Who we are
This Privacy Policy for Haven Roots CO. LLC (“we,” “us,” or “our”), describes how and why we might access, collect, store, use, and/or share
(“process”) your personal information when you use our services (“Services”), including when you:
Visit our website at havenrootsconsulting.com, or any website of ours that links to this Privacy Notice
Engage with us in other related ways, including any sales, marketing, or events Questions or concerns?
Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at
[email protected].
Summary of Key Points
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us. Do we process any sensitive personal information? Some of the information may be considered “special” or sensitive” in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.
Do we collect any information from third parties?
We may collect information from public databases, marketing partners, social media platforms, and other outside sources. Learn more about information collected from other sources.
How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.
In what situations and with which parties do we share personal information?
We may share information in specific situations and with specific third parties.
.
What are your rights?
Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
.
How do you exercise your rights?
The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
What Information do we Collect?
Personal information you disclose to us
In Short:
We collect personal information that you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You.
The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.
The personal information we collect may include the following:
-names
-phone numbers
-email addresses
-job titles
Sensitive Information.
We do not process sensitive information.
Social Media Login Data.
We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider.
HOW DO WE HANDLEYOUR SOCIAL LOGINS?
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
In Short:
Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:
Log and Usage Data.
Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
Device Data.
We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data.
We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
Google API
Our use of information received from Google APIs will adhere to GoogleAPI Services User Data Policy, including the Limited Use requirements.
Information collected from other sources
In Short:
We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources. In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, social media platforms, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.
If you interact with us on a social media platform using your social media account (e.g., Facebook or X), we receive personal information about you from such platforms such as your name, email address, and gender. You may have the right to withdraw your consent to processing your personal information. Learn more about withdrawing your consent. Any personal information that we collect from your social media account depends on your social media account’s privacy settings. Please note that their own use of your information is not governed by this Privacy Notice.
How Do We Process Your Information
In Short:
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
To facilitate account creation and authentication and otherwise manage user accounts.
-We may process your information so you can create and log in to your account, as well as keep your account in working order.
-To deliver and facilitate delivery of services to the user.
-We may process your information to provide you with the requested service.
-To respond to user inquiries/offer support to users.
-We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
-To send administrative information to you.
– We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
– We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
– To enable user-to-user communications.
– We may process your information if you choose to use any of our offerings that allow for communication with another user.
– To save or protect an individual’s vital interest.
– We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
What Legal Basis Do we Rely on to Process Your Information
In Short:
We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do sounder applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
Consent.
We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a Contract.
We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
Legal Obligations.
We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Vital Interests.
We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission(i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example: If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
-For investigations and fraud detection and prevention
-For business transactions provided certain conditions are met
-If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
-For identifying injured, ill, or deceased persons and communicating with next of kin
-If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
-If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
-If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
-If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
-If the collection is solely for journalistic, artistic, or literary purposes
-If the information is publicly available and is specified by the regulations
Who we share your data with
We may need to share your personal information in the following situations:
Business Transfers.
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
When we use Google Maps Platform APIs.
We may share your information with certain Google Maps Platform APIs (e.g., GoogleMaps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
We obtain and store on your device (“cache”) your location. You may revoke your consent anytime by contacting us at the contact details provided at the end of this document.
Affiliates.
We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Business Partners.
We may share your information with our business partners to offer you certain products, services, or promotions.
What is Our Stance on 3rd Party Websites?
In Short:
We are not responsible for the safety of any information that youshare with third parties that we may link to or who advertise on ourServices, but are not affiliated with, our Services.
The Services
may link to third-party websites, online services, or mobileapplications and/or contain advertisements from third parties that are notaffiliated with us and which may link to other websites, services, orapplications. Accordingly, we do not make any guarantee regarding anysuch third parties, and we will not be liable for any loss or damage causedby the use of such third-party websites, services, or applications. Theinclusion of a link towards a third-party website, service, or application doesnot imply an endorsement by us. We cannot guarantee the safety andprivacy of data you provide to any third-party websites. Any data collectedby third parties is not covered by this Privacy Notice. We are notresponsible for the content or privacy and security practices and policies ofany third parties, including other websites, services, or applications thatmay be linked to or from the Services. You should review the policies ofsuch third parties and contact them directly to respond to your questions
Do we use Cookies and Other Tracking Technologies?
In Short:
We may use cookies and other tracking technologies to collectand store your information.
We may use cookies and similar tracking technologies (like web beaconsand pixels) to gather information when you interact with our Services.Some online tracking technologies help us maintain the security of ourServices
and your account
, prevent crashes, fix bugs, save yourpreferences, and assist with basic site functions.
We also permit third parties and service providers to use online trackingtechnologies on our Services for analytics and advertising, including to helpmanage and display advertisements, to tailor advertisements to yourinterests, or to send abandoned shopping cart reminders (depending onyour communication preferences). The third parties and service providersuse their technology to provide advertising about products and servicestailored to your interests which may appear either on our Services or onother websites.
