Saprea > Privacy Policy
Saprea (“we”, “us”, or “our”) is dedicated to protecting the privacy of your personal data. We have created this Privacy Policy to explain what personal data we collect from visitors to saprea.org and any related websites (the “Sites”), participants of Saprea retreats, healing webinars, and support groups, and users of any other technologies, features, mobile applications, content, and other services we offer (collectively, the “Services”); how we use that information; and how we share it with others. We encourage you to read this Privacy Policy and reach out to us using the contact methods at the end of the Privacy Policy if you have any questions. This Privacy Policy incorporates the Terms of Use found on our Sites.
This Privacy Policy does not apply to third-party websites, products, or services, even if they may link to our website or if our site links to them. We recommend that you review the privacy practices of those third parties before connecting accessing third party websites and sharing any personal data.
We may collect, store, and use information that is linked or reasonably linkable to you and that identifies your past, present, or future health status or mental health status, as may be applicable (“consumer health data”). If you are a resident of Connecticut, Nevada, or Washington, we provide further information about consumer health data collected about you, as well as the rights you may have related to this data, in our Consumer Health Data Privacy Notice.
If you are a visually-impaired customer, a customer who has another disability or a customer who seeks support in other language, you may access this Privacy Policy by emailing us at questions@saprea.org.
1. Collection and Use of Personal Data
For the purposes of this Privacy Policy, “personal data” means individually identifiable information about an individual consumer collected online by the operator and maintained by the operator in an accessible form. Personal data does not include “aggregate,” “anonymized,” “de-identified,” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, service, or users that is not personally identifiable or from which individual identities are removed.
We may collect the following personal data about you via our Sites:
| Category of Personal Data | Processing Purposes | Categories of Third-Party Recipients (excluding our service providers and processors) |
|---|---|---|
Identifiers, including:
|
|
Third party advertising platforms |
Commercial information, including:
|
Same purposes as noted for “Identifiers” | Third party advertising platforms |
Financial information, including:
|
|
N/A |
Internet or other electronic network activity information, including:
|
Same purposes as noted for “Identifiers” | Third party advertising platforms |
Geolocation Data, including:
|
Same purposes as noted for “Identifiers” | Third party advertising platforms |
Audio, electronic, visual, or similar information, including:
|
Same purposes as noted for “Identifiers” | N/A |
Professional or employment-related information, including:
|
|
Third party advertising platforms |
Characteristics of protected classifications, including:
|
|
N/A |
Sensitive data, including:
(Residents of Connecticut, Nevada, and Washington should review our Consumer Health Data Privacy Policy for more information.) |
|
N/A |
| Inferences about you using any of the above | Any of the above purposes | Third party advertising platforms |
2. Sources of Personal Data
A. Personal Data You Provide Us
We may ask you to provide us with certain information on our Sites when you contact us, sign up for our promotional emails, or otherwise interact with us.
If you apply to participate in or participate in participate in a Saprea retreat, webinar, or support group, we may collect your name, physical address, email address, telephone number, date of birth, account username and password. We may also collect, store, and use personal data that is linked or reasonably linkable to you and that identifies your past, present, or future health status or mental health status, as may be applicable (“consumer health data”). If you are a resident of Connecticut, Nevada, or Washington, we provide information about consumer health data collected about you, as well as the rights you may have related to this data, in our Consumer Health Data Privacy Notice.
If you make a purchase on our Sites, we may collect your name, physical address, billing address, email address, telephone number, and payment information such as your credit or debit card number (via Shopify, our third-party payment processor) and any other personal data that you choose to share with us on our Sites.
If you make a donation, we may collect your first and last name, email address, phone number, donation amount, and payment information such as your credit or debit card number. We may also collect your employer’s name or information if your employer is matching your donation.
Industry surveys. From time to time, we may administer industry surveys aligned with our mission. If you participate in these surveys, we may collect information including your IP address, location data, and the specific survey responses that you provide. As part of these activities, we may create aggregated, de-identified, or other anonymized data from survey response data so that the information may no longer be used to identify you. We may use and make aggregated, de-identified, or other anonymized data available to third parties as described in the survey and in accordance with applicable law. We encourage you to closely review the disclosures that we provide in connection with specific surveys that are administered by Saprea. Aggregated, de-identified, and anonymized data is not considered personal data and is not subject to this Privacy Policy.
