Our Privacy Notice

Effective date: May 10, 2024

 

1. Introduction 

We at Cosmic Shaman Academy know you care about how your personal information is used and shared. We take your privacy seriously and want to outline the measures we employ to safeguard it. When referring to "Cosmic Shaman Academy" or "our digital platform" in this Privacy Notice, we refer to everything on the domain https://cosmicshaman.academy. This Privacy Notice covers our treatment of information collected when you access Cosmic Shaman Academy and our events, services and communication online and offline worldwide.

We recommend that you read this Privacy Notice carefully. It provides essential information about your personal information and rights under the law.

 

2. To Whom This Privacy Notice Applies to

This Privacy Notice applies to the information we collect:

  • at the Cosmic Shaman Academy; 
  • at events, workshops, gatherings and other meetings in real life; or
  • in e-mail, text or other electronic messages between you and the Cosmic Shaman Academy.

It does not apply to information collected by any third party, including through any application or content that may link to or be accessible from or on Cosmic Shaman Academy. 

Please read this Privacy Notice and our Cookie Notice carefully to understand our policies and practices regarding your information and how we will treat it.  If you disagree with our policies and practices, you must stop using Cosmic Shaman Academy.  By accessing or using Cosmic Shaman Academy or any of our services or partaking in our events, you acknowledge that you have read and accept the practices and policies outlined in this Privacy Notice and any other Cosmic Shaman Academy policies or agreements in place at that time. Your visit and any dispute over privacy are subject to this policy and our Terms, including limitations on damages and binding arbitration. We reserve the right to change this Privacy Notice from time to time.  Your continued use of Cosmic Shaman Academy after we make changes is deemed to be acceptance of those changes, so please check periodically for updates. This Privacy Notice will be updated at minimum, annually, or as may be required to conform to applicable laws.

 

3. Users Must Be At Least 18

Users of our digital platform must be at least 18 years old; any user under 18 is not authorized. Our digital platform is not targeted at children under 18, and we do not knowingly collect any personal information from children under 18.

If you have reason to believe that a child under 18 has provided personal information to Cosmic Shaman Academy, please contact us, and we will endeavor to delete that information from our databases.

 

4. Information We Collect and How We Collect It

We collect several types of information from and about users of Cosmic Shaman Academy and our services and events, including information:

  • By which you may be personally identified, such as name, postal address, e-mail address, phone number, or any other identifier by which you may be contacted online or offline ("personal information");
  • You may submit to us, including any Content;
  • about your preferences and demographics;
  • geolocation, including precise and regional;
  • about you individually but does not identify you;
  • About your internet connection, the equipment you use to access our digital platform and usage details;
  • account information and login credentials;
  • chat modules, messaging and e-mail data, including related metrics;
  • financial and economic information;
  • survey and general research data; 
  • contests, sweepstakes and prize drawings data;

We collect this information:

  • Directly from you when you provide it to us, such as when you create an account or contact us with inquiries and;
  • Automatically, as you use the Cosmic Shaman Academy, information collected automatically may include usage details and information collected through cookies.

 

By voluntarily providing us with any such information, you consent to our use per this Privacy Notice. You can choose not to provide us with certain information, but then you may not be able to take advantage of many features or opportunities.

 

Automatically Collected Information

Upon engaging the Cosmic Shaman Academy or services, our digital platform automatically receives and records information on our server logs from your browser, including but not limited to your IP address, the type of browser used, identity and type of device used, cookie information, the page you requested, and duration of activity on Cosmic Shaman Academy. Our digital platform may store such information itself, or such information may be included in databases owned and maintained by our affiliates. This information may be used to customize the content you see on Cosmic Shaman Academy or to communicate with you about opportunities. This information provides us with the type of user who is accessing Cosmic Shaman Academy and certain browsing activities of that user. We may extensively use this data at an aggregated level to understand, among other things, how Cosmic Shaman Academy is being used. Cosmic Shaman Academy may also disclose aggregated user statistics to describe our services to current and prospective business partners and other third parties for other lawful purposes.  Please note that we can retain any data you provide or collect on our digital platform, even if you have not created an account, logged in, or did not study at the Cosmic Shaman Academy. For example, such contact details and data may be used to contact you to share opportunities or for marketing purposes.

