Last updated September 7, 2021
Who we are
The Restorative Practices Alliance is headquartered in Northern California and serves internationally. Our mission is to re-center safety and connection as the baseline of an ecological human multi-culture. We are a philanthropic ancestral neuro-technology cooperative and culture repair engine, powered by intellectual property licensed from Applied Mindfulness, Inc., and held in trust from other sources of wisdom. Our website address is restorativepractices.com.
What information we collect:
We collect information when you register for an account, participate in interactive features, fill out a form or a survey, make a purchase, communicate with us via social media sites, request customer support, or otherwise communicate with us. The information you may provide includes your name, email, password, goals, previous experiences, street address, payment method information, feedback and survey responses, and other information about you included within your messages to us. Some users also provide health-related information in connection with providing feedback or other messages to us, and we process that information consistent with the purpose for which it was provided.
- Usage Information: Whenever you use our Services, we collect usage information, such as the videos or pages you view, what screens or features you access, and other similar types of usage information.
- Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you log out of your account, the login cookies will be removed.
- Transactional Information: When you make a purchase or return, we collect information about the transaction, such as price, product description, subscription or expiration date, and time and date of the transaction.
- Log Information: We collect standard log files when you use our Services, which include the type of web browser you use, your IP address, pages viewed, access times and dates, and the page you visited before navigating to our websites. When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Restorative Practices service to see if you are using it.
- Device Information: We may collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, device identifiers set by your device operating system, and mobile network information (like your connection type, carrier and region).
- Information from other sources: We also obtain information about you from other sources such as name and contact information from third-party calendar services. Additionally, if you create or log into your account through a social media service account, we will have access to certain information from that account, such as your name and other account information, in accordance with the authorization procedures set by that social media service.
- Analytics: We collect de-identified aggregated data as part of our analytics, to monitor usage on our platform, and to calculate royalties for our instructors on the platform. All usage data is de-identified and aggregated. Protected Health Information is not passed through our analytics.
- Information we generate: We generate some information about you based on other information we have collected. For example, like most platforms, we use your IP address to derive the approximate location of your device/access point. We also use information about your activity to help determine the likelihood of you continuing to use our Services in the future (which we sincerely hope you will).
How we use your data
We use the information we collect to:
- Provide, maintain and improve our Services, and develop new products and services;
- Process transactions and fulfill orders;
- Send you transactional or relationship messages, such as receipts, account notifications, customer support responses, and other administrative messages;
- Communicate with you about products, services, and events offered by Restorative Practices and others within our network, request feedback, and send news, or other information we think will be of interest to you;
- Monitor and analyze trends, usage, and activities in connection with our Services;
- Detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of Restorative Practices and others. If you feel your transaction was declined in error, please contact us for assistance at email@example.com;
- Comply with the law, such as by processing transactional records for tax filings;
- Personalize your online experience and the advertisements you see on other platforms based on your preferences, interests, and browsing behavior.
Who we share your data with
- With companies and contractors that perform services for us, including email service providers, payment processors, fraud prevention vendors and other service providers;
- In response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements;
- If we believe your actions are inconsistent with our user agreements or policies, if we believe you have violated the law, or to protect the rights, property, and safety of Restorative Practices or others;
- In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company;
- Between and among Restorative Practices and our current and future partners, affiliates, subsidiaries, and other companies under common control and ownership; and
- With your consent or at your direction. For instance, you may choose to share actions you take on our Services with third-party social media services via the integrated tools we provide via our Services
- If you are an employee of an organization with an Enterprise Licensing Agreement, you may opt-in to have Personal Health Information, or certain assessment or usage data made visible to your supervisors or Human Resources department. This is an opt-in service, at your discretion as an Authorized User. Your employer cannot pressure you to Opt-in. If you are the patient or client of a Practitioner with a Practitioner Licensing Agreement, you may opt-in to have Personal Health Information, or certain assessment or usage data made visible to your Practitioner. This is an opt-in service, at your discretion as an Authorized User. Your Practitioner cannot pressure you to Opt-in.