B. Personal Data Collected Automatically
Our Sites may use cookies and other tracking technologies such as web beacons, embedded scripts, and tags, which collect information from you automatically as you use our Sites, including:
- Browser and device data. When you use our Sites, we may automatically collect information such as IP address, device identifier, device type, operating system and Internet browser type, screen resolution, operating system name and version, device manufacturer and model, language, plug-ins, add-ons, and the language version of the Sites you are visiting.
- Usage data. When you use our Sites, we may automatically collect information such as browsing history, time spent on the Sites, pages visited, links clicked, language preferences, patterns of use, and the pages that led or referred you to our Site. We also collect information about your online activities on websites and connected devices over time and across third-party websites, devices, apps, and other online features and services. Please review the Cookies and Tracking Technologies section below for more information about our use of these technologies.
C. Personal Data We Collect From Others
- Service providers. We may collect personal data from our service providers, including communications and analytics providers.
- Social media and other content platforms. We may collect personal data from platforms such as Meta, X, and YouTube, if you interact with us on these platforms.
- Other individuals. We may collect personal data about you from our team of licensed therapists, case managers, if you participate in a Saprea retreat, webinar, or support group.
3. Disclosure of Personal Data
We may disclose personal data to the following categories of third parties:
- Our partners. We may disclose your personal data to our business partners to offer you certain services and resources, including retreats, webinars, and support groups.
- Service providers. We may disclose personal data to our service providers to provide services on our behalf, such as payment processing, analytics, advertising, hosting, marketing, customer and technical support, and other services.
- Advertising platforms. We may disclose your personal data to third-party platform providers who assist us in serving advertising regarding to others who may be interested. We also partner with third parties who use cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location, and/or interests.
- Compliance and harm prevention. Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities.
- Business transfers and transactions. If we are involved in a merger, acquisition, asset sale, or other corporate combination, your personal data may be transferred to the acquiring or surviving entity.
We may create and disclose non-personal data, such as aggregated, de-identified, and anonymized data, to third parties in accordance with applicable law. Our use of aggregated, de-identified, and anonymized data is not subject to this Privacy Policy.
4. Cookie and Tracking Technologies
We use cookies and similar tracking technologies to track the activity on the Service and we hold certain information. Cookies are files with a small amount of data which may include unique identifier. Cookies are sent to your browser from a website and stored on your device. We also use other tracking technologies, such as beacons, tags and scripts to collect and track information and to improve and analyze our Sites.
A. Cookies
Cookies on the Sites generally fall into the following categories:
- Strictly Necessary Cookies: These are required for the operation of the Sites. They include, for example, cookies that enable you to log into secure areas. These cookies are session cookies which are erased when you close your browser.
- Performance Cookies: These allow us to recognize and count the number of users of the Sites and see how such users navigate through the Sites. This helps improve how the Sites work, for example, by ensuring that users can find what they are looking for easily. These cookies are session cookies which are erased when you close your browser.
- Functional Cookies: These improve the functional performance of the Sites and make it easier for you to use. For example, cookies are used to remember that you have previously visited the Sites and asked to remain logged into it. These cookies are session cookies which are erased when you close your browser.
- Advertising Cookies: These record your visit to the Sites, the pages you visit and the links you follow so we can recognize you and track your activity on the Sites and other websites you visit. These cookies are persistent cookies because they remain on your device for us to use during your next visit to the Sites. You can delete these cookies via your browser settings.
You can modify your browser settings to decline or accept cookies. If you decline cookies, some of our Sites’ features may not function as designed.
B. Third-Party Ad Networks
Certain companies may participate in the Digital Advertising Alliance ("DAA") AdChoices Program and may display an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise certain choices regarding targeting. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices.