Cookies

We use "cookies" and other tracking technologies to improve your experience and to save you time when visiting Cosmic Shaman Academy. Cookies are little tags that are placed on your computer. We assign a cookie to your computer when you first visit us in order to enable us to recognize you each time you return. Cookies allow us to customize Cosmic Shaman Academy to your individual preferences in order to create a more personalized experience. You will find a "help" section on most web browsers on the toolbar. Please refer to this section for information on receiving notifications when receiving a new cookie and how to turn cookies off. We recommend that you leave cookies turned on because they allow you to take advantage of some of the features on our digital platform. For more information on our use of cookies and the data they collect, see our Cookie Notice.

Do Not Track

We may track users' use of our digital platform, but because there is no common understanding of what a "Do Not Track" signal is supposed to mean, we will not respond to browser Do Not Track (DNT) signals. For more information on DNT settings generally, please visit https://allaboutdnt.com.

Google API

Cosmic Shaman Academy uses Google's Application Programming Interface (API) Services to enable the use of certain features on our digital platform (i.e., use of your Gmail account to calendar events from the coaching feature). Cosmic Shaman Academy's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The information collected and used with these API services includes personal data such as e-mail addresses, calendar information, and first and last names. Our system developers use your Google information to provide or improve user-facing features prominent to your user experience. For clarity, Cosmic Shaman Academy does not use the information received through Google API Services for marketing purposes and does not share the same with third parties except with your consent.

 

5. How We Use Your Information 

We use information that we collect about you or that you provide to us, including any personal information:

  • To provide the Cosmic Shaman Academy with its contents to you.
  • To process transactions and fulfill orders, including billing and collections.
  • To register a user.
  • To provide you with marketing and promotions and for us to audit the same.
  • To provide you with information, opportunities, or services, including customer support, you request from us.
  • To provide you with notices about your account, promotions, partner agreements, or other agreements.
  • To carry out our obligations and rights arising from any contracts entered into between you and us.
  • To defend against claims and litigation.
  • To enforce our policies and protect against security incidents, including to prevent fraud, malicious, deceptive or illegal activity.
  • To notify you about changes to our digital platform or any products or services we offer to provide through it.
  • To fulfill any other purpose for which you provide it.
  • In any other way, we describe when you provide the information.
  • For any purpose with your consent.

You may notify us to opt out of receiving certain marketing e-mails and each marketing e-mail will include an opt-out button or unsubscribe link.

 

6. Disclosure of Your Information

Cosmic Shaman Academy is not in the business of selling your information. We have the right to disclose aggregated information about our users, as well as information that does not identify any individual.  We may disclose personal information that we collect, or you provide following this Privacy Notice:

  • To service providers and other third parties, we use to support our business.
  • To fulfill the purpose for which you provide it or any other purpose disclosed by us when you provide the information.
  • To our professional advisors, including lawyers, accountants, consultants, security professionals and other similar parties when disclosure is reasonably necessary.
  • With your consent.
  • To third-party advertising partners who may use data to serve ads for us and provide us with analytics.
  • To third-party vendors who may use data to provide you with additional services and products.

We may also disclose your personal information:

  • To comply with a subpoena, court order, administrative or governmental order, or any other requirement of law.
  • Cosmic Shaman Academy, in its sole discretion, deems it necessary to protect its rights or the rights of others, prevent harm to persons or property, and fight fraud and credit risk.
  • To enforce or apply our Platform Terms, and other agreements or policies, including for billing and collection purposes.

 

7. Data Security

Cosmic Shaman Academy takes commercially reasonable steps to protect the personal information provided via our digital platform from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Including but not limited to encryption in transit and at rest, role-based access controls, vital authentication requirements, and active monitoring of all information shared. However, not all Internet or e-mail transmissions are fully secure or error-free. In particular, e-mails or forms sent to or from our digital platform may not be fully secure in transit. Therefore, you should carefully decide what information you send us via e-mail or a form. Please remember this when disclosing personal information to Cosmic Shaman Academy online. A password protects your individual account information at Cosmic Shaman Academy. You are responsible for protecting against unauthorized access to your account and personal information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account. Any transmission of personal information is at your own risk.  We are not responsible for the circumventing of any privacy settings or security measures on our digital platform.

