Privacy Policy

Effective Date: July 1, 2026  ·  Last Updated: July 15, 2026

1. Who We Are

Ashe & Alma is a sacred spiritual tools brand owned and operated by Rooted Creative Group LLC, a California limited liability company. We create and sell tarot decks, companion guides, and related spiritual tools rooted in Afro-diasporic traditions. We also offer personal tarot readings and educational content.

Business Address: Rooted Creative Group LLC, California, USA
Contact Email: ayuda@ashealma.com
Website: ashealma.com

2. Information We Collect

Information You Provide

• Contact information: name, email address, mailing address (for physical orders)
• Purchase information: items ordered, billing and shipping address (payment card data is handled directly by Stripe and never stored by us)
• Reading intake information: questions or topics you share when booking a personal tarot reading — which may include personal, emotional, or spiritual matters you choose to disclose
• Newsletter subscription: name and email when you opt in to our email list
• Communications: messages you send us via email or contact forms
• Account credentials: hashed access credentials for any portal or community features

Information Collected Automatically

• IP address, browser type, device type, operating system
• Pages visited, time on site, referring URL
• Cookie identifiers and session data (see Section 5)
• Pinterest Conversion API events (page views, add-to-cart, purchase events), where applicable

Information from Third Parties

• Payment processors (Stripe) — we receive a transaction confirmation and last-4 of card, but not your full card number
• Analytics providers — aggregated, anonymized traffic data
• Social platforms (Instagram, Facebook) — if you interact with our social media accounts, those platforms' privacy policies govern that data

3. How We Use Your Information

• To fulfill orders and deliver products and services
• To process and confirm bookings for personal readings
• To send you the newsletter you subscribed to, including the Card of the Circle and community updates
• To respond to your questions, requests, and customer service inquiries
• To improve our website, products, and services
• To send transactional emails (order confirmations, shipping notices, booking confirmations)
• To comply with legal obligations
• To protect against fraud and unauthorized access
• To run advertising campaigns and measure their effectiveness (with your consent where required)

We do not sell your personal information. We do not use your information for automated decision-making that produces legal effects.

4. How We Share Information

We share your information only as necessary:

• Service providers: Stripe (payment processing), email delivery providers (for transactional and newsletter emails), web hosting (Namecheap), analytics services. These providers are contractually obligated to protect your data and use it only as directed by us.
• Legal compliance: We may disclose information if required by law, subpoena, or to protect our rights, users, or the public.
• Business transfers: If Rooted Creative Group LLC is acquired, merged, or substantially reorganized, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our site.
• Advertising platforms: We may share hashed email addresses or event data with Pinterest and Meta (Facebook/Instagram) for advertising purposes. You may opt out — see Section 11.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

5. Cookies & Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: Required for the site to function (e.g., session management for the portal and checkout). These cannot be disabled without breaking site functionality.
• Analytics cookies: Help us understand how visitors use our site (page views, traffic sources). We use anonymized/aggregated data only.
• Advertising pixels: We use the Pinterest Conversion API and may use Meta Pixel to measure the effectiveness of advertising campaigns. These may associate your actions on our site with your social media profiles.

You can control cookies through your browser settings. Opting out of advertising cookies will not affect your ability to use the site, but may result in less relevant ads if you see our promotions on social platforms. For Pinterest opt-out: pinterest.com/settings/privacy. For Meta opt-out: facebook.com/settings?tab=ads.

6. Email Communications & Newsletter

We send newsletters (including our Card of the Circle) only to subscribers who have explicitly opted in and confirmed their email address. Every newsletter email includes an unsubscribe link. You may unsubscribe at any time with no penalty.

We send transactional emails (order confirmations, booking confirmations, shipping notices) without requiring newsletter consent, as these are necessary to fulfill your purchase or booking.

7. Payments & Purchases

All payment transactions are processed by Stripe, Inc., a PCI-DSS-compliant payment processor. We do not receive, store, or have access to your full credit card number, CVV, or banking credentials. Stripe's privacy policy is available at stripe.com/privacy.

8. Data Retention

• Order records: Retained for 7 years for tax and legal compliance purposes.
• Newsletter subscriber list: Retained until you unsubscribe. Upon unsubscription, your email is marked inactive and retained for 90 days (in case of error), then deleted.
• Reading intake forms: Retained for up to 1 year after the reading, then deleted unless you request otherwise.
• Contact/support messages: Retained for up to 2 years.
• Website analytics data: Retained in anonymized/aggregated form indefinitely.