In addition, certain advertising networks and exchanges may participate in the Network Advertising Initiative (“NAI”). NAI has developed a tool that allows consumers to opt out of certain Interest-based Ads delivered by NAI members' ad networks. You can learn more about opting out of such targeted advertising or to use the NAI tool here. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Ads, you will continue to receive non-targeted ads. Opting out of one or more NAI or DAA members only means that those selected members should no longer under the DAA / NAI rules deliver certain targeted ads to you. This will affect this and other services, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). If your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different device or web browser(s), or use a non-browser-based method of access (e.g., mobile app), your NAI/DAA browser-based opt-out may not, or may no longer, be effective. Mobile device opt-outs will not affect browser-based Interest-based Ads even on the same device, and you must opt-out separately for each device. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.
Please note that the Sites do not support Do Not Track functionality. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
5. Children's Data
Our Services are not intended for children. We do not knowingly collect any personal data from children under the age of 18. If you think that your child provided this kind of information on the Sites, we strongly encourage you to contact us immediately, and we will do our best efforts to promptly remove such information from our records.
6. Data Security and Retention
Your trust matters to us. We handle all personal data you share through our website, retreats, and services with the highest regard for privacy and security. We use industry-standard encryption, secure servers, and strict access controls to help prevent unauthorized access, disclosure, loss, or misuse of your information. While no method of transmission over the internet or electronic storage is 100% secure, we maintain robust technical, administrative, and physical safeguards to protect your data and regularly review and update these measures as needed. We also encourage you to use a strong, private password and to take care in safeguarding your own account information. We retain personal data only as long as necessary to fulfill our mission and meet legal obligations.
We will retain your personal data for as long as necessary for the purposes outlined in this Privacy Policy. This information will be used and retained to the extent necessary to comply with any legal obligations or policies, to resolve disputes, and/or enforce legal agreements. Personal data may also be retained for internal analytic purposes. This information is retained for a shorter period of time, unless it used to enhance security features or improve the functionality of our Sites. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you (such as whether you are a current employee or contractor) (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.
7. Transfers of Personal Data
Our Services are operated exclusively in the United States and intended for users located in the United States. We may transfer, store, and use information we collect and maintain about you, including personal data outside of your state, province, country, or other governmental jurisdiction. For such transfers, we take the necessary measures to ensure that your personal data receives an adequate level of protection. Please note that the data protection laws in the jurisdiction in which we process personal data may differ from those of your jurisdiction, and in certain circumstances, your personal data may be subject to access requests from governments, courts, law enforcement agencies or regulatory agencies in those other jurisdictions.
8. Opting Out of Promotional Emails and Newsletters
You may opt-out of any emails that we send for promotional purposes by clicking the “unsubscribe” links provided at the bottom of those emails. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required to provide you with our Sites or services or for other reasons disclosed in this Privacy Policy. You will continue to receive these emails, if appropriate, even if you unsubscribe from our optional communications.
9. Notice to Nevada Residents
We do not “sell” personal data as that term is defined under Nevada law, but Nevada residents have the right to request to opt out of any future sale of their personal data under Nevada SB 220. If you are a Nevada resident and would like to make such a request, please contact us using the contact information provided below. You must include your full name, email address, and postal address in your email or mail request so that we can verify your Nevada residence and respond. In the event we sell your personal data after the receipt of your request, we will make reasonable efforts to comply with such request.
10. Notice to Residents of Colorado, Delaware, Maryland, New Jersey, and Oregon
This Privacy Notice contains additional information for residents of Colorado, Delaware, Maryland, New Jersey, and Oregon about personal data that we collect, how we use it, what sources it is derived from, and who we disclose it to, and provides information regarding your rights, and our responsibilities, under applicable laws and regulations. This Notice does not apply to certain personal data that is already subject to certain federal and state regulations.
The provisions contained within this Notice are intended to provide disclosures in compliance with the Colorado Privacy Act, the Delaware Personal Data Privacy Act, the Maryland Online Data Privacy Act, the New Jersey Privacy Act, and the Oregon Consumer Data Privacy Act (collectively, the “State Privacy Laws”).
