Privacy Policy
PRIVACY POLICY
Last Updated: November 5, 2025 Effective Date: August 8, 2022
Plain‑Language Summary: We collect the minimum personal data needed to run our sites, fulfill your orders, provide programs and memberships, and improve your experience. We don’t sell personal information for money. We may use analytics and advertising cookies; you can control these in Cookie Settings and via Global Privacy Control (GPC). You can access, correct, delete, or opt out of certain uses of your data at any time (instructions below).
1. WHO WE ARE & SCOPE
Controller. Adora Winquist, LLC (a North Carolina limited liability company) is the controller of your personal information.
Address: 125 S Lexington Ave.
Suite 101, PMB 133
Asheville, NC 28801
United States
Email (Privacy & Requests): info@adorawinquist.com
Covered Brands & Sites. This Policy covers the following brands and domains we operate (collectively, the “Sites”):
● Tactical-Alchemy.com
● adorawinquist.com
● highvibearomatics.com
● thesoulinstitute.org
● thesoulinstitute.co
● milspecformulas.com
● evolvefrequency.com
● crystalraven.com
● opusgaia.org and any apps, subdomains, or pages we control (collectively, with our online/offline
programs and products, the “Services”).
Applicability. This Privacy Policy applies to visitors, customers, and users of our Sites and Services. By using the Sites/Services, you consent to this Policy.
2. WHAT WE COLLECT
We collect information in three ways: (A) directly from you, (B) automatically, and (C) from third parties.
A. Information You Provide
● Identifiers & Contact: name, email, phone, billing/shipping address.
● Account & Profile: username, password, preferences, program history.
● Transactions: order details, limited payment metadata (we do not store full card numbers; payments are processed by third‑party processors).
● User Content: messages, forms, reviews/testimonials, survey/quiz responses, photos/audio/video you choose to submit.
● Health & Wellness Inputs (optional): information you voluntarily share about wellness goals, sensitivities, or preferences related to aromatherapy or practices.
B. Information Collected Automatically
● Device/Usage Data: IP address (approximate location), browser type, device identifiers, pages viewed, referring/exit URLs, date/time stamps, and similar data.
● Cookies/SDKs/Pixels: analytics, performance, personalization, and advertising technologies. See Cookie Policy below for details and choices.
● In‑App/Platform Data (if applicable): event logs and crash diagnostics.
C. Information From Third Parties
● Payment processors (confirmation, last‑4, status).
● Email/SMS/CRM providers (subscription status, engagement).
● Analytics/ad platforms (aggregated insights, audience categories).
● Social media (if you connect or interact).
3. WHY WE USE YOUR INFORMATION (PURPOSES & LEGAL BASES)
We use information to:
1. Provide Services – process orders, deliver programs, memberships, events, and support. (Legal basis: contract/performance; legitimate interests.)
2. Communicate – transactional emails/SMS, updates, and—with your consent or where permitted—marketing. (Consent; legitimate interests.)
3. Personalize & Improve – content relevance, analytics, diagnostics, research. (Legitimate interests; consent for non‑essential cookies.)
4. Security & Fraud Prevention – protect accounts, investigate, prevent abuse. (Legitimate interests; legal obligation.)
5. Compliance – tax/accounting, legal requests, and recordkeeping. (Legal obligation.)
We do not use automated decision‑making that produces legal or similarly significant effects about you.
4. COOKIES & SIMILAR TECHNOLOGIES (CHOICES)
We use:
● Strictly Necessary cookies (required to run the Sites).
● Functional/Preference cookies (remember choices).
● Performance/Analytics cookies (e.g., GA4) to understand usage.
● Advertising/Retargeting cookies (e.g., Meta/Google ads) for interest‑based ads.
Your Choices:
● Use our Cookie Settings link to opt in/opt out of non‑essential cookies.
● Adjust browser settings to block/delete cookies.
● We recognize Global Privacy Control (GPC) signals as an opt‑out of “sale/share” and targeted advertising where required.
● “Do Not Track” (DNT) signals are not currently responded to due to industry standards, but GPC is honored.
5. WHEN WE DISCLOSE INFORMATION
We disclose personal information to:
● Service Providers/Processors who assist with ecommerce, payments, email/SMS, hosting/CDN, analytics, advertising, fulfilment, customer support, security, and auditing. They are contractually bound to use it only to provide services to us.
● Affiliates/Brands within the Opus Gaia ecosystem for centralized operations consistent with this Policy.
● Legal & Safety when required by law or to protect rights, safety, or property.
● Business Transfers in connection with a merger, acquisition, or asset sale (your data remains protected per this Policy or successor notice).
We do not sell personal information for money. We may “share” identifiers and internet/activity data with advertising partners for cross‑context behavioral advertising/targeted advertising. You can opt out at any time (see Section 8 and Cookie Settings).
