Privacy Policy

Last updated: August 28, 2026

This Privacy Policy describes how All Tree Roots, LLC (“All Tree Roots,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you visit alltreeroots.com (the “Site”), make a purchase, subscribe to our emails, attend or inquire about an event, contact us, or otherwise interact with us.

PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us.

Device and usage information. When you visit the Site, we may automatically collect information such as your IP address, browser and device type, operating system, time zone, referring and exit pages, pages or products viewed, dates and times of visits, clicks, scrolling behavior, mouse movements, and other information about how you interact with the Site.

We collect this information through technologies such as:

  • Cookies, which are small data files placed on your device. You can manage cookies through your browser settings. For more information, visit allaboutcookies.org.
  • Log files, which record activity on the Site and may include IP address, browser type, internet service provider, referring and exit pages, and timestamps.
  • Web beacons, tags, pixels, and similar technologies, which help us understand Site and email activity.

Order information. When you make or attempt to make a purchase, we may collect your name, billing and shipping addresses, email address, telephone number, order details, and payment-related information. Payment information is processed by our payment providers, including Stripe. We do not intentionally store full payment card numbers.

Newsletter and email preference information. When you subscribe to our newsletter or use our email preference center, we collect your email address and, if you provide them, your first and last name. We also collect the communications you choose to receive, including sound bath events, community markets, blog and resource updates, and product news and offers. We may record the page or form through which you subscribed, your subscription and unsubscribe status, and changes you make to your preferences.

Email delivery and engagement information. When we send email, we may collect information such as whether a message was delivered, bounced, opened, or whether a link was clicked. Marketing emails may use a small tracking image and tracked links for this purpose.

Preference-center security and verification information. Our preference links use an opaque identifier to locate your preferences without placing your email address in the link. When you use the preference center, we process limited link, session, request, and verification information to authenticate the request, prevent misuse, save your choices, and verify requested email-address changes. These links and sessions expire.

Communications and information you provide. If you contact us, submit a form, register for an event, request support, or otherwise communicate with us, we collect the information you choose to provide.

In this Privacy Policy, “Personal Information” refers collectively to the information described above and any other information that identifies, relates to, describes, or can reasonably be linked with an individual.

HOW WE USE PERSONAL INFORMATION

We use Personal Information to:

  • process and fulfill orders, arrange shipping, provide invoices and order confirmations, and provide customer service;
  • communicate with you and respond to questions or requests;
  • send the newsletters, event information, resources, product news, offers, and autoresponders you request;
  • personalize and segment email content based on your selected preferences and signup context;
  • administer subscriptions, preference changes, unsubscribe requests, and suppression records;
  • verify requested email-address changes and protect the preference center from unauthorized use;
  • screen transactions and activity for security, fraud, abuse, and other risks;
  • measure email deliverability and engagement and improve our communications;
  • analyze, maintain, improve, and optimize the Site, products, events, and services;
  • measure marketing and advertising performance; and
  • comply with legal obligations and protect our rights and the rights of others.

EMAIL MARKETING AND YOUR CHOICES

You can change the categories of marketing communications you receive through the preference link in our emails. To stop all marketing email from All Tree Roots, use the unsubscribe link in any marketing email. We process unsubscribe requests and may retain a limited suppression record so that we can honor your request and avoid sending marketing email after you opt out.

If you request a change to your email address, we send a verification link to the new address before completing the change. Service-related or legally required communications may still be sent when permitted by law.

HOW WE DISCLOSE PERSONAL INFORMATION

We disclose Personal Information to service providers that help us operate our business, including:

  • Webflow, including Webflow Cloud, for Site hosting, ecommerce functionality, forms, the preference center, and related storage and processing;
  • Stripe, for payment processing;
  • Mailjet by Sinch, for newsletter contact and preference management, email delivery, unsubscribe processing, and delivery and engagement measurement;
  • Google Analytics (GA4), for Site analytics; and
  • Microsoft Clarity, for Site interaction and usability analytics.