9. Security

We implement industry-standard security measures including HTTPS/TLS encryption for all data in transit, hashed (bcrypt) storage for access credentials, and restricted server access. No method of transmission over the internet is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

10. Children's Privacy

Our website and services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at ayuda@ashealma.com and we will delete it promptly.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights regarding your personal information:

Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, and sell (or share) about you, including the categories of personal information, the categories of sources, our business or commercial purpose for collecting it, and the categories of third parties we share it with.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., data we are legally required to retain).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

We do not sell your personal information for monetary consideration. However, under CPRA, sharing personal information for cross-context behavioral advertising (e.g., targeted social media ads using hashed email addresses) may constitute "sharing" under California law. You have the right to opt out of this sharing.

Right to Limit Use of Sensitive Personal Information

See Section 12 below.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, provide a different quality of service, or suggest any of the above.

How to Submit a Request

To exercise your rights under the CCPA/CPRA, you may:

• Email ayuda@ashealma.com with the subject line "CA Privacy Request"
• We will respond within 45 calendar days. If we need more time, we will notify you within the initial 45-day period and may take an additional 45 days (90 days total).
• We will verify your identity before processing your request. Verification may require you to confirm your email address or provide information consistent with what we have on file.
• You may authorize an agent to submit a request on your behalf. Authorized agents must provide written authorization signed by you.

Categories of Personal Information Collected (Last 12 Months)

• Identifiers: name, email address, IP address, mailing address
• Commercial information: products purchased, purchase history
• Internet or other electronic network activity: browsing behavior on our site, interactions with emails
• Geolocation data: approximate location derived from IP address
• Sensitive personal information: information voluntarily shared in reading intake forms that may relate to personal beliefs, health, or family circumstances (see Section 12)

We do not collect biometric information, precise geolocation data, financial account numbers, Social Security numbers, or government ID numbers.

Categories Disclosed for Business Purposes (Last 12 Months)

• Identifiers and commercial information → shared with Stripe (payment processing) and email service providers (transactional email delivery)
• Identifiers → shared with web hosting providers for service delivery
• Hashed email addresses and event data → shared with Pinterest and Meta for advertising measurement (you may opt out per Section 11 above)

12. Sensitive Personal Information

When you book a personal tarot reading, you may voluntarily share information in your reading intake form that touches on personal beliefs, spiritual practices, health, family dynamics, relationships, or other sensitive topics. We treat this information with the utmost care and discretion.

Under CPRA, you have the right to limit our use and disclosure of your sensitive personal information to that which is necessary to perform the services you requested. To exercise this right, email ayuda@ashealma.com with the subject line "Limit Sensitive PI Use."

Spiritual content disclaimer: Tarot readings and all spiritual content on this site are for entertainment, inspirational, and educational purposes. Nothing on this site constitutes medical, legal, financial, or psychological advice. If you are experiencing a personal crisis, please contact a qualified professional.

13. Notice on Spiritual & Metaphysical Content

Ashe & Alma offers tarot decks, oracle tools, and personal readings rooted in Afro-diasporic spiritual traditions, including but not limited to Yoruba/Lucumí practices (Orisha traditions), folk Catholicism, and African American spiritual heritage.

All content — including card interpretations, Orisha teachings, ancestral guidance, and AI-assisted readings — is provided for inspirational, educational, and entertainment purposes only. Results are not guaranteed. Ashe & Alma and Rooted Creative Group LLC make no warranties regarding the accuracy, completeness, or fitness for any purpose of any spiritual content.

By using our services, you acknowledge that you are exercising your own judgment and free will, and that no reading or spiritual guidance constitutes a substitute for professional advice.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top and, where required by law, notify you by email or a prominent notice on our website. Your continued use of our site or services after the effective date of any changes constitutes your acceptance of the updated policy.

15. Contact Us

For any questions about this Privacy Policy, to exercise your privacy rights, or to submit a request or complaint:

Rooted Creative Group LLC / Ashe & Alma
Email: ayuda@ashealma.com
Website: ashealma.com

We aim to respond to all privacy-related inquiries within 5 business days.