6. RETENTION
We retain information only as long as reasonably necessary for the purposes above, including to meet legal, tax, and accounting requirements. Typical periods:
● Account data: while active + up to 3 years of inactivity.
● Order/transaction records: 7 years.
● Support communications: 2 years.
● Marketing subscriptions: until you opt out or after 3 years of inactivity.
● Cookies/SDKs: per technology, typically 1 day to 24 months (see Cookie Settings for details).
7. SECURITY
We employ administrative, organizational, and technical safeguards appropriate to the nature of the data, including HTTPS, access controls, and encryption in transit. No method is 100% secure. If we learn of a breach, we will notify affected users and regulators as required by law.
8. YOUR PRIVACY RIGHTS & CHOICES
Global (all users): You may request access, correction, deletion, or portability of your personal information, and you may opt out of marketing at any time via unsubscribe links or by emailing info@adorawinquist.com. Cookie choices are available in Cookie Settings. We will verify your request before fulfillment; authorized agents may submit requests as allowed by law.
California (CPRA): You have rights to know/access, correct, delete, opt out of sale/share, limit use/disclosure of sensitive personal information, and non‑discrimination. We honor GPC as a sale/share opt‑out signal for the browser. You may also call or email us to exercise rights. If we deny a request, we’ll explain why.
Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Iowa, Indiana, Tennessee (and similar U.S. state laws): You may confirm processing, access, correct, delete, port, and opt out of targeted advertising, sale of personal data, and certain profiling. If we decline your request, you may appeal by replying to our decision email with “Appeal”; we will respond within the legally required time.
Nevada: You may opt out of the “sale” of covered information by emailing info@adorawinquist.com with subject “Nevada Opt‑Out.”
EU/UK (GDPR): Where GDPR/UK GDPR applies, our legal bases are contract, consent, legal obligation, and legitimate interests. Your rights include access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority. International transfers occur through our processors subject to appropriate safeguards (e.g., EU SCCs/UK IDTA) where applicable. We have not appointed an EU/UK representative or DPO at this time.
How to Submit a Request: Email info@adorawinquist.com with your name, the email you used with us, your request type, and your jurisdiction. We will verify identity (and agent authority where applicable) before acting.
9. CHILDREN’S PRIVACY
The Sites/Services are intended for adults (18+) and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact info@adorawinquist.com and we will delete it.
10. INTERNATIONAL USERS
We are based in the United States. By using the Services, you understand your information may be transferred to and processed in the U.S. and other countries that may have different data‑protection rules than your country.
11. TEXT/SMS & EMAIL COMMUNICATIONS
If you provide a mobile number, you may receive transactional or marketing texts. Message and data rates may apply. Reply STOP to opt out, HELP for help. You can unsubscribe from marketing emails using the link in each email.
12. FINANCIAL INCENTIVES (CALIFORNIA)
We do not currently offer programs that constitute “financial incentives” under California law. If we do in the future (e.g., loyalty programs), we will provide a required notice describing material terms and opt‑in/withdrawal rights.
13. CHANGES TO THIS POLICY
We may update this Policy from time to time. If we make material changes, we will revise the “Last Updated” date and, where required, provide additional notice. Your continued use after changes become effective indicates your acknowledgment.
14. CONTACT US
Email (Privacy Requests & Questions): info@adorawinquist.com Mail: Adora Winquist, LLC,125 S Lexington Ave., Suite 101, PMB 133, Asheville, NC 28801, United States
15. COOKIE POLICY (SUMMARY)
What cookies we use:
● Necessary: enable core functions (login, checkout, security).
● Functional: remember preferences and choices.
● Analytics: measure use and improve performance.
● Advertising: deliver and measure ads, limit frequency, build audiences.
Your controls:
● Manage preferences anytime via Cookie Settings on our Sites.
● Use your browser to block/delete cookies.
● Send a Global Privacy Control (GPC) signal—we honor it where required as an opt‑out of sale/share/targeted advertising.
CALIFORNIA PRIVACY NOTICE (CPRA) – SUPPLEMENT
Categories Collected (past 12 months): Identifiers; Customer Records; Commercial Information; Internet/Network Activity; Geolocation (approximate); Inferences; (Optional) User‑submitted Photos/Audio/Video. We do not intentionally collect precise geolocation, biometric identifiers, or government IDs. Payment data is processed by third parties. Sources: You; your devices; service providers; affiliates; advertising/analytics partners. Purposes: As described in Section 3. Disclosures: Service providers/processors; affiliates; legal; business transfers. Sale/Share: We do not sell for money. We may “share” identifiers and internet activity for cross‑context behavioral advertising; you may opt out via Cookie Settings or GPC. Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes requiring a right to limit under CPRA. Retention: See Section 6. Your Rights & How to Exercise: See Section 8. Non‑Discrimination: We will not discriminate against you for exercising your rights.
Accessibility: If you need this Policy in an alternative format, email info@adorawinquist.com and we will accommodate reasonable requests.