Nature's Heart
Healing Arts

Privacy Policy

Who is collecting this data?
Nature’s Heart is the business of Tracey Lewindon and operates from Maple Ridge, British Columbia, Canada. In carrying out my business, it is necessary to obtain personal information (data) from you. Your privacy is important to me and this privacy policy explains what data I collect and why, and how it is used.


For clarity; I may operate as both the controller (gatherer) and processor (keeper) of this data. 

When you provide me with your data, you are confirming to me that you are over 13 years of age. 



What Data do I collect and why?
I collect data for communication purposes. This includes information that you give me through e-mail, phone, text, or through social media messaging or posting.  Examples of this data are your name, e-mail address, and phone number. This data allows me to communicate with you and falls under the legitimate interest of completing your request, as well as record-keeping. 

I collect data related to purchases. This comes from purchases you make and I keep this data for the purpose of completing the transaction of products or services as well as for recording the transaction. This data may include your name, phone number, address, email address, and purchase details.  Financial details are not held by me but by other providers such as PayPal or Banks (for e-transfers). 

I collect administrative and technical data. This is to allow me to provide you with content on my website and to properly operate the website. While this technical knowledge is beyond my scope, and I am told that I do not use analytics or additional data beyond what is needed to properly function this website. Then there are cookies…what I know about these is that they help to make the website work. And they are not chocolate. You have control over how much information your computer provides in your browser settings and this is where you can block cookies. Blocking cookies can mean that you are not able to enjoy all that the website has to offer. 

I collect marketing data. This allows me to know your preferences for what kind of marketing you want and how you would like it delivered (e-mail, social media, mail). This data allows me to deliver appropriate content and advertising to you and to understand what is effective marketing. This also falls under the legitimate interest of me knowing what is relevant and desired content so that I can grow my business.

I may use any or all of this data named above to deliver relevant content on my website and advertisements to you, which includes Facebook and social media advertisements. It also may be used to determine the effectiveness of marketing campaigns, as well as to send other marketing communications to you (such as newsletters), where I have legitimate interest in growing my business or have your consent. 

I do not collect any Sensitive data from you. Sensitive data describes information giving details on race or ethnicity, political or philosophical beliefs, religious or spiritual beliefs, trade union membership, or information on health or genetics. Processing of such data requires explicit consent. Sensitive data processing would only be relevant to private personal consultation situations where explicit consent would be required in order to process the data to fulfill our contract, and such data should only be given to me in a private consultation.

I only use your data for the purpose it was collected for, or for a reasonably comparable one.  



How do I collect this data?
Personal data is collected when you give it to me directly in ways such as completing a sign-up form, sending me an e-mail or Facebook message, or through a private consultation. It may also be provided to me by advertising networks such as Facebook, payment providers such as PayPal, or delivery services such as MailChimp. 


Do I share this data?
Occasionally disclosure or sharing of your personal data is necessary for the purpose of technical support for the website; for professionals like lawyers, insurers, or auditors; for government regulations requiring reporting of transactions (such as tax reporting); or third-parties who take care of part of my business (such as MailChimp). The third-parties I share with are only those who are necessary for the operation of a specific part of my business, such as delivering newsletters, and they protect your information with passwords and their own privacy policy which adheres to the law.  


How can you stop receiving marketing communications?
You are free to opt out of marketing communications at any time.  The lawful grounds of me processing your data for the purpose of marketing is either your consent given when you gave me your information, or my legitimate interest in growing my business. You may opt out of these communications by clicking on the ‘unsubscribe’ link at the bottom of each e-mail.  You may also contact me directly at tracey@naturesheart.ca.


How do I keep your data safe?
I have measures in place to protect your information from being lost, altered, disclosed, or accessed without authorization. Your e-mail data is stored under password protection by MailChimp, a secure service who maintains security and confidentiality of this information. Payment processing information is held by PayPal or your financial institution and is held under their agreement with you. I do not have access to this information. Any data obtained through a private consultation session is held confidential and secure as per professional standards and codes of ethics. I take all reasonable measures to ensure the safety of your information, and unfortunately no measures can be guaranteed to be 100% secure. As such, I cannot 100% guarantee the security of your data. Should a data breach occur, I will fulfill legal obligation in notifying you and any regulators, as required. 


For how long will I keep your data?
I will only keep your data for as along as required to satisfy the purpose for which it was collected. This includes any legal or accounting purposes, and the 7 years required for tax purposes. 



What else?

You understand that this site operates in Canada and that Canadian privacy laws may differ from those in other jurisdictions such as the EU. 


You have the right to request access to or deletion of your information. You can request this at no charge by contacting me at tracey@naturesheart.ca. I will respond to legitimate requests within 30 days and reserve the right to ask for specific information from you to verify identity before releasing any personal information. I also reserve the right to charge a reasonable fee should your request be unfounded or excessive, and I can refuse to comply with this request in such cases. In cases where I am unable to delete your information, I will communicate this to you and tell you the reason. 


Links on this website to other places on the internet are beyond my control and outside the realm of this privacy policy. The links are there because I think they might have something of value to you. You understand that by clicking on these links you are moving outside of my website and this privacy policy.

By using this website, you are agreeing to the terms set out in this privacy policy.  

If you have questions or concerns about this privacy policy, please contact me at tracey@naturesheart.ca.

This privacy policy was last updated on May 25, 2018.