These providers process information for us in connection with the services they provide. Their processing is also governed by their own privacy notices. You can review Mailjet’s privacy policy, Google’s privacy policy, and Microsoft’s privacy statement.

We may also disclose Personal Information to professional advisers, insurers, auditors, regulators, law enforcement, or other parties when reasonably necessary to comply with law, respond to lawful requests, enforce our agreements, protect rights and safety, or investigate fraud or misuse. If our business or assets are involved in a merger, acquisition, financing, reorganization, or sale, information may be disclosed or transferred as part of that transaction.

ANALYTICS AND USAGE DATA

We use Google Analytics (GA4) and Microsoft Clarity to understand how visitors interact with the Site. Depending on our settings and your device, these tools may collect usage and technical information, cookies, online identifiers, device and browser information, pages viewed, session duration, clicks, scrolling behavior, and mouse movements. We use this information to evaluate performance and improve usability and user experience.

You can learn more about Google’s practices at policies.google.com/privacy and use the Google Analytics opt-out browser add-on. You can review Microsoft’s privacy statement at privacy.microsoft.com.

BEHAVIORAL ADVERTISING

We may use information about Site activity to measure advertising or provide marketing that we believe may be relevant to you, where enabled and permitted by law. You can learn about interest-based advertising and available choices through the Digital Advertising Alliance and the Network Advertising Initiative. You may also manage advertising preferences directly with the applicable advertising platform.

DO NOT TRACK

Some browsers offer a “Do Not Track” signal. Because there is not currently a consistent industry standard for responding to these signals, the Site does not alter its practices solely in response to a Do Not Track signal. We will respond to legally recognized opt-out mechanisms where applicable law requires us to do so.

LEGAL BASES FOR PROCESSING

Where applicable data protection law requires a legal basis, we process Personal Information as necessary to perform a contract with you, based on your consent, to comply with legal obligations, and for our legitimate interests, such as operating and securing the Site, preventing fraud, improving our services, and measuring performance. Where we rely on consent for marketing, you may withdraw that consent at any time by updating your preferences or unsubscribing.

YOUR PRIVACY RIGHTS

Depending on where you live and applicable law, you may have the right to request access to, correction of, deletion of, or a portable copy of certain Personal Information. You may also have the right to withdraw consent, object to or restrict certain processing, or opt out of certain targeted advertising, sales, or profiling. We will not discriminate against you for exercising an applicable privacy right.

To submit a privacy request, email kay@alltreeroots.com. We may need to verify your identity before fulfilling a request. If we deny a request and applicable law provides an appeal right, you may appeal by emailing the same address with the subject line “Privacy Appeal.”

If you are located in the European Economic Area or another jurisdiction with a data protection authority, you may have the right to lodge a complaint with the authority in your country or region.

INTERNATIONAL DATA TRANSFERS

We and our service providers may process Personal Information in the United States and other countries where we or they operate. Those countries may have data protection laws different from those in your country. Where required, we use appropriate safeguards for international transfers.

DATA RETENTION

We retain Order Information for as long as reasonably necessary to fulfill orders, provide support, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal obligations.

We retain newsletter contact, preference, and engagement information while you remain subscribed or for as long as reasonably necessary for the purposes described in this Policy. After you unsubscribe, we may retain a limited suppression record to honor your request. Preference-center link, session, and verification records expire automatically when they are no longer needed for security or verification. Other information is retained according to the nature of the information, the purposes for which it is used, and applicable legal requirements.

SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect Personal Information. However, no internet transmission or storage system can be guaranteed to be completely secure.

MINORS

The Site is not intended for individuals under the age of 18, and we do not knowingly collect Personal Information from children under 18.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. The “Last updated” date above indicates when this Policy was most recently revised.

CONTACT US

For more information about our privacy practices, to exercise a privacy right, to ask a question, or to make a complaint, contact All Tree Roots, LLC at kay@alltreeroots.com.