 

8. Links to Other Websites

This Privacy Notice applies only to the Cosmic Shaman Academy and our events and services. Our digital platform may contain links to other websites not operated or controlled by Cosmic Shaman Academy (the "Third Party Sites"), e.g., Facebook, Twitter, Instagram, YouTube, LinkedIn, and TikTok. The policies and procedures described here do not apply to the Third Party Sites. The links from our digital platform do not imply that Cosmic Shaman Academy endorses or has reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.

 

9. Social Media

We use social media plug-ins (e.g., Facebook, Twitter, Instagram, TikTok). These features may collect your IP address and/or other information outlined in each social platform's Privacy Notice, which page you visit on our digital platform, and may set a cookie to enable the feature to function correctly. Cosmic Shaman Academy also has a presence on social media platforms, including YouTube, Instagram, TikTok and Facebook. Through our social media platform or our accounts on social media platforms, we may sometimes collect personal information when you interact with the Cosmic Shaman Academy accounts or otherwise communicate with us through those accounts or on these platforms. Any information that you post on social media is governed by each social platform's privacy notices, and any personal information that we collect via our social media accounts or on our Cosmic Shaman Academy forums will be processed in accordance with this Privacy Notice.

 

10. Access to Information; Managing Communications; Contacting Us 

To keep your personal information accurate, current, and complete, please contact us as specified below. We will take reasonable steps to update or correct the personal information in our possession that you have previously submitted via our digital platform. Note that you may also manage your communications preferences and the receipt of any commercial communication by clicking the "unsubscribe" link included at the bottom of all e-mails from Cosmic Shaman Academy.

If you have any questions or concerns regarding this Privacy Notice and our privacy practices, please send us a detailed message to [email protected] and we will make every effort to resolve your concerns. 

 

11. Additional Information for California Residents

This Additional Information for California Residents supplements the information contained in the Privacy Notice and applies solely to all visitors, users, and others who reside in the State of California ("Consumers"). We have created this notice in order to comply with the California Consumer Privacy Act of 2018 and the later California Privacy Rights Act of 2020 (collectively, "CCPA"). All capitalized terms not defined in this Section XII shall have the respective meanings given to them in the CCPA.

Categories of Information We Collect

We collect Personal Information as that term is defined in CCPA: information that identifies relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or device. In particular, within the last twelve (12) months, we have collected the following categories of Personal Information from Consumers:

  • Identifiers
  • Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  • Protected classification characteristics under California or federal law
  • Professional or employment-related information
  • Commercial information
  • Internet or other similar network activity
  • Inferences drawn from other Personal Information
  • Geolocation Data
  • Messages, e-mail, and chat data
  • Sensory Data
  • Government identifiers
  • Complete account access credentials
  • Other personal information

Personal information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated Consumer information.
  • Certain other information that is already regulated by other laws or regulations.

As explained in more detail here, we obtain the categories of personal information listed above from the following categories of sources:

Directly from you. For example, when you sign up on our digital platform or for services and events. This includes the following categories of personal information:

  • Identifiers
  • Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  • Protected classification characteristics under California or federal law
  • Professional or employment-related information
  • Commercial information
  • Government identifiers
  • Complete account access credentials
  • Other personal information 

Indirectly. For example, from observing your actions on our digital platform or using our services, including by using cookies or from third parties. This includes the following categories of personal information:

  • Internet or other similar network activity
  • Inferences drawn from other personal information

By observing Consumers' behavior through their activity on our digital platform. This includes the following categories of personal information:

  • Internet or other similar network activity
  • Inferences drawn from other personal information

 

12. Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes: 

Cosmic Shaman Academy will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

 

13. How Long Do We Keep Your Personal Information?

General Retention Periods

We use the following criteria to determine our retention periods: the amount, nature and sensitivity of your information, the reasons for which we collect and process your personal data, the length of time we have an ongoing relationship with you and provide you with access to our services, events and/or digital platform, and applicable legal requirements. We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax or accounting requirements). We will also retain personal information we collect from you, for your convenience, where you have an active account, have not requested to delete, or have asked us to retain it. Additionally, we cannot delete information when it is needed for the establishment, exercise or defense of legal claims (also known as a "litigation hold"). In this case, the information must be retained as long as needed for exercising respective potential legal claims.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives or you have asked us to keep it or we believe it will be most convenient for you), we will securely store your personal information and isolate it from any analytics tracking until deletion is possible.

For any questions about data retention, please contact [email protected].

 

14. Disclosure of Personal Information

Cosmic Shaman Academy may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the services for us.

