Willow Moon Enchantments ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book services, purchase products, or otherwise interact with us.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.
1. Information we collect
- Information you provide directly. When you book a session, complete our intake form, purchase products, or contact us, you may provide personal information including your name, email address, phone number, mailing address, health history, medical conditions, medications, sensory preferences, trauma history, and any other information you choose to share.
- Automatically collected information. Our website does not run analytics software. Our hosting and infrastructure providers may log standard technical information, including your IP address, browser type, and pages requested, for security and operational purposes.
- Pocket Willow chat. We save chat messages, a conversation identifier, and the page address and title with the conversation so we can provide replies and review support requests. Recent messages are sent through Vercel AI Gateway to the AI model provider configured for Pocket Willow to generate a reply. Please do not enter private medical details or other sensitive information in chat. If you leave a support note, we also save the name, email address, and message you provide.
- Browser storage. Pocket Willow uses session storage in your browser to retain the conversation and its identifier during your visit. Closing a browser tab does not delete the conversation saved in our support records.
- Reading preparation. The reading tools can use Anthropic to identify card photos and help prepare drafts. When Willow uses those tools, the information sent can include your first name, question, optional context, reading choice, and card information or photos. Reading requests and prepared files are saved so Willow can review and deliver them.
- Abuse prevention. We record a hashed network identifier and request times to limit abusive requests.
- Cookies and tracking technologies. Our website does not use advertising cookies, tracking pixels, or similar tracking technologies. If this changes, this policy will be updated before any such technology is introduced.
- Payment information. Payment processing is handled by Stripe, a third-party payment processor with its own privacy policy. For physical product orders, Stripe also collects your shipping address on our behalf. We do not store full credit card information.
2. How we use your information
- To provide, maintain, and improve our services and products
- To schedule and conduct sessions, consultations, and appointments
- To process payments and send transactional communications
- To understand your health history, accessibility needs, and trauma awareness so we can provide trauma-informed, neurodivergent-affirming, and personalized care
- To communicate with you about appointments, services, updates, and promotional offers (with your consent)
- To respond to your inquiries and customer support requests
- To comply with legal obligations
- To protect against fraud and other illegal activity
3. Who we share your information with
Your information is shared only when necessary and always with your privacy in mind.
- Internal team. Information on your intake form is shared between Willow Rose and Levee for the purpose of your care coordination and session planning. Both maintain confidentiality.
- Payment processors. Payment information is processed by Stripe, our third-party payment processor. We do not store full credit card information.
- Service providers. We may share information with service providers who assist us in operating our website, processing bookings, or managing our business. These currently include Vercel (website hosting and AI Gateway), the AI model provider configured for Pocket Willow (chat replies), Anthropic (reading preparation tools), Supabase (data storage), Resend (transactional email delivery), Shippo (shipping rate calculation using your postal address), and Calendly (appointment scheduling). Public pages also request fonts from Google Fonts, which receives the technical information sent with those requests. Google Fonts is separate from Google Analytics.
- Legal compliance. We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to comply with legal obligations, protect our rights, or protect the safety of others.
- No sale of data. We do not sell, trade, or rent your personal information to third parties.
4. Data security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include secure data encryption, password-protected systems, and restricted access to confidential information.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
5. Data retention
We retain your personal information for as long as necessary to provide our services, fulfill the purposes outlined in this policy, and comply with legal obligations. Session notes, intake forms, and health records are retained in accordance with best practices for therapeutic and wellness practices.
You may request deletion of your information at any time, subject to legal and therapeutic record-keeping requirements.
6. Your privacy rights
Depending on your location, you may have the following rights regarding your personal information:
- Right to access. You have the right to request access to the personal information we hold about you.
- Right to correction. You have the right to request that we correct any inaccurate or incomplete information.
- Right to deletion. You have the right to request deletion of your personal information, subject to therapeutic and legal record-keeping requirements.
- Right to opt out. You have the right to opt out of marketing communications and certain data processing activities.
- Right to portability. You may request a copy of your information in a portable format.
To exercise any of these rights, please contact us using the information provided in the Contact section below.
7. Confidentiality
Information shared during sessions and in intake forms is treated as strictly confidential. We maintain strict confidentiality except in the following circumstances:
- When required by law or court order
- When there is imminent risk of harm to you or others
- When child abuse, elder abuse, or dependent adult abuse is suspected
- When you explicitly authorize disclosure
In situations where we are required to break confidentiality, we will notify you of the disclosure unless legally prohibited from doing so.
8. Third-party links and services
Our website may contain links to third-party websites, including social media platforms, payment processors, and external resources. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing personal information.
9. Children's privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child has provided us with personal information, we will take steps to delete such information.
10. International users
Willow Moon Enchantments is operated in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your home country.
11. California privacy rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, used, and shared, the right to delete, the right to opt out of the sale of personal information, and the right to non-discrimination for exercising your rights.
We do not sell personal information. For more information about your CCPA rights, please contact us.
12. Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services following the posting of revisions constitutes your acceptance of those changes.
13. Contact us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your information, please contact us:
Willow Moon Enchantments
Morristown, NY (St. Lawrence County)
Email: hello@willowmoonenchantments.com
You can also reach us through our contact form. We will respond to your request within 30 days or as required by applicable law.
14. Grievance mechanism
If you believe your privacy rights have been violated, please contact us first so we can address your concerns. If you are not satisfied with our response, you may file a complaint with the appropriate data protection authority in your jurisdiction.
By using Willow Moon Enchantments' website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.