Version: PRIVACY POLICY _GDPR July 7, 2022
About Us
ROOT CAUSE BREATHWORK “We” are a COMPANY at 2601 OAKDALE ROAD, SUITE H2 PMB 401 MODESTO, CA 95355 operates the website at www.rootcausebreathwork.com and provides the service of breathwork sessions virtually and in person when scheduled and agreed upon “services”. We are committed to providing quality services to you and in the course of providing you with our services we will collect and process information that is commonly known as “Personal Data”.
The Purpose of this policy
This Privacy Policy does the following:
- Describes how we collect, use, share, retain and safeguard Personal Data,
- Policy sets out your individual rights; we explain these later in the Policy but in summary these rights include your right to know what data is held about you, how this data is processed and how you can place restrictions on the use of your data,
- outlines our ongoing obligations to you in respect of how we manage your Personal Data, and
- explains what kind of information we collect in connection with our services, the purposes for which we use the information and how we may share this information.
This Policy applies when you may share personal data in contact with us via our website, online forms,
email, social media accounts, the telephone, when writing to us directly or where we provide you with
paper-based forms for completion or we complete a form in conjunction with you.
To provide a high standard to our client's personal data and privacy, we adopted and aim to comply with
the Privacy Act 1988 (Cth, Australia).
the Privacy Act 1993 (New Zealand).
the Personal Data Protection and Electronic Documents Act, SC 2000, c5 (federal, Canada).
the Personal Data Protection Act (Alberta, Canada).
the Personal Data Protection Act (British Columbia, Canada).
all applicable United States federal and state privacy laws, including, but not limited to, the California
Online Privacy Protection Act (CalOPPA), Early Learning Personal Data Protection Act (ELPIPA).
the General Data Protection Regulation (EU).
the Data Protection Act 2018 (UK).
Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais) (Law No. 13,709/2018)
("LGPD").
any other applicable privacy legislation (collectively the “Data Acts”).
The Data Acts govern the way that we collect, use, disclose, store, secure and dispose of your Personal
Data. A copy of the Data Acts may be seen at the URLs linked with each Data Act.
A data ’controller’ means the individual or organization which, alone or jointly with others, determines
the purposes and means of the processing of personal data.
A data ‘processor’ means the individual or organization which processes personal data on behalf of the
controller.
We are the controller of any personal data gathered by your use of our website and services. Where we
use third parties to process your data. We have a contract with these third parties for the provision of
these services.
ROOT CAUSE BREATHWORK is identified as the named territory where the processing of personal data
takes place.
You can learn more about your privacy rights at the LOCAL Information Commissioner Office at URL.
What is Personal Data?
Personal Data is information relating to an identified or identifiable natural person. Examples include an
individual’s name, age, address, date of birth, gender, and contact details.
Sensitive Personal Data may contain information which is known as special categories of personal data.
This may be information relating to and not limited to, an individual’s health, racial or ethnic origin,
political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric
data, or data relating to sexual orientation.
We are legally required to comply with specific data processing requirements for Personal and Sensitive
Data.
What Personal Data is collected by Us?
As a provider of TYPE services, we will process the following categories of data:
(a) Personal Data:
- Your name,
- Contact details including address, email, telephone,
- Date of birth,
- Gender.
(a) Sensitive Personal Data:
- Current health and details of historic injuries or illnesses (physical and psychological),
- Photographs, audio and visual,
- Associations, beliefs, and memberships,
- Aspects of your health that may affect your participation or our provision of services to you.
If you object to the collection, sharing and use of your personal data we may be unable to provide you with our services.
ADULT ONLY SERVICES: We do not knowingly accept information or attendance of anyone under the age of 18 years old.
MINORS IN SERVICES: If you are under 18 years of age you will need your parent or guardian to agree to this Privacy Policy and terms for you. They are responsible to ensure that you fully understand what you are sharing with us and why.
Why do we collect your Personal Data?
Our Services
We will collect your Personal Data where you request information about our services, via our website,
provide information in communications with us via in person, telephone, texts, social media, events,
promotions, campaigns, from cookies and third parties. We may collect information about your visits to
us to help us personalize your experience with us. By providing this information to us you are consenting
our use in the manner set out in this Policy.
Our primary purpose for collecting and processing this Personal Data about you is to provide and
administer our services to you, our clients and marketing. If you object to the collection, sharing and use
of your personal data we may be unable to provide you with our services.
When we collect Personal Data, we will, where appropriate and where possible, explain to you why we are collecting the information and how we plan to use it. Please ask if you do not understand.
Third Party Suppliers
Where reasonable and practicable to do so, we will collect your Personal Data only from you. However, in some circumstances we may be provided with information by third parties. We may use third party suppliers for management of specific services e.g., payment processing, and they may store some of your Personal Data to provide such service to you. In such a case we will take reasonable steps to ensure that you are made aware of the information provided to us by the third party or that you can access your account to check this information directly yourself.
We use third party software to securely store your data to perform specific functions to support our services (“third party suppliers”). Third party suppliers have access to personal information needed to perform their functions but may not use it for other purposes. Their privacy policy is linked below as to how they handle data as part of the service we use. With all the third-party suppliers you can ask us to review your stored data to ensure that it is accurate and best serves you.