As explained in more detail above, we share your personal information with certain categories of third parties who assist us in providing our digital platform and products and with our business.

Disclosures of Personal Information for a Business Purpose

Over the coming twelve (12) months, Cosmic Shaman Academy may disclose the following categories of Personal Information for a business purpose:

  • Identifiers
  • Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  • Commercial information
  • Internet or other similar network activity
  • Inferences drawn from other personal information
  • Protected classification characteristics under California or federal law
  • Government identifiers
  • Complete account access credentials
  • Other personal information

We may disclose your personal information for a business purpose to the following categories of service providers or third parties:

  • Companies that do things to help us provide our digital platform and/or our services: hosting service providers, software providers such as Kajabi, Stripe and Mailchimp, user engagement analytics, certain analytics providers, payment service providers, communication tools, identity verification providers or other tools we may provide you.
  • Professional service providers, such as auditors, lawyers, consultants, accountants and insurers.

 

15. Your Rights and Choices

The CCPA provides Consumers with specific rights regarding their personal information, provided that we are able to verify their identities, as explained below. This section describes some of your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive your request and verify your identity (see Exercising Access, Data Portability, and Deletion Rights), we will disclose to you:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties with whom we share that personal information.
  • The specific pieces of personal information we collected about you (also called a data portability request).
  • If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased, and
  • Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

 

Deletion Request and Correction Request Rights

You have the right to request that we delete or correct any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and verify your identity (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) or correct (and direct our service providers to correct) you rpersonal information from our records, unless an exception applies. As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. Cosmic Shaman Academy reserves the right to deny a correction request if allowed under the law or if we determine that the contested information is more likely than not accurate based on the totality of circumstances. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

  1. Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide products or services requested by you or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  3. Debug products to identify and repair errors that impair existing intended functionality.
  4. Exercise free speech, ensure the right of another Consumer to exercise that Consumer's right of free speech, or exercise another right provided for by law.
  5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  6. Enable solely internal uses that are reasonably aligned with Consumer expectations based on your relationship with us.
  7. Comply with a legal obligation.
  8. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Limit Use and Disclosure of Sensitive Personal Information

You have the right to request that we delete any of your Sensitive Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive your request and verify your identity (see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your Personal Information from our records unless an exception applies. We may deny your request to limit certain uses and disclosures of your Sensitive Personal Information for the following purposes: 

  1. Providing our digital platform or our products or services as reasonably expected of an average consumer;
  2. Detecting security incidents affecting personal information on our Platform, provided that the use of the Consumer's Sensitive Personal Information is reasonably necessary and proportionate for this purpose;
  3. Resisting malicious, fraudulent, or illegal actions against us and prosecuting persons responsible for such actions, provided that the use of the Consumer's Sensitive Personal Information is reasonably necessary and proportionate for this purpose;
  4. Ensuring the physical safety of an individual, provided that the use of the Consumer's Sensitive Personal Information is reasonably necessary and proportionate for this purpose;
  5. Short-term, transient use, including non-personalized advertising shown as part of a Consumer's current interaction with our digital platform, provided that we do not build a profile about the Consumer or alter the Consumer's experience outside their current interaction with us;
  6. Performing services on behalf of another business (g., maintaining accounts, processing orders or transactions);
  7. Verifying or maintaining the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, or improving, upgrading, or enhancing the services or device owned, manufactured, manufactured for, or controlled by us; or
  8. To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.

 

Exercising Access, Data Portability and Deletion Rights

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable Consumer request related to your Personal Information. You may also make a verifiable Consumer request on behalf of your minor child. An authorized agent is a natural person or a business entity registered with the Secretary of State that a Consumer has authorized to act on his or her behalf. When a Consumer uses an authorized agent to submit a request to know or a request to delete, we may require that the Consumer provide the authorized agent written permission to do so and verify their own identity directly with us unless the Consumer has provided the authorized agent with a valid power of attorney. We may deny a request from an agent that does not submit proof that they have been authorized by the Consumer to act on his or her behalf.

To exercise the access, data portability, and deletion rights described above, please submit a verifiable request to us at [email protected]. You may only make a verifiable Consumer request for access or data portability twice within a 12-month period. The verifiable Consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.