To the extent these online tracking technologies are deemed to be a
“sale”/”sharing”
(which includes targeted advertising, as defined under theapplicable laws) under applicable US state laws, you can opt out of theseonline tracking technologies by submitting a request as described belowunder section
“
DO UNITED STATES RESIDENTS HAVE SPECIFICPRIVACY RIGHTS?
“
Specific information about how we use such technologies and how you canrefuse certain cookies is set out in our Cookie Notice
.
Google Analytics
We may share your information with Google Analytics to track and
analyze
the use of the Services.
To opt out of being tracked by Google Analyticsacross the Services, visit
https://tools.google.com/dlpage/gaoptout
.
Formore information on the privacy practices of Google, please visit the
Google Privacy & Terms page
.
How do we Handle Your Social Logins?
In Short:
If you choose to register or log in to our Services using a socialmedia account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Whereyou choose to do this, we will receive certain profile information about youfrom your social media provider. The profile information we receive mayvary depending on the social media provider concerned, but will ofteninclude your name, email address, friends list, and profile picture, as wellas other information you choose to make public on such a social mediaplatform.
We will use the information we receive only for the purposes that aredescribed in this Privacy Notice or that are otherwise made clear to you onthe relevant Services. Please note that we do not control, and are notresponsible for, other uses of your personal information by your third-partysocial media provider. We recommend that you review their privacy noticeto understand how they collect, use, and share your personal information,and how you can set your privacy preferences on their sites and apps.
How Long do We Keep Your Information?
In Short:
We keep your information for as long as necessary to
fulfill
thepurposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessaryfor the purposes set out in this Privacy Notice, unless a longer retentionperiod is required or permitted by law (such as tax, accounting, or otherlegal requirements).
No purpose in this notice will require us keeping your
personal information for longer than
the period of time in which users havean account with us
.
When we have no ongoing legitimate business need to process yourpersonal information, we will either delete or
anonymize
such information,or, if this is not possible (for example, because your personal informationhas been stored in backup archives), then we will securely store yourpersonal information and isolate it from any further processing until deletionis possible.
Do we Collect Information from Minors?
In Short:
We do not knowingly collect data from or market to
childrenunder 18 years of age
.
We do not knowingly collect, solicit data from, or market to children under18 years of age, nor do we knowingly sell such personal information. Byusing the Services, you represent that you are at least 18 or that you arethe parent or guardian of such a minor and consent to such minordependent’s use of the Services. If we learn that personal information fromusers less than 18 years of age has been collected, we will deactivate theaccount and take reasonable measures to promptly delete such data fromour records. If you become aware of any data we may have collected fromchildren under age 18, please contact us at
[email protected].
What are Your Privacy Rights?
In Short:
Depending on your state of residence in the US or in
someregions, such as
the European Economic Area (EEA), United Kingdom(UK), Switzerland, and Canada
, you have rights that allow you greateraccess to and control over your personal information.
You may review,change, or terminate your account at any time, depending on your country,province, or state of residence.
In some regions (like
the EEA, UK, Switzerland, and Canada
), you havecertain rights under applicable data protection laws. These may include theright (i) to request access and obtain a copy of your personal information,(ii) to request rectification or erasure; (iii) to restrict the processing of yourpersonal information; (iv) if applicable, to data portability; and (v) not to besubject to automated decision-making. In certain circumstances, you mayalso have the right to object to the processing of your personal information.You can make such a request by contacting us by using the contact detailsprovided in the section
“
HOW CAN YOU CONTACT US ABOUT THISNOTICE?
“
below.
We will consider and act upon any request in accordance with applicabledata protection laws.
If you are located in the EEA or UK and you believe we are unlawfullyprocessing your personal information, you also have the right to complainto your
Member State data protection authority
or
UK data protectionauthority
.
If you are located in Switzerland, you may contact the
Federal DataProtection and Information Commissioner
.
Withdrawing your consent:
If we are relying on your consent to processyour personal information,
which may be express and/or implied consentdepending on the applicable law,
you have the right to withdraw yourconsent at any time. You can withdraw your consent at any time bycontacting us by using the contact details provided in the section
“
HOWCAN YOU CONTACT US ABOUT THIS NOTICE?
“
below
.
However, please note that this will not affect the lawfulness of theprocessing before its withdrawal nor,
when applicable law allows,
will itaffect the processing of your personal information conducted in reliance onlawful processing grounds other than consent.
Opting out of marketing and promotional communications:
You canunsubscribe from our marketing and promotional communications at anytime by
clicking on the unsubscribe link in the emails that we send,
or bycontacting us using the details provided in the section
“
HOW CAN YOUCONTACT US ABOUT THIS NOTICE?
“
below. You will then be removedfrom the marketing lists. However, we may still communicate with you —for example, to send you service-related messages that are necessary forthe administration and use of your account, to respond to service requests,or for other non-marketing purposes.
Account Information
If you would at any time like to review or change the information in youraccount or terminate your account, you can:
Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or deleteyour account and information from our active databases. However, we mayretain some information in our files to prevent fraud, troubleshoot problems,assist with any investigations, enforce our legal terms and/or comply withapplicable legal requirements.
