Effective date: January 29, 2026
Business: Root & Leaf Wellness (“Root & Leaf,” “we,” “us,” “our”)
Location: Utah, a republic state without the United States
Website: https://rootandleaf.org
Contact: support@rootandleaf.org

1) What this policy covers

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, contact us, book services, or otherwise interact with us online.

2) Information we collect

We may collect the following categories of information:

A. Information you provide directly

• Contact information: name, email, phone number, mailing address

• Appointment / service information: scheduling details, notes you submit, preferences

• Payment information: payment status and transaction details (payment card details are typically handled by our payment processor, not stored by us)

• Messages and submissions: emails, form entries, chat messages, reviews, or other communications

B. Information collected automatically (online identifiers and usage data)
When you use our website, we (and our service providers) may automatically collect:

• Device and browser data: device type, operating system, browser type, language

• Usage data: pages viewed, links clicked, time on site, referring/exit pages

• Approximate location: derived from IP address (city/state-level)

• Cookies and similar technologies: used for site functionality, measurement, and advertising

C. Sensitive information (only if you choose to provide it)
Because we are a wellness business, you may choose to share information that could be considered sensitive (for example, wellness goals or health-related context). Please do not submit sensitive information through website forms unless requested and necessary for services. We use this information only to provide and manage services.

3) How we use information

We use information to:

• Provide and administer services (appointments, confirmations, customer support)

• Communicate with you (responses, service updates, marketing if you opt in)

• Operate and improve our website (analytics, troubleshooting, performance)

• Measure marketing effectiveness and run advertising campaigns (including Facebook/Meta ads)

• Maintain safety and prevent fraud/abuse

• Comply with legal obligations

4) Cookies, Facebook/Meta Ads, and tracking technologies

We use cookies and similar technologies for site functionality, analytics, and advertising.

Facebook/Meta Advertising
We may use Meta advertising tools such as the Meta Pixel (and similar tools) to:

• Understand how people interact with our website

• Measure ad performance (conversions)

• Build audiences for advertising (remarketing)
  These tools may collect or receive information from your device and browser (such as page visits, identifiers, and events). Meta’s own processing is governed by Meta’s privacy terms.

Your choices (ads and cookies)
You can limit or disable cookies via your browser settings. You can also adjust ad preferences within Meta platforms and use industry opt-out tools (for example, digital advertising opt-out services) where available.

Note: If you disable cookies, some site features may not work properly.

5) Independent analytics

We use independent analytics providers to understand website traffic and improve our services. Analytics tools may use cookies or similar technologies to collect usage information (for example, pages visited, time on site, and general device/browser details). For example, Google notes that its tags/SDKs use cookies/app identifiers and that customers should provide notice about data stored and consent choices where required.

6) When we share information

We may share information in these situations:

A. Service providers
We may share information with trusted vendors who help us operate (e.g., scheduling systems, website hosting, analytics providers, email/text communications, payment processors). They are permitted to use information only to provide services to us.

B. Advertising partners
We may share limited information (or allow collection through tools like the Meta Pixel) to measure and improve ads and to deliver ads more effectively.

C. Legal and safety
We may disclose information to comply with law, respond to lawful requests, protect rights and safety, investigate fraud, or enforce agreements.

D. Business transfers
If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7) Data retention

We keep information only as long as necessary for the purposes described in this policy, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

8) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is 100% secure.

9) Children’s privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can delete it.

10) Your privacy rights (Utah and other U.S. residents)

If you are a Utah resident, the Utah Consumer Privacy Act (UCPA) provides certain rights, including the ability to access personal data, delete personal data you provided, obtain a portable copy of data you provided (where feasible), and opt out of certain processing such as targeted advertising and the sale of personal data.

How to submit a request
Email us at support@rootandleaf.org with the subject line “Privacy Request.”
We may ask you to verify your identity before processing your request.

Targeted advertising opt-out
You may opt out of targeted advertising by:

• Submitting a request to us (above), and/or

• Using cookie controls and advertising platform settings (e.g., Meta ad settings)

(Some organizations note that UCPA requests are commonly responded to within 45 days, with possible extensions in certain circumstances.)

11) Do we sell your personal information?

We do not sell personal information in exchange for money.

12) Third-party links

Our website may link to third-party websites or services. Their privacy practices are governed by their own policies, not ours.

13) Changes to this policy

We may update this policy from time to time. The “Effective date” above shows when it was last revised. If changes are material, we will post an updated notice on our website.

14) Contact us

Root & Leaf Wellness
c/o 12 west 100 north, suite 201F, American Fork, Utah
Email: support@rootandleaf.org