Making a verifiable Consumer request does not require you to create an account with us. However, we do consider requests made through our portal with a verified e-mail as a reasonable step toward verification when the request relates to personal information associated with that specific account. Please note that the methods for verification are set forth in the CCPA, which also requires us to consider a number of factors, such as type, sensitivity and value of the Personal Information or risk of harm posed by unauthorized access or deletion, on a case-by-case basis.

We will only use personal information provided in a verifiable Consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavor to respond to a verifiable Consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of the verifiable Consumer's request. If applicable, the response we provide will also explain the reasons we cannot comply with a request. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another without hindrance.

We do not charge a fee to process or respond to your verifiable Consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Sale; Non-Discrimination

Cosmic Shaman Academy does not sell personal information. However, certain privacy laws and regulations can define "sale" to broadly include nearly all online business activity. For example, under the CCPA, "personal information" includes information that is not necessarily directly tied to an individual's identity but may be associated with a device. This includes identifiers such as IP addresses, web cookies, web beacons, and mobile Ad IDs. In many cases, this type of information does not directly identify you, but they are unique identifiers that could be linked to you and, therefore, covered by the CCPA. The term "sell" is broadly defined by the CCPA to include not just selling in exchange for money but also sharing personal information (including information that does not directly identify an individual as described above) in exchange for anything of value. Under the CCPA's broad definition of "sell," which includes even the common flow of information in the digital analytics and advertising ecosystem, Cosmic Shaman Academy could be defined as selling personal information. Like most companies that operate online, Cosmic Shaman Academy uses online analytics to measure the ways users engage with our digital platform and to provide targeted marketing. These analytics, in turn, inform how we perform online advertising. In order to provide these analytics and facilitate online advertising, we use third parties that collect device identifiers and place tags, cookies, beacons, and similar tracking mechanisms on our digital properties and on third-party digital properties as set forth in our Cookie Notice.  

We will not discriminate against you in a manner prohibited by the CCPA because you exercise your CCPA rights. While you may request to delete your Personal Information under CCPA, such deletions may affect Cosmic Shaman Academy's ability to offer our digital platform or to sell our products to you.

 

16. Additional Information for European Economic Area ("EEA") or United Kingdom ("U.K.”) Residents.

This Additional Information for EEA and U.K. Residents supplements the information contained in the Privacy Notice and applies solely to all visitors, users, and others who reside in EEA and U.K. We have created this notice in order to comply with the European Union's General Data Protection Regulation and later U.K. General Data Protection Regulation (collectively, "GDPR"). All capitalized terms not defined here have meanings given to them in the GDPR. 

 

17. Categories of Recipients of Personal Data

The categories of recipients of Personal Data with whom we may share your personal data are listed in Disclosure of Your Personal Information above.

 

18. Purpose of the Processing and Legal Bases

Cosmic Shaman Academy processes your personal information for several different purposes. Some are essential for us to provide the digital platform you use or to fulfill our legal obligations, some help us run our digital platform efficiently and effectively, and some enable us to provide you with more relevant and personalized offers and information. In all cases, we must have a reason and legal grounds for processing your personal information. Some of the most common legal grounds we rely on are briefly explained below.

  • Performance of a Contract: We may process your personal data for the purpose of performing under the terms of a contract to which you are a party - in other words, your ability to use our digital platform. For instance, if you are an affiliate who receives payments via our digital platform, we will process your data in order to carry out the payment transaction.
  • Legitimate Interests We may process personal data where it is necessary for our legitimate business interests, but only to the extent that they are not outweighed by our own interests or fundamental rights and freedoms. We generally rely on legitimate interests to provide and maintain our digital platform that works well and securely, carry out fraud prevention, and generally improve our digital platform. When we rely on this legal basis, if required, we will carry out a legitimate interest assessment to ensure we consider and balance any potential impact on you (both positive and negative) and your rights under data protection laws.
  • Consent: Cosmic Shaman Academy will rely on consent where it is required, such as when we are asking you to confirm your marketing preferences or when you submit sensitive data. When we rely on consent, you will be asked to confirm that you give your permission to Cosmic Shaman Academy to process your personal data. You have the right to withdraw your consent at any time if you no longer want to be part of the Cosmic Shaman Academy processing activity where your consent was sought.
  • Legal Obligation Cosmic Shaman Academy will, on occasion, be under a legal obligation to obtain and disclose your personal data or may cooperate in a legal or governmental investigation. Where possible, we will notify you when processing your data due to a legal obligation; however, this may not always be possible. Cosmic Shaman Academy may determine that it needs to provide your data in order to prevent criminal activity or help detect criminal activity, in which case, we may share information with law enforcement without notifying you. It is essential that Cosmic Shaman Academy complies with its legal, regulatory, and contractual requirements, so if you object to this processing, Cosmic Shaman Academy will not be able to provide you with its digital platform.