Cookies and similar technologies:
Most Web browsers are set to acceptcookies by default. If you prefer, you can usually choose to set yourbrowser to remove cookies and to reject cookies. If you choose to removecookies or reject cookies, this could affect certain features or services ofour Services.
You may also
opt out of interest-based advertising byadvertisers
on our Services.
If you have questions or comments about your privacy rights, you mayemail us at
[email protected].
Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems and mobileapplications include a Do-Not-Track (
“DNT”
) feature or setting you canactivate to signal your privacy preference not to have data about youronline browsing activities monitored and collected. At this stage, no uniformtechnology standard for
recognizing
and implementing DNT signals hasbeen
finalized
. As such, we do not currently respond to DNT browsersignals or any other mechanism that automatically communicates yourchoice not to be tracked online. If a standard for online tracking is adoptedthat we must follow in the future, we will inform you about that practice in arevised version of this Privacy Notice.
California law requires us to let you know how we respond to web browserDNT signals. Because there currently is not an industry or legal standardfor
recognizing
or
honoring
DNT signals, we do not respond to them at this time.
Do United States Residents Have Specific Rights?
In Short:
If you are a resident of
California, Colorado, Connecticut,Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire,New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia
, you may havethe right to request access to and receive details about the personalinformation we maintain about you and how we have processed it, correctinaccuracies, get a copy of, or delete your personal information. You mayalso have the right to withdraw your consent to our processing of your
personal information. These rights may be limited in some circumstancesby applicable law. More information is provided below.
You have rights under certain US state data protection laws. However,these rights are not absolute, and in certain cases, we may decline yourrequest as permitted by law. These rights include:
Right to know
whether or not we are processing your personal data
Right to access
your personal data
Right to correct
inaccuracies in your personal data
Right to request
the deletion of your personal data
Right to obtain a copy
of the personal data you previously sharedwith us
Right to non-discrimination
for exercising your rights
Right to opt out
of the processing of your personal data if it is usedfor targeted advertising
(or sharing as defined under California’sprivacy law)
, the sale of personal data, or profiling in furtherance ofdecisions that produce legal or similarly significant effects(
“profiling”
)
Depending upon the state where you live, you may also have the followingrights:
Right to obtain a list of the categories of third parties to which wehave disclosed personal data (as permitted by applicable law,including
California’s and Delaware’s
privacy law)
Right to obtain a list of specific third parties to which we havedisclosed personal data (as permitted by applicable law, includingOregon’s privacy law)
Right to limit use and disclosure of sensitive personal data (aspermitted by applicable law, including California’s privacy law)
Right to opt out of the collection of sensitive data and personal datacollected through the operation of a voice or facial recognitionfeature (as permitted by applicable law, including Florida’s privacylaw)
How to Exercise Your Rights
To exercise these rights, you can contact us
by submitting a
data subjectaccess request
,
by emailing us at
[email protected]
,
or byreferring to the contact details at the bottom of this document.
Under certain US state data protection laws, you can designate an
authorized
agent to make a request on your behalf. We may deny arequest from an
authorized
agent that does not submit proof that they havebeen validly
authorized
to act on your behalf in accordance with applicablelaws.
Request Verification
Upon receiving your request, we will need to verify your identity todetermine you are the same person about whom we have the informationin our system. We will only use personal information provided in yourrequest to verify your identity or authority to make the request. However, ifwe cannot verify your identity from the information already maintained byus, we may request that you provide additional information for the purposesof verifying your identity and for security or fraud-prevention purposes.
If you submit the request through an
authorized
agent, we may need tocollect additional information to verify your identity before processing yourrequest and the agent will need to provide a written and signed permissionfrom you to submit such request on your behalf.
Appeals
Under certain US state data protection laws, if we decline to take actionregarding your request, you may appeal our decision by emailing us at
[email protected]
. We will inform you in writing of anyaction taken or not taken in response to the appeal, including a writtenexplanation of the reasons for the decisions. If your appeal is denied, youmay submit a complaint to your state attorney general.
California
“Shine The Light”
Law
California Civil Code Section 1798.83, also known as the
“Shine The Light”
law, permits our users who are California residents to request and obtainfrom us, once a year and free of charge, information about categories ofpersonal information (if any) we disclosed to third parties for directmarketing purposes and the names and addresses of all third parties withwhich we shared personal information in the immediately precedingcalendar year. If you are a California resident and would like to make sucha request, please submit your request in writing to us by using the contactdetails provided in the section
“
HOW CAN YOU CONTACT US ABOUTTHIS NOTICE?
How Can You Contact Us About This Notice?
If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:
Haven Roots CO. LLC
PO Box 42
Dundee, FL 33838
United States
How Can You Review, Update, or Delete the Data We Collect From You?
Based on the applicable laws of your country
or state of residence in theUS
, you may
have the right to request access to the personal informationwe collect from you, details about how we have processed it, correctinaccuracies, or delete your personal information. You may also have theright to
withdraw your consent to our processing of your personalinformation. These rights may be limited in some circumstances byapplicable law. To request to review, update, or delete your persona linformation, please
fill out and submit a
data subject access request