Website Privacy Policy

1. B2B Commercial Scope & Notice Regarding Minors

This Site is strictly an informational Business-to-Business (B2B) and professional institutional portal. It is designed exclusively for adult commercial operators, camp owners, school headteachers, local educational authority directors, retreat managers, private estate owners, and prospective entrepreneurs evaluating curriculum licensing, partnership, or commercial operational models.

• No Collection of Children’s Personal Data: We do not market to, interact with, or knowingly collect personal data from minors under eighteen (18) years of age (or under 13 under US COPPA, and under 16 under UK and EU GDPR).
• Consumer Camp Enrollment Disclaimer: This Site does not process individual camper registrations, medical intake forms, or child health records. Individual camp admissions, camper records, and child safeguarding protocols are managed independently and locally by authorized licensees operating within their respective regional jurisdictions.
• Immediate Purge Protocol: If you have reason to believe that an individual under the age of 18 has submitted personal details through our Site contact or scheduling forms, please contact us immediately at susie@wildearthwisdom.com, and we will promptly purge the data from our active systems and backups.

2. Corporate Entity & Data Controller Information

For the purposes of the General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018 / UK GDPR, and international data protection statutes, the Data Controller responsible for your personal data is:

3. Information We Collect

We collect information voluntarily provided by commercial representatives, as well as automated diagnostic telemetry generated when navigating the Site:

A. Information You Disclose to Us Voluntarily

• Commercial & Licensing Inquiries: Organizational name, authorized representative name, job title, business email address, telephone number, business website URL, geographic territory of interest, land asset specifications, and operational background submitted via inquiry forms.
• Discovery Consultation Scheduling: Name, business email, organization type, and exploratory notes submitted when scheduling introductory strategy sessions through our integrated calendar utility.
• B2B Communications & Subscriptions: Professional contact information provided when subscribing to legislative updates (such as analysis of Scotland's Schools Outdoor Education Act 2026), curriculum white papers, or licensing bulletins.

Zero On-Site Financial Data Collection: This Site does not process or store credit card numbers, bank routing numbers, or digital payment credentials. All licensing agreements, curriculum fees, and commercial transactions are executed offline via formal commercial contracts and institutional bank wire/invoicing protocols.

B. Technical Information Collected Automatically

When you navigate the Site, our servers and analytics providers automatically collect certain technical telemetry:

• Device and Browser Characteristics: Operating system, browser type and version, language preferences, screen resolution, and device category.
• Log and Usage Telemetry: Internet Protocol (IP) addresses (anonymized/pseudonymized where applicable), referring and exit URLs, click paths, time spent on specific pages, date/time stamps, and system diagnostic records.
• General Geolocation: Broad geographic region (e.g., country, metropolitan area) inferred from IP addresses to direct visitors to relevant regional compliance frameworks (such as US or Scottish licensing information).

4. Lawful Bases for Processing (GDPR & UK Data Protection Act)

If you are visiting from the United Kingdom (UK) or European Economic Area (EEA), we process your personal data in strict compliance with Article 6 of the UK GDPR and EU GDPR under the following defined legal bases:

We do not sell, rent, lease, or monetize commercial contact information or client lists to third-party data brokers.

5. Third-Party Service Providers (Data Processors)

We share limited data with vetted infrastructure, communications, and software providers strictly necessary to deliver digital services and evaluate commercial partnerships. All third-party service providers are contractually bound by formal Data Processing Agreements (DPAs):

• Google Analytics (Alphabet Inc.): Aggregate website performance monitoring and telemetry analysis. Configured with IP anonymization enabled and operates in strict alignment with Google Consent Mode v2.
• Constant Contact (Constant Contact, Inc.): Secure enterprise cloud platform utilized for dispatching requested B2B educational materials, licensing updates, and curriculum white papers.
• Microsoft 365 / Outlook (Microsoft Corporation): Secure enterprise communications suite and calendar booking software utilized to schedule and coordinate introductory strategy calls with Susie Kincade.
• Cloud Hosting & Infrastructure Security: Secure data hosting providers ensuring website availability, SSL/TLS encryption, and cyber defense against automated denial-of-service or scraping attacks.

6. International Cross-Border Data Transfers (DPF & SCCs)

Envision.Believe.Create Foundation, LLC is headquartered in the State of Colorado, United States of America. When commercial entities or representatives in the UK, EU, Switzerland, or other international jurisdictions submit inquiries through this Site, their personal data is transferred to and processed on secure servers located in the United States.

To ensure your information receives an adequate standard of protection in full compliance with Chapter V of the EU GDPR and UK GDPR:

• EU-US Data Privacy Framework & UK Extension: For transfers involving enterprise analytics and cloud service providers (including Alphabet Inc. / Google and Microsoft Corporation), we rely on their active certifications under the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework.
• Standard Contractual Clauses (SCCs): Where transfers involve entities not covered by an adequacy decision or the DPF, transfers are governed by European Commission-approved Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
• Pre-Contractual Derogations (GDPR Art. 49(1)(b)): Direct B2B communications, inquiry responses, and calendar bookings initiated voluntarily by you are transferred to the US as necessary for the performance of pre-contractual measures taken at your express request.

