Privacy Policy

At Aligned with Nature (“we”, “us”, “our”, “the company”), operated by Marlo Lifestyle LLC based in St. Cloud, FL, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what your rights are.

By using our website alignedwithnature.us and our services, you agree to the practices described in this policy.

1. Who we are

• Data controller: Marlo Lifestyle LLC
• Address: 7465 Wing Span Way, St. Cloud, FL
• Contact email: legal@alignedwithnature.us
• Website: alignedwithnature.us

2. Information we collect

2.1 Information you provide directly

• Contact details: first name, last name, email, phone, country, time zone.
• Health and lifestyle information: when you complete post-purchase intake forms, we may collect (voluntarily provided by you): age, declared health conditions, medications and supplements, sleep habits, diet, exercise, wellness goals, lab results you choose to share.
• Payment information: handled directly by Stripe (we don’t store credit card numbers in our systems).
• Communication content: emails, WhatsApp messages, form submissions.

2.2 Information collected automatically

• Technical data: IP address, browser type, operating system, preferred language.
• Usage data: pages visited, time on page, links clicked, referrer.
• Cookies and similar technologies: see section 7.

2.3 Information from third parties

• Cal.com: when you book an appointment, we receive the data you provide on their platform.
• MailerLite: if you subscribe to our newsletter, your subscription is managed through their service.
• ManyChat: if you interact with our chatbot, ManyChat handles the conversation.
• dōTERRA: if you purchase through our affiliate links, dōTERRA handles the transaction and shares limited commission information with us.

3. Legal basis for processing your data (GDPR)

For users in the European Union and European Economic Area, we process your data under the following legal bases:

• Consent (Art. 6.1.a GDPR): for newsletter, non-essential cookies, marketing communications.
• Contract performance (Art. 6.1.b): to deliver the services you purchase.
• Legal obligation (Art. 6.1.c): to comply with tax and accounting regulations.
• Legitimate interest (Art. 6.1.f): for site security and fraud prevention.

For health data (special category under Art. 9 GDPR), we process only with your explicit consent when you complete intake forms.

4. How we use your information

• To deliver the services and programs you purchase.
• To personalize recommendations based on your specific situation.
• To process payments (via Stripe).
• To send appointment reminders, preparation instructions, and post-session follow-up.
• To send the newsletter (only if you subscribe).
• To respond to your inquiries.
• To improve the site and services.
• To comply with legal and accounting obligations.
• To detect and prevent fraud.

We never sell your personal information to third parties.

5. Who we share your information with

We share information only as strictly necessary with the following service providers, which meet security and privacy standards:

Each of these providers has its own privacy policy that we recommend reviewing.

Additionally, we may disclose information if:

• Required by law, subpoena, or government order.
• Necessary to protect our legal rights or safety.
• A merger, acquisition, or sale of assets occurs (we will notify you in advance).

6. International transfers

Some of our providers are located outside the European Economic Area. When we transfer data to the USA, we do so under the Standard Contractual Clauses approved by the European Commission or under the EU-US Data Privacy Framework when the provider is certified.

7. Cookies and similar technologies

We use cookies for:

• Necessary (always active): keep your session, remember preferred language, security.
• Analytics (opt-in): understand how the site is used (without identifying individuals).
• Marketing (opt-in): personalize content and measure campaign effectiveness.

You can manage your preferences at any time from the site’s cookie banner or your browser settings.

Third-party cookies that may activate based on your interaction:

• Stripe (payment processing)
• Cal.com (booking)
• Google Analytics (if enabled in the future, with your consent)
• Meta Pixel (if enabled for IG/FB campaigns, with your consent)

8. How long we keep your information

• Customer account information: as long as you have an active relationship with us + 7 years (US tax obligations).
• Health information declared in intake: duration of the relationship + 3 years, unless you request deletion sooner.
• Email communications: 3 years.
• Marketing data (newsletter): until you unsubscribe + 30 days.
• Technical logs: 90 days.
• Cookie data: depending on type, from 1 day to 13 months maximum.

9. Your rights

9.1 For all users

• Access the data we have about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”), with legal exceptions.
• Opt out of marketing use at any time.

9.2 For EU users (GDPR)

Additionally:

• Portability of your data to another provider.
• Restriction of processing.
• Withdraw your consent at any time.
• File a complaint with a supervisory authority.

9.3 For California residents (CCPA/CPRA)

• Know what personal information we collect, use, share.
• Request deletion.
• Opt out of sharing your personal information (we don’t sell it in any case).
• Not be discriminated against for exercising these rights.

9.4 How to exercise your rights

Send an email to legal@alignedwithnature.us clearly indicating which right you want to exercise. We will respond within 30 days maximum (45 if the request is complex). We may request identity verification before processing the request.

10. Data security

We implement reasonable technical and organizational measures to protect your information:

• Encryption in transit (HTTPS / TLS 1.2+).
• Encryption at rest in databases.
• Restricted access to authorized personnel.
• Regular backups.
• Two-factor authentication on administrative accounts.

No system is 100% secure. In the event of a breach affecting your data, we will notify you without undue delay and within 72 hours maximum when GDPR applies.

11. Minors

Our services are directed at individuals 18 and older. We do not knowingly collect information from minors under 16. If you discover that a minor has provided us with information, contact us to delete it.

12. Changes to this policy

We may update this Privacy Policy. We will notify material changes by email (if we have your contact) and/or via prominent notice on the site. The “last updated” date indicates the current version.

13. Contact

For any questions or requests regarding privacy:

• Email: legal@alignedwithnature.us
• Postal mail: Marlo Lifestyle LLC, 7465 Wing Span Way, St. Cloud, FL

This policy is also available in Spanish / Versión en español.