Who we are
This policy describes the privacy practices of Natulivo LLC, 17 Harbor Lane, Bar Harbor, ME 04609, United States, email [email protected], telephone (207) 555-0148 ("Natulivo", "we", "us") for natulivo.com, our shop in Bar Harbor, Maine, and our guided trips. Questions can be sent to the same address, marked for the attention of our privacy lead, Megan Hollis.
Information we collect
We collect only what we need to run our trips and our shop:
- Identifiers and contact details you give us in a form, by email or by phone: name, email address, phone number, mailing address and your message.
- Booking details: number of people, ages of children, an emergency contact, and any medical, dietary or accessibility information you choose to share so we can keep you safe.
- Commercial information: items ordered, trips booked and payment confirmation. Card numbers are handled by our payment processor and never stored by us.
- Newsletter: your email address and the date you subscribed.
- Internet activity: if you allow analytics cookies, pages viewed and general device type. See our Cookie Policy.
How we use it
- To answer inquiries, give quotes and suggest trips.
- To process bookings and orders, ship goods and handle returns.
- To plan safe trips and respond in an emergency.
- To send the Field Letter newsletter, only if you subscribe.
- To keep accounting and tax records as required by law.
- To understand how our website is used, only with your consent.
Forms on this website
The inquiry, contact and newsletter forms on this demonstration website check what you type and show a confirmation message. In their current form they do not transmit, store or email the information you enter. When live booking processing is enabled, information will be handled exactly as set out in this policy.
How we share it
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only to service providers who help us run the business and are contractually required to protect it and use it only for us:
- our payment processor, to take card payments securely;
- USPS and UPS, to deliver orders;
- our email and newsletter provider;
- our accountant and insurer;
- emergency responders, if needed during a trip;
- authorities, when required by law or a valid legal process.
How long we keep it
- Inquiries that do not lead to a booking: 12 months.
- Booking and order records: 7 years, for tax purposes.
- Medical and safety notes for a trip: deleted 90 days after the trip, unless an incident report is required.
- Newsletter subscription: until you unsubscribe.
Your privacy rights
Depending on where you live, including California, Colorado, Connecticut, Virginia, Oregon, Texas and other states with consumer privacy laws, you may have the right to:
- know what personal information we have collected about you and how we use it;
- get a copy of it in a portable format;
- correct inaccurate information;
- delete information we hold about you, with some exceptions;
- opt out of the sale or sharing of your information, or its use for targeted advertising (we do neither);
- limit the use of sensitive information such as health details;
- not be treated differently for exercising any of these rights.
To make a request, email [email protected] or call (207) 555-0148. We will verify your identity by confirming details you have given us, and respond within 45 days. You may use an authorized agent. If we decline a request, you may appeal by replying to our decision, and we will respond to the appeal within 60 days. You can also manage choices on our Your Privacy Choices page.
Notice to California residents
In the past 12 months we collected the categories of information listed above from you directly, from your use of our website and from our payment processor, for the business purposes described in this policy. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing information of consumers under 16. California residents may also request information about disclosures for direct marketing under California Civil Code Section 1798.83; we make no such disclosures.
Global Privacy Control and Do Not Track
We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of sale, sharing and targeted advertising, and we will not set analytics cookies when we detect it. Because there is no common standard for Do Not Track signals, we treat them the same way.
Security
Our website uses HTTPS. Access to customer records is limited to staff who need it and protected with strong passwords and two-factor authentication. Paper trip sheets are kept in a sealed dry bag during trips and shredded afterward. No system is perfectly secure, and we will notify you of a data breach as required by Maine law and the laws of your state.
Children
Our website is not directed to children under 13, and we do not knowingly collect personal information from them online, in line with the Children's Online Privacy Protection Act (COPPA). Bookings for children must be made by a parent, guardian or school.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make material changes, we will post a notice on this site and in the Field Letter.
Questions about this page? Email [email protected], call (207) 555-0148 or write to us at 17 Harbor Lane, Bar Harbor, ME 04609, United States.