall site traffic numbers) for general business and marketing purposes.

Cookies & Tracking Technologies

We use cookies — small text files stored on your device — to help our site function properly and to understand how it's being used.

Strictly necessary cookies

These keep the site working. You can't opt out of these without breaking functionality.

Analytics cookies (Google Analytics)

These help us understand which pages are popular and how visitors move through the site. Google may use the DART cookie to serve ads based on your visits to our site and others. You can opt out by visiting Google's Ads Settings.

Preference cookies

These remember your settings for future visits (e.g., language or display preferences).

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of some parts of the site.

We honor Do Not Track (DNT) signals sent by your browser. We do not allow third-party behavioral tracking.

If you are visiting from the EU or UK: when you first arrive on our site, you will be presented with a cookie consent banner. You have the right to accept or decline non-essential cookies. Only strictly necessary cookies will be set without your consent.

How Long We Keep Your Data

We keep your personal information only as long as necessary to fulfill the purposes described in this policy, or as required by law.

• Order and transaction records: up to 7 years, as required for tax and accounting purposes.
• Marketing email records: until you unsubscribe or ask us to delete them.
• Session intake information: retained for the duration of your client relationship and up to 3 years after your last session, unless you request deletion sooner.
• Website analytics data: retained in aggregated, anonymized form.

Your Privacy Rights

Depending on where you live, you may have certain rights over your personal information. We honor these rights for all users, regardless of location.

Access your data

Email [email protected] with the subject line: I would like to see my data. We will respond within 72 hours.

Delete your data

Email [email protected] with the subject line: Please delete my data. We will confirm deletion within 72 hours. Note: some data may need to be retained for legal or contractual reasons.

Correct your data

If your information is inaccurate, you can update it by logging into your account or contacting us directly.

Withdraw consent

If we are processing your data based on consent (e.g., marketing emails), you can withdraw that consent at any time by unsubscribing or contacting us.

Object to or restrict processing

You can ask us to stop or limit processing your data in certain circumstances.

Data portability

You can request that we provide your data in a portable format.

Lodge a complaint

If you are in the EU or UK, you have the right to lodge a complaint with your local data protection authority. In the US, you may contact your state attorney general's office.

California residents: Under the CCPA and CPRA, you have the right to know what personal data we collect, to opt out of the sale of your data (we don't sell it), and to non-discrimination for exercising your rights. Contact us at [email protected].

Canada (PIPEDA): Canadian residents have the right to access their personal information and challenge its accuracy. Contact us at [email protected].

International Data Transfers

Our website and service providers are primarily based in the United States. If you are visiting from the EU, UK, Canada, or another country, your information will be transferred to and processed in the US, where data protection laws may differ from your home country.

Where required by law (such as under GDPR), we rely on appropriate safeguards for international transfers, including standard contractual clauses and the data processing agreements we have with our service providers (FG Funnels, Zoom, Stripe, and Google).

Children's Privacy

Our site is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us at [email protected] and we will delete it promptly.

Security

We take reasonable technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption on our website
• Secure, access-controlled storage of personal data
• Regular malware scanning
• Payment processing through PCI-DSS-compliant Stripe (we never handle raw card data)

No method of transmission over the internet is 100% secure. If a data breach occurs that is likely to affect your rights, we will notify you by email and through a notice on our site within 72 hours, as required by applicable law.

Please note: if we communicate with you by phone or video platform (such as Zoom), we cannot guarantee the confidentiality of those communications.

Third-Party Links & Services

Our site may include links to third-party websites. These sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policies of any site you visit.

Third-party services we use include:

• FG Funnels — website and CRM platform
• Stripe — payment processing (stripe.com/privacy)
• Zoom — video sessions
• Google Analytics — site analytics

Commercial Email Compliance

In accordance with the CAN-SPAM Act (US), we commit to the following:

• We will not use false or misleading subject lines or sender information.
• Marketing emails will be clearly identified as promotional.
• Every marketing email includes an easy, one-click unsubscribe link.
• We honor unsubscribe requests promptly.

To stop receiving marketing emails from us, click the unsubscribe link in any email or contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify registered users by email.

Your continued use of our site after any update constitutes acceptance of the revised policy.

Contact Us

Questions, requests, or concerns about this Privacy Policy? We'd love to hear from you.