We do not sell or pass your personal information onto third parties.
Data Management
We use the following third-party providers for our service to you. Their privacy policy is linked within as to how they handle data as part of the service we use. With all the below suppliers you can ask us to review your stored data to ensure that it is accurate and best serves you.
Client Notes and Classes
At Root Cause Breathwork, we take and keep notes on paper that contain Personal Data and may include Sensitive Data during your appointments. Paper notes that are stored at the Practitioner’s physical location for use during series of ten (or more) session clientele to give the breathwork process space to grow along with the client and to ensure that they are safe and secure. A copy of these notes can be requested and mailed to the client, by the client in WRITING by sending a hand-written signature signed letter to ROOT CAUSE BREATHWORK 2601 OAKDALE ROAD, SUITE H2 PMB 401 MODESTO, CA 95355 via mail. These notes mostly contain affirmations to help heal what ever arises during sessions to be used by the client as homework in between session.
Classes are recorded for training purposes only and will not be shared with others. This is to improve upon services being provided to ensure ROOT CAUSE BREATHWORK is providing the best possible service in an ongoing capacity, virtual and/or live.
All electronic files (if stored) are encrypted, and password protected for security. Storage of these notes and files is a legal requirement by our insurer, www.abmp.com .
Online storage of files is provided by Security Socket Layer. They secure the data sent between client and server using encryption which prevents eavesdropping from outsiders. These processors may use your personal data for security reasons if you wish to access them. We do not keep further records in these services.
Bookings
We use CALENDLY SOFTWARE to manage our client bookings. This software requires you complete the following information to book your breathwork session package and/or consultation:
- Name
- Payment Information
- Anything that will help ROOT CAUSE BREATHWORK AND CLIENT prepare for upcoming sessions
You may update the details in CALENDLY at any time by logging into the account or emailing us.
Cancellations
Life happens, I get that, so you may need to cancel your session.
I know your time is valuable, and as a small practice, so is mine. When you book your appointment, you hold a space in my calendar that is no longer available to my other clients.
To be respectful of my other clients, please contact me as soon as possible if you know that you cannot make your appointment. If cancellation is necessary, then your advanced notice gives other clients the opportunity to book.
To cancel or reschedule your appointment please go to the portal at www.rootcausebreathwork.com
To be completely transparent with you, I encourage a ‘no cancellation mindset’ to inspire and motivate you to show up to receive the changes that digging down to the root cause can provide.
I suggest you reschedule rather than cancel.
Any request to reschedule or cancel will be subject to the below charges:
(I) Less than 24 hours’ notice before the appointment is 100% charged. The credit cannot be
used for another appointment. This is considered a ‘late cancel’ and there is no refund. This
also applies for any no shows.
(II) Over 24 hours before the appointment I will provide a credit to reschedule the appointment
to be used within 7 days of the original booking date.
If for some reason you are unable to attend all of your appointments purchased for a 3-month period or more please contact us at angelasmith@rootcausebreathwork.com to see if there are options available to extend your Service or provide an alternative solution.
If for some reason Root Cause Breathwork must cancel your session with you, your credit will be transferred to another session.
Payment Online
If you pay using an online transaction such as credit card, we use Stripe. This third-party payment facilitator is PCI DSS v 3.2.1 compliant to ensure your financial data is secure and we can never access your full payment details.
Marketing
We may promote our services to you using the information you provide to us, including email or text. If you wish to receive promotional offers, please opt in by following the listed steps to sign up for marketing communications via www.rootcausebreathwork.com website, subscriber emails and newsletters.
MAILING LIST: If you opt in to receive our emails, SMS, social media you will receive FREQUENCY, CONTENT, from us. You can unsubscribe from this at any time from within one of these emails or by contacting us at EMAIL. Our email host www.namecheap.com and our messaging supplier, www.convertkit.com , may store information that you have submitted.
SOCIAL MEDIA: If you follow us on any social media platforms, your privacy settings in your social media account control what you share with others. Please be aware that our settings are set to ‘Public’ where you leave reviews, comments and we will tag you where appropriate as part of our Page and in our groups the settings are to ‘WHAT’. Please check this if you are concerned about your privacy on any social media platform. Please let us know if you do not wish to be tagged in any of our posts.
Website
Our website is hosted by DigitalOcean.com servers and the name, ROOT CAUSE BREATHWORK is REGISTERED with Namecheap as a Registrar who also happens to provide hosting services which we do not currently partake in. As previously stated, our website is hosted by Digital Ocean. Digital Ocean uses cookies to provide the website and ensure necessary function of our services. To learn more about the cookies on our website, please read our Cookie Policy here. Cookies include collection of your unique online electronic identifier; this is commonly known as an IP address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.