The State Privacy Laws provide or will provide rights to residents of Colorado, Delaware, Maryland, New Jersey, and Oregon to receive certain disclosures and access regarding collection, use, sale, and sharing of personal data.
A. Our Personal Data Practices
The State Privacy Laws provide rights to residents of those states, to receive certain disclosures and access regarding collection, use, sale, and sharing of personal data. Detail about what kinds of personal data we may collect or have collected, how we collect it, why we collect it, and who we may disclose it to is found in Sections 1 through 3 of this Privacy Policy.
We may “sell” personal data to third parties to participate in targeted advertising, as that term is defined by State Privacy Laws.
B. Your Privacy Rights
If you are a resident of Colorado, Delaware, Maryland, New Jersey, or Oregon, you have the following rights under applicable law in relation to your personal data, subject to certain exceptions:
- Right to know and access. You have the right to know what personal data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.
- Right to delete and erase. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the personal data that we collect about you.
- Right to correct inaccurate personal data. You have the right to request the correction of inaccurate personal data.
- Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.
- Right to opt out. You have the right to opt-out of targeted advertising, the sale of your personal data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.
- Rights concerning sensitive personal data. We cannot and will not process your sensitive data (as defined by applicable law) or your sensitive data inferences, or use your personal data for certain purposes without your affirmative consent.
C. How to Submit a Request
To exercise your privacy rights described above, please Contact Us. Please note that any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. Additionally, all requests are subject to certain exceptions under applicable law, which may vary.
We do not charge a fee to process or respond to your verifiable consumer request unless its excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity. Generally, a rights request must include:
- Sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which must include, at a minimum, your first and last name and email address.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.
We cannot respond to your request or provide you with personal data if we cannot verify or authenticate your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.
Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first month. We will deliver our written response by mail or electronically, at your option.
D. How to Appeal Decisions About Your Rights
Colorado, Delaware, Maryland, New Jersey, and Oregon residents can appeal our decisions concerning privacy rights requests, as follows:
- Colorado residents: If you are a Colorado resident and want to appeal our decision about a request that you have made, please contact us. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Colorado’s Office of the Attorney General by phone at (720) 508-6000 or by submitting a form here.
- Delaware residents: If you are a Delaware resident and want to appeal our decision about a request that you have made, please contact us. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Delaware’s Department of Justice by phone at (302) 683-8800 or by submitting a form here.
- Maryland residents: If you are a Maryland resident and want to appeal our decision about a request that you have made, please contact us. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Maryland’s Office of the Attorney General by phone at (888) 743-0023 or by submitting a form here.
- New Jersey residents: If you are a New Jersey resident and want to appeal our decision about a request that you have made, please contact us. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact New Jersey’s Office of the Attorney General by phone at (800) 242-5846 or by submitting a form here.
- Oregon residents: If you are an Oregon resident and want to appeal our decision with regard to a request that you have made, please contact us. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken, including an explanation of our reasons in reaching the decision. If the appeal is denied, you may contact Oregon’s Office of the Attorney General by phone at (877) 877-9392 or by submitting a form here.
11. Notice to Residents of the UK and EEA
This European Privacy Notice applies to any individuals located within the European Economic Area (“EEA”) and United Kingdom (“UK”) about whom we may have collected personal data from any source, including through your use of the Services. We provide this Notice to comply with applicable privacy laws, including the General Data Protection Act (“GDPR”), the UK GDPR, and related laws, regulations, and guidance from the European Union and/or its member states. Any capitalized term used and not otherwise defined below has the meaning assigned to it in our Privacy Policy.
European law provides individuals located in Europe with rights to receive certain disclosures regarding the collection, use, and sharing of personal data, as well as rights to be informed, access, rectification, erasure, restrict processing, data portability and to object with respect to collected personal data.
A. Basis For Processing Your Personal Data
We rely on one or more legal bases to process your personal data under applicable law. We may process personal data (i) as necessary to perform our contractual obligations to you, including, but not limited to, those obligations in our terms of use; (ii) as necessary to pursue our legitimate interests as further detailed below; (iii) as necessary for our compliance with our legal obligations such as a request or order from courts, law enforcement or other government authorities; and/or (iv) with your consent, including to send you marketing email messages and other information that may be of interest to you, which you may withdraw at any time.
