Privacy Policy

Thank you for visiting Ancestral Healing Center (“we,” “our,” “us”).
We are committed to protecting your privacy and ensuring that your personal information is handled responsibly, transparently, and in compliance with global privacy standards, including:

  • GDPR (UK & EU)

  • CCPA/CPRA (California)

  • PIPEDA (Canada)

  • Other applicable international privacy laws

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have regarding your data.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide

  • Name

  • Email address

  • Telephone number

  • Billing and payment information

  • Questionnaire and form responses

  • Information shared when booking sessions, courses, or downloads

  • Messages submitted through our contact form

1.2 Automatically Collected Information

When you visit our site, we may automatically collect:

  • IP address

  • Browser type

  • Device information

  • Cookies and tracking technologies

  • Pages viewed and time spent on site

  • Referring websites

1.3 Sensitive Information

If you submit information regarding your personal history, emotional experiences, or wellness journey through forms or coaching inquiry pages, we treat this as sensitive personal information and protect it with elevated security standards.

We do NOT collect or store clinical diagnostic information or medical records.

2. How We Use Your Information

We use your information to:

  • Provide website access and functionality

  • Send newsletters, updates, and educational content

  • Process purchases, bookings, and payments

  • Deliver courses, downloads, workshops, and client services

  • Respond to messages and inquiries

  • Analyze website performance and improve user experience

  • Ensure legal compliance and prevent misuse

We only process personal data when we have a lawful basis, including:

  • Consent (email opt-in, contact forms)

  • Contractual necessity (providing purchased services)

  • Legitimate interests (site analytics, improvement)

  • Legal obligations (fraud prevention, tax compliance)

3. Legal Bases Under UK/EU GDPR

We rely on the following legal bases:

  • Consent – you opt in to receive emails or submit forms

  • Performance of a contract – when you purchase or book a service

  • Legitimate interests – for analytics, customer service, internal reporting

  • Legal compliance – financial, tax, and regulatory obligations

4. Your Rights (UK, EU, and Worldwide)

Depending on your location, you may have the following rights:

  • Right to access your data

  • Right to correction of inaccurate data

  • Right to deletion (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object to certain processing

  • Right to withdraw consent at any time

  • Right to lodge a complaint with your data protection authority

If you wish to exercise any of these rights, email:
ruschellekhanna@gmail.com

5. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect

  • Request deletion of your personal information

  • Request correction of inaccurate personal information

  • Opt out of the sale or sharing of personal data

  • Limit use of sensitive personal information

  • Not be discriminated against for exercising your rights

We do not sell or share personal information for cross-context behavioral advertising.

To submit a request, contact us at:
ruschellekhanna@gmail.com

6. Cookies and Tracking Technologies

We use cookies to:

  • Remember user preferences

  • Improve site performance

  • Analyze traffic

  • Support marketing campaigns

You may control cookies through your browser settings or through our cookie banner (if enabled).

7. How We Store and Protect Your Data

We use industry-standard administrative, technical, and physical safeguards, including:

  • Encrypted storage systems

  • Secure hosting environments

  • Access controls

  • Routine monitoring for vulnerabilities

However, no online system can guarantee absolute security.

8. Third-Party Services

We may share limited data with trusted third-party partners who support our services, including:

  • Payment processors (e.g., Stripe, PayPal)

  • Email service providers (e.g., Mailchimp, ConvertKit)

  • Website hosting platforms (WordPress, Squarespace, etc.)

  • Analytics tools (Google Analytics)

These partners are contractually obligated to maintain privacy and data protection standards.

We do not sell or rent personal information.

9. International Data Transfers

If you access our website from outside the United States, your data may be processed in the U.S. or other countries where our service providers operate.
We use:

  • Standard Contractual Clauses (SCCs)

  • Data Processing Agreements (DPAs)

to ensure compliance with UK/EU GDPR international transfer requirements.

10. Retention of Data

We keep your information only for as long as necessary to:

  • Provide services

  • Comply with legal obligations

  • Resolve disputes

  • Support business operations

You may request deletion at any time.

11. Children's Privacy

Our website and services are not intended for children under 16.
We do not knowingly collect information from minors.

If you believe a child has submitted personal data, contact us and we will delete it.

12. Changes to This Privacy Policy

We may update this policy periodically.
Changes will be posted on this page with an updated date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact:

Back