Advertising/Analytics Services Provided by Other Parties:
How long we retain your data
We retain personal data for no longer than is necessary for the purposes for which it is processed, unless applicable law and/or regulations requires storage for a longer period of time.
You may contact us at any time to delete your data, and we will do so, providing this does not result in any violations of legal requirements or statutes.
What rights you have over your data
In order to customize content for you on the website, and provide you the most tailored and useful experience, you will have the opportunity to interact with filters and guiding tools to identify relevant content on the platform. These tools may ask you questions about your stress responses, situations you have encountered, past experiences, etc. The purpose of these questions is to identify the most useful practices to support your well-being. Our data collection practices and data security are compliant with HIPAA and the HITECH Act. While this site is not a medical site, and is not providing medical advice, and not a therapeutic site, and is not providing therapy, the privacy of your data is of great importance to us. Our website tracks and tags these filters to provide you relevant content. If you have an account on this site you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
You may update certain account information you provide to us (such as your password, name and email address) by logging into your account or contacting us through our Help Center at firstname.lastname@example.org. If you wish to disable your account, please contact us at email@example.com, but note that we retain certain information when required or permitted by law. We also retain cached or archived copies of information about you for a certain period of time.
You may opt out of receiving promotional emails from Restorative Practices by following the instructions in those emails or by logging into your account. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
Information for Individuals in Switzerland, UK and the EEA
The sections below apply to you if you use our Services while in Switzerland, the United Kingdom or the European Economic Area (collectively, “Europe”).
How we process your data
When we process your personal data we will only do so in the following situations:
- As necessary to perform our responsibilities under our contract with you (like processing payments and providing the products or services you have requested);
- When we have a legitimate interest in processing your personal data, including to communicate with you about changes to our Services, to help secure and improve our Services (including to prevent fraud) and to analyze use of our Services;
- As necessary to comply with our legal obligations; and
- When we have your consent to do so.
Data Subject Requests
Subject to certain limits and conditions provided under law, you have the following rights:
- You have the right to access personal data we hold about you and to ask that your personal data be corrected, erased, or made available in a portable form.
- You also have the right to object to certain processing (like receiving direct marketing), or request that we restrict processing in certain circumstances.
- When we ask for your consent, you may withdraw that consent at any time.
- You have the right to file a complaint regarding our data protection practices with a supervisory authority. Please see the following for contact details: https://edpb.europa.eu/about-edpb/board/members_en. If you are in Switzerland, please visit this FDPIC site for contact details: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
If you would like to exercise any of these rights and can’t do so directly via the Services or your device, you may contact us as indicated below.
How we protect your data
All personal health data (PHI) that you enter into the website is held in a HIPAA compliant database. This allows us to lawfully store, transmit, and otherwise process protected health information. Our database management protocols and data protection satisfies the applicable subcontracting requirements under HIPAA and the HITECH Act. All wellness professionals utilizing the platform with their clients/patients, are governed in their use of PHI by our HIPAA Business Associate Agreement.
Restorative Practices is based in the State of California in the United States and processes information in the United States, which may not provide equivalent levels of data protection as your home jurisdiction.
Information for California Residents
This section provides additional disclosures required by the California Consumer Privacy Act (or “CCPA”).
In the last 12 months, we collected the following categories of personal information: identifiers (such as name, contact information and device identifiers), internet or other electronic network activity information (such as browsing behavior), approximate geolocation data, inferences (such as approximate location or product interests) and other personal information (such as payment method information, user credentials or health-related information). For more details about the personal information we collect, including the categories of sources, please see the “What information we collect” section above. We collect this information for the business and commercial purposes described in the “How we use your data” section above. We share this information with the categories of third parties described in the “Who we share your data with” section above.
Subject to certain limitations and exceptions, the CCPA provides California consumers the right to request to know more details about the categories and specific pieces of personal information, to delete their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
We do not “sell” the personal information we collect (and will not sell it in the future without providing a right to opt out).
California consumers may make a rights request by emailing us at firstname.lastname@example.org We will verify your request by asking you to provide information that matches information we have on file about you. Consumers can also designate an authorized agent to exercise these rights on their behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.