B. Legitimate Business Interests
We may collect, process, and maintain personal data to pursue the legitimate business interests outlined below. To determine these legitimate interests, we balance our legitimate interests against the legitimate interests and rights of you and others and only process personal data in accordance with those interests where they are not overridden by your data-protection interests or fundamental rights and freedoms. Our legitimate interests generally include:
- Providing, improving, and developing our Services, including to deliver your requested services, send you messages and provide user support, customize the Services to better fit your needs as a user, develop new products and services, and perform internal analytics and research and development. This also includes sharing personal data with our trusted service providers that provide services on our behalf.
- Protecting you and others and to create and maintain a trusted environment, such as to comply with our legal obligations, to ensure compliance our agreements with you and other third parties, to ensure safe, secure, and reliable Services, and to detect and prevent wrongdoing and crime, assure compliance with our policies, and protect and defend our rights, interests, and property. In connection with the activities above, we may conduct internal research and profiling based on your interactions on various Sites, content you submit to the Sites, and information obtained from third parties.
- Providing, personalizing, measuring, and improving our marketing, including to send you promotional messages and other information that may be of interest to you with your consent. We may also use personal data to understand our user base and the effectiveness of our marketing. This processing is done pursuant to our legitimate interest in undertaking marketing activities to offer products or services that may be of interest to you.
C. Your Privacy Rights
In certain circumstances, individuals located within the EEA and UK are entitled to the following data protection rights:
- Right to Access. You have the right to request confirmation of whether we process personal data relating to you, and if so, to request a copy of that personal data.
- Right to Erasure. You have the right to request that we erase your personal data in certain circumstances provided by law.
- Right to Rectification. You have the right to request to have your personal data corrected or updated if that information is inaccurate, outdated, or incomplete.
- Right to Object to Processing. You have the right to object to our processing of your personal data.
- Right to Restrict Processing. You have the right to request that we restrict the processing of your personal data.
- Right to Data Portability. You have the right to request that we provide you with a copy of your personal data in a structured, machine-readable and commonly used format.
- Right to Withdraw Consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal data. Please note that we may ask you to verify your identity before responding to such requests. Please note, we may not able to provide Services without some necessary data. You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the European Economic Area (EEA). You can view the contact information for your data protection authority here.
D. How to Exercise Your Privacy Rights
To exercise your privacy rights described above, please Contact Us. Please note that any request you submit to us is subject to an identification and residency verification process as permitted under applicable law. Additionally, all requests are subject to certain exceptions under applicable law, which may vary.
We do not charge a fee to process or respond to your verifiable consumer request unless its excessive, repetitive, manifestly unfounded, or in accordance with applicable law. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity. Generally, a rights request must include:
- Sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which must include, at a minimum, your first and last name and email address.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.
We cannot respond to your request or provide you with personal data if we cannot verify or authenticate your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal data provided in a verifiable or authenticated consumer request to verify your (or your authorized agent, as applicable) identity or authority to make the request.
Except where otherwise noted, we will respond to your request within one month after receipt and we reserve the right to extend the response time by an additional two months when reasonably necessary and provided consumer notification of the extension is made within the first month. We will deliver our written response by mail or electronically, at your option.
12. Updates to this Privacy Policy
We may change this Privacy Policy from time to time to reflect changes in our data practices or relevant laws. We will let you know via email and/or a prominent notice on our Sites, prior to the change becoming effective, and update “effective date” at the top of this Privacy Policy. We recommend periodically reviewing this Privacy Policy for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
13. Contact Us
If you have questions or concerns regarding this Privacy Policy, please contact us via the methods listed below:
- Email us at questions@saprea.org
- Write us at 4101 N Thanksgiving Way, Ste 100 Lehi, Utah 84048
- Call us at (801) 901-2474
Effective Date: 06-25-2025