 

Below are the general purposes and corresponding legal bases (in brackets) for which we may use your personal information:

  • Providing you access to and use of our digital platform [depending on the context, performance of a contract, legitimate interests, and, in some cases, legal claims].
  • Processing and completing transactions, and sending you related information, including purchase confirmations and invoices and important notices [depending on the context, performance of a contract or legitimate interests].
  • Responding to your queries and requests or otherwise communicating directly with you [depending on the context, performance of a contract, legitimate interests, and, in some cases, legal claims].
  • Improving the content and general administration of our digital platform, including system maintenance and upgrades, enabling new features and enhancements [legitimate interests].
  • Detecting fraud, illegal activities or security breaches [legitimate interests].
  • Ensuring compliance with applicable laws [compliance with a legal obligation].
  • Conducting statistical analyses and analytics by monitoring and analyzing trends, usage, and activities in connection with our digital platform [consent where required (e.g., 3rd-party cookies) or legitimate interests].
  • Increasing the number of customers who use our digital platform through marketing and advertising [consent where required, or legitimate interests].
  • Sending commercial communications, in line with your communication preferences, about products and services, features, newsletters, offers, promotions, and events [consent and, in some cases, depending on location, with existing customers, legitimate interests].
  • Providing information to regulatory bodies when legally required, and only as outlined below in this Privacy Notice [legal obligation, legal claims, legitimate interests].

 

19. How Long Do We Keep Your Personal Data?

We use the following criteria to determine our retention periods: the amount, nature and sensitivity of your information, the reasons for which we collect and process your personal data, the length of time we have an ongoing relationship with you and provide you with access to our digital platform, and applicable legal requirements. We will retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to comply with applicable legal, tax, or accounting requirements) when we are unable to verify your identity reasonably or as may otherwise be required under GDPR. Additionally, we cannot delete information when it is needed to establish, exercise, or defend legal claims (also known as a "litigation hold"). In this case, the information must be retained as long as needed to exercise respective potential legal claims.

When we have no ongoing business need to process your personal information, we will either delete or anonymize it. If you have questions about or need further information concerning our data retention periods, please send an e-mail to [email protected]. 

 

20. Staying in Control of Your Information: Your Rights

If you are in the EEA or the U.K., you have certain rights in relation to your personal data, including those set forth below. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, if an exception applies, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include personal data, if necessary to verify your identity and the nature of your request.

  • Access: You can request more information about the personal data we hold about you and request a copy of such personal data.
  • Rectification: If you believe that any personal data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
  • Erasure: You can request that we erase some or all of your personal data from our systems.
  • Withdrawal of Consent: If we are processing your personal data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide consent on a case-by-case basis for the use or disclosure of certain of your personal data if such use or disclosure is necessary to enable you to utilize some or all of our Platform.
  • Portability: You can ask for a copy of your personal data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
  • Objection: You can contact us to let us know that you object to the further use or disclosure of your personal data for certain purposes, such as for direct marketing purposes.
  • Restriction of Processing: You can ask us to restrict further processing of your personal data.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights) unless your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request under those circumstances.

We will respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated as required by law.

In addition, if you no longer wish to receive our marketing/promotional information, we remind you that you may withdraw your consent to direct marketing at any time directly from the unsubscribe link included in each electronic marketing message we send to you. If you do so, we will promptly update our databases and take all reasonable steps to meet your request as soon as possible, but we may continue to contact you to the extent necessary for the purposes of providing our Platform.

Finally, you have the right to make a complaint at any time to the supervisory authority for data protection issues in your country of residence. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en. We would, however, appreciate the chance to address your concerns before you approach the supervisory authority, so please contact us directly first.

21. Exercising Your Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable request to us by e-mail at [email protected].

If you are accessing or using our Platform or otherwise providing personal information to us, you are agreeing and consenting to the processing of your personal information worldwide.

 

Contact Us

If you have any questions, concerns or complaints about this Policy Notice, please contact us by at [email protected].