If you contact us via our website, you may provide us with personal data when completing online contact forms. This form is hosted by Formspree.com
Links to other websites
Our services may include links to third party websites. When you click on this link you have left our website and services. We do not have control over what cookies or beacons or other technology these sites may use to track activity into their website, and do not have control over what data they may collect or their privacy policy. Use of their websites and clicking on those links is at your sole risk. We are not responsible for the protection and privacy of any information that you provide whilst visiting such sites and these sites are not governed by this Privacy Policy. We suggest that you read their privacy statement before using the website.
We do not provide any personally identifiable customer information to these sites.
Data Retention/Disclosure of Data
We may release personal data where we believe that it is appropriate in a few circumstances, including
the following:
a) Third parties where you consent to the use or disclosure.
b) Where required or authorized by law.
c) To enforce or apply our agreements with you.
d) To protect the rights, property or safety of us, our clients, or others; and
e) With your consent following specific notice or request from us.
This includes fraud protection, but not selling, sharing, or otherwise disclosing personally identifiable
information from clients for commercial purposes in a way that is contrary to this Privacy Policy.
VIDEOS OF CLIENTS: We may store videos and audio files for longer where relevant for business development, and where required by law as proof and validity of online business at ROOT CAUSE BREATHWORK and its BREATHWORK SERVICES.
Security of personal Data
Your Personal Data is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification, or disclosure. We do this using STATE SECURITY SETTINGS.
Duration Period
These digital files are stored for proof of business online in tax reporting and insurance compliance matters for up to three calendar years after which data is destroyed.
If you have received Services/Products with us we will store your data for up to three years from your last appointment/purchase with us (“Duration Period”), as required by our insurers and in compliance with local, state, and federal tax laws for any potential claims and/or audits.
When your Personal Data is no longer needed for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your Personal Data. However, most of the Personal Data will be stored in client files which will be kept by us for the Duration Period.
Your Rights as International Customers Services By this United States Practitioner
You have legal rights about your personal data. You grant use of your data under the contract and terms herein through your active conduct and use of our services. At any time, you have the right to know what personal data relates to you that is held by us, for what purpose, how it is collected and used, with whom it is shared, where it is located, to object to its processing, to have the data corrected if inaccurate, to take copies of the data and to place restrictions on its processing. You can also request the deletion of their personal data, but this may be denied on the exception for the establishment, exercise, or defense of legal claims. Please see the Information Commissioners Office in Europe guidance on this exception: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the- general-data-protection-regulation-gdpr/individual-rights/right-to- erasure/#:~:text=The%20GDPR%20introduces%20a%20right,erasure%20verbally%20or%20in%20writing .&text=The%20right%20is%20not%20absolute%20and%20only%20applies%20in%20certain%20circumst ances.com
You may request the following at any time about your data held by us with regards to the services that
we provide:
a) The right to be informed about the personal data being processed
b) The right to rectification of your personal data
c) The right to erasure of your personal data
d) The right to restrict processing of your personal data
e) The right to data portability (to receive an electronic copy of your personal data)
f) The right to object to the processing of your personal data
g) The right to access your personal data
You may request a copy of all data that we store about for a $18.00 administration fee at www.rootcausebreathwork.com . In order to protect your Personal Data, we may require identification from you before releasing the requested information via WRITTEN REQUEST VIA US MAIL TO 2601 OAKDALE ROAD, SUITE H2 PMB 401 MODESTO, CA 95355. Repeated, unfounded or excessive requests may be challenged by us.
There are some limited circumstances that may limit the information that we can provide to you in a request, for example, public interest, law enforcement, legal and or health related matters.
Please also bear in mind that we rely on third parties for some of your information in the flow of data. It may take us the full calendar month permitted to provide a full response to your request.
If you require further information on your Individual Rights or wish to exercise your Individual Rights, please state so in the “contact us” form found at www.rootcausebreathwork.com .
Maintaining the Quality of your Personal Data
It is important to us that your Personal Data is up to date. We will take reasonable steps to make sure that your Personal Data is accurate, complete, and up to date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services to you.
International Transfers of Personal Data
DO TRANSFER: We transfer your data outside the European Economic Area/home country to fulfil our services to you. We do so to those third-party processors as stated in accordance with this Privacy Policy and to comply with Data Acts.
Any third parties used outside of Europe/Country to help our administration of your data are required to safeguard your personal data through the use of appropriate technical and organization data security measures and are prohibited from disclosing or sharing your data with other third parties without our prior authorization, or unless as required by law.
Please use the “contact us” form at www.rootcausebreathwork.com for further information on the measures undertaken to safeguard your data.
Policy Updates
We reserve the right to update and amend this Privacy Policy at any time, effective upon posting an updated version on the Website.
We will publish such updates on our website and may email notifications to you. Continued use of the Website after any such changes shall constitute your consent to such changes.
Enquiries and Complaints
If you have any queries or complaints about our Privacy Policy, please contact us first at:
ROOT CAUSE BREATHWORK
2601 OAKDALE ROAD, SUITE H2 PMB 401
MODESTO, CA 95355
www.rootcausebreathwork.com
If you are dissatisfied with how our Data Privacy Representative handles your matter you have the right
to complain to the local data protection supervisory authority, the LOCAL Information Commissioner.
They may be contacted via its website which is URL.
Version: July 7, 2022