Privacy Policy

1. Who we are

The Rooted ADHD Family Journey ("we," "us," or "our") is an online membership and coaching business operated by Laurie [Last Name], based in the United States. Our website is rootedADHDfamily.com.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, download our free resources, or become a member of the Rooted ADHD Family Journey.

If you are located in the European Economic Area (EEA), United Kingdom, or Canada, additional provisions apply to you — please see Sections 4, 10, and 11 below.

2. What information we collect

Information you give us directly

• First name and email address when you download our free guide or join our email list
• Name, email address, and billing information when you purchase a membership
• Any information you share when you contact us, reply to our emails, or participate in coaching sessions or community discussions

Information collected automatically

• IP address, browser type, operating system, and device type when you visit our website
• Pages visited, time spent on pages, links clicked, and referring website
• Cookie data (see Section 7 for details)

Information from third parties

• Payment information processed by Stripe or PayPal (we do not store your full card details — see Section 6)
• Basic account information if you connect via a social media platform

3. How we use your information

We use the information we collect to:

• Deliver the free guide, resources, or membership content you requested
• Send the email sequence you opted into and ongoing communications about your membership
• Process payments and manage your membership account
• Respond to your questions, requests, and support needs
• Send you relevant content, updates, and offers related to the Rooted ADHD Family Journey (you can opt out at any time)
• Improve our website, content, and membership experience
• Comply with legal obligations

We will never use your information for purposes unrelated to the services you signed up for without asking for your permission first.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent — when you opt in to our email list, download a free resource, or agree to receive marketing communications. You may withdraw consent at any time by unsubscribing.
• Contract performance — when processing is necessary to deliver the membership or services you have purchased.
• Legitimate interests — for analytics, improving our services, and communicating with existing members about their membership, where this does not override your rights.
• Legal obligation — when we are required to process data to comply with applicable law.

You have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Who we share your information with

We do not sell your personal information. Ever. We share your information only with the following categories of trusted service providers, and only to the extent necessary to operate our business:

Email marketing platform

We use an email marketing platform (such as MailerLite, ConvertKit, or ActiveCampaign) to send emails. Your name and email address are stored in this platform. These providers are bound by their own privacy policies and data processing agreements.

Membership platform

We use Membership.io to host and deliver the Rooted ADHD Family Journey membership. Your account information is stored on their platform in accordance with their privacy policy.

Payment processors

Stripe and PayPal process payments on our behalf. Please see Section 6 for details.

Analytics

We may use analytics tools (such as Google Analytics) to understand how visitors use our website. This data is aggregated and anonymized where possible.

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of our business or others.

6. Payment processing

All payments are processed by Stripe and/or PayPal. We do not store your full payment card details on our servers — these are handled directly by our payment processors in a PCI-DSS compliant environment.

When you make a purchase, you are also subject to the privacy policies of Stripe ( stripe.com/privacy ) and/or PayPal ( paypal.com/privacy ).

We retain limited transaction data (amount, date, membership type) for accounting and legal compliance purposes.

7. Cookies and tracking

Our website uses cookies — small text files stored on your device — to help our website function and to understand how it is used. We use the following types:

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — help us understand how visitors use our site so we can improve it. You may opt out of these.
• Marketing cookies — may be used to track the effectiveness of our advertising. You may opt out of these.

If you are located in the EEA or UK, we will ask for your consent before setting non-essential cookies in accordance with applicable law. You can manage your cookie preferences through your browser settings at any time.

8. How long we keep your data

• Email subscribers — we retain your data for as long as you remain subscribed. If you unsubscribe, we remove your email from our active list within 30 days, though we may retain a suppression record to ensure we do not email you again.
• Members — we retain your account information for the duration of your membership and for up to 7 years afterward for legal and accounting purposes.
• Payment records — retained for a minimum of 7 years as required by tax and accounting law.
• Website analytics data — typically retained for 26 months or as configured in our analytics platform.

You may request deletion of your data at any time — see Section 9 for your rights.

9. Your rights

Depending on your location, you have some or all of the following rights regarding your personal data:

• Access — the right to request a copy of the personal data we hold about you
• Correction — the right to request that we correct inaccurate or incomplete information
• Deletion — the right to request that we delete your personal data ("right to be forgotten")
• Restriction — the right to request that we restrict processing of your data in certain circumstances
• Portability — the right to receive your data in a structured, machine-readable format
• Objection — the right to object to processing based on legitimate interests or for direct marketing
• Withdraw consent — the right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@rootedADHDfamily.com. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you are located in the EEA or UK and believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

10. US state privacy rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete your personal information
• The right to opt out of the sale of your personal information — we do not sell personal information
• The right to non-discrimination for exercising your privacy rights
• The right to correct inaccurate personal information
• The right to limit the use and disclosure of sensitive personal information

In the past 12 months, we have collected the categories of personal information described in Section 2 of this policy. We do not sell personal information to third parties.

To submit a request under the CCPA, contact us at hello@rootedADHDfamily.com with the subject line "California Privacy Request."

Other US states including Virginia, Colorado, Connecticut, and Texas have enacted similar privacy laws. We honor rights requests from residents of those states as well.

11. Canadian users (PIPEDA)

If you are located in Canada, your personal information is handled in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We collect, use, and disclose your personal information only with your knowledge and consent, and only for the purposes identified in this policy. You have the right to access your personal information and to challenge its accuracy. To make a request, contact us at hello@rootedADHDfamily.com.

Your data may be transferred to and processed in the United States, which may have different data protection laws than Canada. By using our services, you consent to this transfer.

12. Children's privacy

Our services are intended for adults — specifically parents and caregivers of children with ADHD. We do not knowingly collect personal information from anyone under the age of 18.

If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@rootedADHDfamily.com and we will delete it promptly.

13. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. These measures include secure HTTPS connections, limited access to personal data, and use of reputable third-party platforms with their own security standards.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you by email (if you are a subscriber or member) and update the "Last updated" date at the top of this page.

Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated policy.

15. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: