Privacy Policy

Kristal Norton respects your privacy and we are committed to protecting it.

This Privacy Policy is designed to explain how we collect, use, share, and protect the information we may collect from you or that you may provide to us when you access our websites, purchase our goods or services, or engage with us on social media, as well as your own rights to the information we collect.

The terms “we,” “us,” and “our” refers to the business of Kristal Norton. The terms “user,” “you,” and “your” refer to site visitors, customers, and any other users of our Website(s). The term “Website(s)” refers to any of our online websites, including, without limitation, kristalnorton.com, creativesoulcircle.com, and any sub-domains of these sites.

The term “Service” refers to anything our business offers and provides to you including but not limited to our blog, videos, digital products, digital classes, membership site, email newsletters, email e-courses, in person classes and retreats, coaching services, email marketing and such.

We use your data to provide and improve our Websites and Services. This Privacy Policy applies to all site visitors, customers, and all other users of our Website(s). By using any of our Websites, you agree to the collection and use of information in accordance with this policy. If you do not want to agree to the Privacy Policy, you must not access or use our Websites.

INFORMATION THAT WE COLLECT

We only collect information about you if we have a reason to do so; for example, to provide our Services, to communicate with you, or to make our Websites and Services better. We collect a variety of information from you when you visit our Website(s), make purchases, or interact with us on social media. The information we collect may include:

Personal Data: Personal Data is information that can be used to identify you specifically, including but not limited to, your name, shipping address, email address or demographic information like your age or gender. While using our Website(s) and Services, we may ask you to provide us with certain Personal Data to fulfill your request for any Services. You consent to giving us this information by providing it to us voluntarily on our Website(s) or through communications with us. You provide some of this information when you register with or make purchases from our Website(s). You may also provide this information by participating in various activities associated with us, including responding to blogs, contacting us with questions, or participating in group training. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our Website(s) or from making purchases.

Usage Data: Like most websites, we automatically collect information that web browsers, mobile devices, and servers typically make available when you access our Website(s). This can include information such as your computer’s Internet Protocol address (e.g. IP address) which we may use to determine the approximate location of your device, as well as browser type, unique device identifiers, language preference, referring site, the dates and times of access, and the specific pages you view. The information we collect automatically is used for statistical data and will not include personal information. We use this data to improve our Website(s) and provide the highest possible level of service to you. To the extent that you voluntarily provide personal information to us, our systems will associate the automatically collected information with your personal information.

Transaction and Billing Information: If you buy something from us – a class, coaching, digital good, or a subscription to our membership community, for example – you will be asked to provide personal information that is required to process the transaction such as your name and contact information. To process your payment, we use third-party services (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processor (PayPal) whose use of your personal information is governed by their Privacy Policy.

Social Networking Data: We may access personal information from social networking sites and apps, including Facebook, Instagram, Mighty Networks or other social networking sites or apps not named specifically here, which may include your name, your social network username, location, email address, age, gender, profile picture and any other public information. If you do not want us to access this information, please go to the specific social networking site and change your privacy settings.

Mobile Device Data and Application Information: If you connect with us or join one of our groups on any social networking sites, including but not limited to Facebook or Mighty Networks, and use their mobile application, we may access information that these third-party apps request from you and disclose to us. Please review the respective Privacy Policy for each application you choose to use to determine how they use, disclose, and protect your data.

Other data: On occasion, you may give us additional data in order to enter into a contest or giveaway or to participate in a survey. You will be prompted for this information and it will be clear that you are offering this kind of information freely in exchange for an entry into such a contest or giveaway. If you choose to correspond with us through email or social media and offer any other information to us voluntarily, we may retain the content of your messages together with your contact information and our responses.

Information from Cookies & Other Technologies: A cookie is a small file, which often includes an anonymous unique identifier, that a website stores on a visitor’s computer, and that the visitor’s browser provides back to the website each time the visitor returns. Pixel tags (also referred to as web beacons, clear gifs, and single-pixel gifs) are small blocks of code placed on websites and emails that track actions visitors take. Like most other websites, we make use of cookies and other technologies like pixel tags. We may use them to authenticate your identity, to determine if you are logged onto our Website(s), for personalization, for security, for targeted advertising, or for analysis of the performance of our Websites and Services to improve the quality. Most browsers are set to accept cookies by default. If you wish to disable cookies, you may do so through your individual browser options. However, this may affect your ability to use or make purchases from our Website(s). By continuing to use our Website(s), you are consenting to our use of cookies, pixels and other tracking technologies in accordance with the terms of this policy.

Website Analytics: Third-party analytic companies such as Google Analytics and Facebook Insights that we may parter with may also use cookies or other tracking technologies to analyze visitors’ use of our Website(s) to determine the popularity of the content, and better understand online activity. We do not transfer personal information to these third-party vendors. However, in order to access our Website(s), you must consent to the collection and use of your information by these third-party analytic companies. You should review their Privacy Policy and contact them directly if you have questions.

HOW WE USE YOUR INFORMATION

Your information allows us to offer you certain products and services, including the use of our Website(s), to fulfill our obligations to you, to customize your interaction with us and our Website(s), and to allow us to suggest other products and services we think might interest you.

Examples on how we may use the information and data described above are:

    ▷ To provide and maintain our Website(s) and Services

    ▷ To create and administer your account

    ▷ To deliver any products or services purchased or requested by you to you

    ▷ To notify you of updates to our products and services that you have purchased or requested

    ▷ To correspond with you and/or to provide customer support

    ▷ To carry out any contract between you and us

    ▷ To process payments or refunds

    ▷ To interact with you via social media

    ▷ To deliver targeted advertising

    ▷ To resolve disputes and troubleshoot any problems

    ▷ To compile anonymous statistical data for our own use or for a third-party’s use

    ▷ To assist law enforcement as necessary

    ▷ To prevent fraudulent activity on our Website(s)

    ▷ To monitor the usage of and analyze trends to improve our Website(s) and Services

DISCLOSURE OF DATA

We may disclose aggregated information about our Website(s) visitors (information that is not identifiable to you) without restriction. (For example, to conduct general business analysis to improve our Website(s) or for third-party advertising companies like Facebook and Instagram to run and manage our ads.)

We may disclose information that can be directly tied to you:

    ▷ To contractors, affiliates, service providers and other third-parties that we reasonably use to support our business

    ▷ To fulfill the purpose for which you provide it
    ▷ To fulfill any other purpose disclosed by us when you provide the information
    ▷ To process your payment, including refunds, complaints, queries with Paypal.com only to the degree necessary

We may also disclose your personal information in rare cases:

    ▷ To comply with any court order, law or legal process, including to respond to any government or regulatory request
    ▷ To enforce our terms of service or any other agreements between us, including for billing and collection purposes
    ▷ If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our customers or others. For example, exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
    ▷ To a successor in the event that our company is sold, goes out of business or enters bankruptcy. Such a successor is not bound by our Privacy Policy and may have its own. You will be notified in the event of any such transfer.

If you join our Facebook group, or our Mighty Networks group and/or interact with others within these groups, such as participating in a group chat or a group online course, other users may have access to some of your data, including your name, profile, and your history of interaction with us, such as prior comments or posts. We ask that all members of our groups respect the privacy of all members and to not share any information of a personal nature externally.

When you comment on our public Website(s), your posts may be viewed by others, and we may distribute your comments outside the Website.

LEGAL BASIS

The legal basis for collecting, using, disclosing, and/or processing of your data is both your consent, and our need to conduct our legitimate business interests. The use is necessary in order to administer, maintain, and improve our Websites and Services, to enter into contracts with you, to fulfill the terms of those contracts, to keep records of our transactions and interactions, to be able to provide you with goods and services, to comply with our legal obligations, to obtain professional advice, and to protect the rights and interests of our company, our customers (including you), and any third-parties.

RETENTION OF DATA

We retain personal data as long as it is needed to conduct our legitimate business purposes, resolve disputes, or to comply with our legal obligations, or until you ask us to delete your data. For example, we will retain certain personal information indefinitely for the purposes of maintaining your account, unless and until you delete your account. Data that we gather for a specific and particular purpose, such as assisting law enforcement or analyzing trends, will not be kept for longer than is necessary for that particular purpose. Data that is no longer needed by us will be permanently deleted.

DATA SECURITY AND INTERNATIONAL TRANSFERS

We take all reasonable steps to protect your personal data and ensure the security of the information you provide to us and the information we collect automatically. This includes using standard security protocols and working only with reputable third-party vendors.

However, no security measure is foolproof, and no method of data transmission can be guaranteed against interception or misuse. While we make every effort to protect your personal information shared with us through our Website(s), you acknowledge that the personal information you voluntarily share with us through our Website(s) could be accessed or tampered with by a third-party. You agree that we are not responsible for any intercepted information shared through our Website(s) without our knowledge or permission. Additionally, you release us from any and all claims arising out of or related to the use of such intercepted information in any unauthorized manner.

Our operations are supported by a network of computers, cloud-based servers, and other infrastructure and information technology, including, but not limited to, third-party service providers. We and our third-party service providers store and process your Personal Data in the United States and elsewhere in the world. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. By using our Website(s) and Services, you consent to your Personal Data being transferred to other countries, including countries that have different data protection rules than your country. We do not represent that our Website(s) and services are appropriate or available in any particular jurisdiction.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website(s), you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Email is not recognized as a secure medium of communication. For this reason, we request that you do not send private information to us by email. However, doing so is allowed, but at your own risk. Some of the information you may enter on our Website(s) may be transmitted securely via a secure medium known as Secure Sockets Layer, or SSL. Credit Card information and other sensitive information is never transmitted via email.

YOUR RIGHTS

You have certain rights with respect to your personal data, as outlined below. Note, we reserve the right to request that you provide us with evidence of your identity before we take any action with respect to the exercise of your data rights. In addition, your rights may be restricted or nullified to the extent they conflict with our compelling business interests, the public interest, or the law.

Access and Update Information: You have the right to access and update your personal data. You can usually do this yourself using your account settings and tools that we offer, but if you are unable to, please contact us to make the required changes. When requesting a copy of your personal data, the first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

Change Consent: To the extent that you provided consent to our processing of your personal data (including, but not limited to, emailing you), you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent. If you wish to withdraw your consent for us to process your data, you can opt-out by emailing hello@kristalnorton.com.

Delete All Data: You have the right to request that we delete all data that we hold about you. There are exceptions to this right, such as when keeping your data is required by law, is necessary to exercise the right of freedom of expression and information, is required for compliance with a legal obligation, or is necessary for the exercise or defense of legal claims. Such a request may result in a termination of your account with us and you may have limited or no use of our Website(s) and Services.

In certain circumstances, you also have the right to:

    ▷ Request that we limit our use and processing of your personal data;
    ▷ Request that we confirm what data we hold and for what purposes;
    ▷ Object to our use and processing of your personal data; and
    ▷ Request portability of your personal data.

We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.

If you believe that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection.

EMAIL AND NEWSLETTER POLICIES

We offer the opportunity for you to volunteer information to us including, but not limited to, your name and email, to sign up for a variety of different email Services. As previously stated, our email Newsletter list (which offers periodic emails containing tips, inspiration, updates, and special offers), email e-courses, and email coaching services, all fall under the umbrella of “Services” and we offer these Services in accordance with the terms of this policy. We will only enroll you to receive our free email Newsletter if you affirmatively consent to it.

All e-mails sent from us will clearly state who the e-mail is from and provide clear information on how to contact the sender. In addition, all e-mail messages will also contain a link and concise information to unsubscribe from any future communications via email.

CHILDREN UNDER THE AGE OF 18

Our Website(s) are not intended for use by children under 18 years of age, and we do not knowingly solicit personal data from anyone under age 18. If you are under age 18, do not access or use our Website(s) or related products or services. If you become aware that we have collected data of anyone under the age of 18, please contact us so that we may delete that data.

LINKS TO OTHER SITES

Our Website(s) may contain hyperlinks to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s site. Although we use reasonable care when including a hyperlink on our own web page, we do not regularly monitor the websites of these third-parties, and are not responsible for any damage or consequences you suffer by using these hyperlinks. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

SEVERABILITY

If any part of this Privacy Policy is deemed unlawful and/or unenforceable, all other provisions contained herein will remain in full force and effect.

CHANGES TO THIS POLICY

We reserve the right to modify this Policy at any time, so please review it frequently. We will alert you to any changes to this Policy by changing the “last updated” date at the bottom of this Policy. Any changes become effective immediately upon publication on our Website, and you waive specific notice of any changes to the Policy by continuing to use and access our Website(s). You are deemed to have accepted any changes to any revised Privacy Policy by your continued use of our Website(s) after the revised Privacy Policy is posted.

CONTACT INFORMATION

If you have questions about this Privacy Policy, please contact us via email at hello@kristalnorton.com with “Privacy Policy” in the subject line.

Last Updated: May 23, 2018