7. Cookies, Consent Architecture & Technical Cookie Inventory

This Site implements an affirmative, pre-consent cookie architecture in strict compliance with the EU ePrivacy Directive (Directive 2002/58/EC) and UK Privacy and Electronic Communications Regulations (PECR):

• Strictly Necessary Cookies: Loaded by default. These cookies are essential for page routing, core site stability, and storing your consent preferences. They do not track browsing behavior.
• Analytical Cookies (Google Analytics): Completely blocked from executing on your browser until you affirmatively click "Accept All" or enable Analytics in the on-site Cookie Consent Manager.
• Revocation of Consent: You may review, adjust, or completely revoke your cookie preferences at any time by clicking the permanent "🍪 Privacy" badge located in the lower-left corner of any webpage.

Technical Cookie Schedule & Inventory

8. Universal Opt-Out Mechanisms & Global Privacy Control (GPC)

In compliance with the Colorado Privacy Act (CPA Rule 5.04) and modern state data privacy statutes:

• Automated Recognition of GPC Signals: Our Site recognizes and respects universal opt-out signals, specifically the Global Privacy Control (GPC). If your browser broadcasts an active GPC header (navigator.globalPrivacyControl === true), our system automatically suppresses optional analytics cookies and treats the signal as an affirmative opt-out request for that browsing session.
• Legacy Do-Not-Track (DNT): While we honor the standardized GPC header, general DNT headers lack a uniform technical protocol; visitors wishing to opt out of analytics are urged to utilize either the on-site Cookie Consent Manager or an active GPC-enabled browser.

9. Data Retention Schedules

We maintain commercial records only for durations aligned with operational necessity and statutory audit mandates:

• Unconverted Licensing & Commercial Inquiries: Retained for twenty-four (24) months following the last active communication to facilitate seasonal follow-ups, after which records are permanently deleted or anonymized.
• B2B Email Subscribers: Retained until you opt out or request erasure. Every digital communication includes an immediate one-click unsubscribe mechanism.
• Executed Licensee & Commercial Client Records: Retained for the duration of the commercial agreement plus seven (7) years post-termination to satisfy corporate accounting, tax, and legal liability requirements under United States law.
• Technical Server Access Logs: Automatically purged and overwritten on a rolling ninety (90) day cycle.

10. Technical and Organizational Data Security

We implement appropriate technical and organizational safeguards designed to protect commercial information against unauthorized access, loss, alteration, or disclosure:

• Encryption Standards: Full TLS/SSL encryption for all data transmitted between your browser and our servers.
• Access Governance: Access to prospective partner inquiries and calendar records is restricted strictly to authorized executive personnel bound by confidentiality obligations.
• Limitation Notice: While we employ robust security measures, no digital transmission across the Internet or electronic storage architecture can be guaranteed 100% impenetrable. Transmission of personal details is undertaken at your own risk within a secure commercial browser environment.

11. Your Statutory Privacy Rights (UK, EEA, and Switzerland)

Depending on your geographic location (notably within the UK, European Economic Area, and Switzerland), you possess specific statutory rights regarding your personal information:

• Right of Access (GDPR Art. 15): The right to obtain confirmation as to whether your data is being processed and receive a readable copy of your personal business records.
• Right to Rectification (GDPR Art. 16): The right to request prompt correction of inaccurate or incomplete contact records.
• Right to Erasure / "Right to Be Forgotten" (GDPR Art. 17): The right to request deletion of your personal records, subject to statutory record-keeping and audit obligations.
• Right to Restriction of Processing (GDPR Art. 18): The right to restrict the processing of your data under specific statutory conditions.
• Right to Data Portability (GDPR Art. 20): The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (GDPR Art. 21): The right to object to data processing grounded in our legitimate interests or direct B2B informational communications.
• Right to Withdraw Consent (GDPR Art. 7(3)): The right to revoke previously granted consent at any time without affecting the lawfulness of processing conducted prior to revocation.

To exercise any of these statutory rights, please submit a written request to susie@wildearthwisdom.com. We will evaluate and fulfill requests within one calendar month in accordance with applicable data protection laws.

Statutory Right to Complain to a Supervisory Authority

If you are located in the UK or EEA and believe our processing of your personal data infringes prevailing data protection law, you have the statutory right to lodge a formal complaint:

• United Kingdom: Information Commissioner’s Office (ICO) — https://ico.org.uk
• European Union: The national Data Protection Authority (DPA) in your respective EU member state, coordinated via the European Data Protection Board (EDPB) — https://edpb.europa.eu
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — https://www.edoeb.admin.ch

12. United States State Privacy Disclosures (Colorado CPA, California CCPA/CPRA, Virginia VCDPA)

This section supplements our Privacy Policy for residents of US states with comprehensive privacy legislation:

• Colorado Privacy Act (CPA) Disclosures: As a Colorado LLC, we do not sell consumer personal data, process personal data for targeted behavioral advertising, or engage in automated profiling with legal effects. Business representatives have the right to access, correct, delete, and opt out of commercial processing by contacting susie@wildearthwisdom.com.
• California Consumer Privacy Act (CCPA/CPRA): In the preceding 12 months, we have collected commercial identifiers (name, business email, telephone, company title, territorial inquiry details) solely for B2B evaluation. We do not "sell" or "share" personal information for cross-context behavioral advertising.
• Non-Discrimination Guarantee: We will never discriminate against, deny services to, or alter service standards for any individual or commercial representative exercising their statutory privacy rights.

13. Modifications to This Privacy Policy

We reserve the right to revise this Privacy Policy periodically to reflect shifts in regulatory mandates, curriculum licensing structures, or operational workflows. Any revisions will be published to this URL with an updated "Last Updated" date. Your continued engagement with our Site following published updates signifies acknowledgment of the revised terms.

14. Contact Information & Dispute Resolution

For questions, compliance requests, or legal notices regarding this Privacy Policy, please direct your communication to: