Privacy Policy
Effective Date: 6/13/24
1. Introduction
Welcome to Empowerment Mentoring ("we," "our," "us"). This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website, Adriajellum.com, or use our services, including 1-on-1 mentoring sessions, personal coaching, and in-person and online Reiki healing sessions.
2. Company Information
-
Company Name: Empowerment Mentoring
-
Contact Email: adriajellum@gmail.com
3. Information We Collect
Personal Data: We may collect the following types of personal data:
-
Name
-
Email address
-
Phone number
-
Passwords
-
Physical address/location
-
Billing address
-
Credit/debit card information and other payment information
Usage Data: We may collect the following usage data:
-
IP addresses
-
Browser types
-
Device types
4. Methods of Data Collection
We collect data through various methods, including:
-
Contact forms
-
Newsletter opt-in pages
-
Billing pages
-
Cookies and tracking technologies
-
Analytics tools
5. Purpose of Data Collection
We use the collected data for various purposes, such as:
-
Improving and personalizing user experience
-
Offering promotions
-
Contacting users
-
Sending newsletters
-
Fulfilling orders
6. Data Storage and Security
We store your data securely in Wix.com's data storage, encrypted databases, and secure servers. We implement several security measures, including:
-
Data Encryption: AES-256 encryption for data storage and HTTPS, TLS 1.2+, and automatic SSL for data in transit.
-
Security by Design: Security considerations are integrated into the design phases of our platform.
-
Security Boundaries: Default security boundaries are added to reduce vulnerabilities.
-
Other Security Measures: Web application firewall (WAF), password hashing and salting, two-factor authentication, and Content Security Policy (CSP) to prevent specific attacks like Cross-Site Scripting (XSS) and data injection.
7. Data Sharing
We may share your data with third parties in specific situations, such as:
-
Legal Requests: Compliance with subpoenas, court orders, or legal proceedings.
-
Terms of Use Enforcement: Enforcement of our Terms of Use and other agreements.
-
Protection: Protecting the rights, property, or safety of our customers and others.
-
Partners: Tailoring offers, ads, and content to user preferences. Note that we do not sell or share personal information for monetary compensation.
8. User Rights
European Union (EU)
The General Data Protection Regulation (GDPR) is the cornerstone of data privacy in the EU. It grants the following rights:
-
Right to Access: Users can request access to their personal data held by organizations.
-
Right to Rectification: Users can ask for corrections to inaccurate or incomplete data.
-
Right to Erasure (Right to be Forgotten): Users can request the deletion of their data.
-
Right to Restrict Processing: Users can request limitations on the processing of their data.
-
Right to Data Portability: Users can request their data in a format that allows transfer to another service.
-
Right to Object: Users can object to data processing for specific purposes, like marketing.
-
Automated Decision-Making and Profiling: Users have the right not to be subject to decisions based solely on automated processing.
United States (US)
The US lacks a comprehensive federal data privacy law but has several state-level laws:
-
California Consumer Privacy Act (CCPA): Provides rights similar to GDPR, including the right to access, delete, and opt-out of the sale of personal data.
-
Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Utah Consumer Privacy Act (UCPA), and Connecticut Data Privacy Act (CTDPA): These laws provide rights to access, correct, delete, and opt-out of data processing and sales, mirroring many GDPR principles.
-
State-Specific Laws: Montana, Tennessee, and Oregon have enacted their own data privacy laws with varying scopes and requirements.
Canada
Canada's data privacy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA), which grants:
-
Right to Know: Users can know why and how their data is collected.
-
Right to Access: Users can request access to their personal data.
-
Right to Correct: Users can correct inaccuracies in their data.
-
Right to Withdraw Consent: Users can withdraw consent for data processing at any time.
United Kingdom (UK)
Post-Brexit, the UK has adopted the Data Protection Act 2018, incorporating GDPR principles:
-
Similar Rights as GDPR: Access, rectification, erasure, data portability, and objection to processing.
Australia
The Privacy Act 1988 and the Australian Privacy Principles (APPs) grant rights such as:
-
Right to Access: Users can request access to their personal information.
-
Right to Correct: Users can correct their personal information.
-
Right to Anonymity: Users can choose not to identify themselves when dealing with an organization.
For more information regarding your specific country's user rights, refer to:
-
DLA Piper's Data Protection Laws of the World: Provides a detailed map and summary of data protection laws in different countries.
-
International Association of Privacy Professionals (IAPP): Offers a comprehensive overview of global data protection laws and resources for various countries.
Steps to Exercise User Rights:
-
Identify the Right: Determine which right you want to exercise (access, correction, deletion, etc.).
-
Locate the Mechanism: Find the appropriate form, email address, or account setting.
-
Submit a Request: Complete the necessary form or send an email specifying your request. Include necessary details to verify your identity.
-
Follow Up: If you do not receive a response within the timeframe specified by the privacy policy or the relevant law, follow up with us via the contact form or at adriajellum@gmail.com
9. Cookies
Specific information about cookies can be obtained from this website's cookie notice page.
10. Data Retention
We retain your data only as long as necessary to fulfill the purposes outlined in this privacy policy. When we no longer have a legitimate business need to process your information, we will delete or anonymize the data.
11. Changes to This Privacy Policy
This privacy policy may be updated over time. The updated version will be indicated by an updated "Effective Date" and will be effective as soon as it is accessible. If there is an urgent material update, we will prominently post a notice or directly notify users. We encourage you to frequently review this policy to stay informed on how we protect your information.
12. Children's Privacy
We do not knowingly collect or solicit information from minors under the age of 18. By using our services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to their use of the services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and promptly delete such data. If you become aware of any data we may have collected from children under 18, please contact us at adriajellum@gmail.com.
13. Contact Us
If you have any questions or concerns about this privacy policy, please contact us at adriajellum@gmail.com.