Privacy Policy

Effective date: December 29, 2025

ISHA Healing (“ISHA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through this Privacy Policy. This Policy describes how we collect, use, disclose, and safeguard information when you visit www.ishahealing.com (the “Site”), interact with our content, or communicate with us.

This Privacy Policy applies to information collected through the Site and related online services that link to it (collectively, the “Services”). It does not apply to third-party websites or services that may link to or be accessible from our Site.

1) Who We Are

Institute of Spiritual Healing & Aromatherapy

P.O. Box 70081

Knoxville, TN 37938

Phone: (865) 214-2872

email: [email protected]

2) Information We Collect

We collect information in three main ways: (a) you provide it, (b) it’s collected automatically, or (c) we receive it from third parties.

A. Information You Provide

Depending on how you use our Services, you may provide:

Contact details: name, email, phone number, mailing address
Account details (if applicable): login credentials and profile information
Transaction details: purchase history, billing/shipping address, and limited payment details (payment card numbers are typically processed by our payment processors, not stored by us)
Communications: messages you send via forms, email, SMS, chat, or social media
Scheduling details: appointment requests and related information you submit
User-generated content: comments, testimonials, reviews (if you submit them)

B. Information Collected Automatically

When you visit our Site, we and our service providers may automatically collect:

Device and network data: IP address, browser type, device identifiers, operating system
Usage data: pages viewed, time on page, clicks, referral URLs, approximate location (derived from IP), and other browsing behavior
Cookie and tracking data: information collected through cookies, pixels, SDKs, or similar technologies

C. Information from Third Parties

We may receive information from:

Payment processors (e.g., confirmations, fraud signals)
Analytics and advertising partners (e.g., aggregated performance and conversion data)
Social media platforms (if you interact with our pages or ads)
Service providers that help us operate the Services

3) Sensitive Information

Unless we specifically request it for a clear purpose, please do not submit sensitive personal information through website forms (for example: government ID numbers, full medical records, or detailed health information). If you choose to share sensitive information, you do so at your own discretion.

HIPAA note (important): Our Site and general contact forms are not designed for transmitting protected health information (“PHI”). If you believe you need to communicate sensitive health information, contact us by phone and ask for the most appropriate method.

4) How We Use Information

We use collected information to:

Provide and operate the Services (including processing purchases, delivering products/services, managing accounts)
Communicate with you (respond to inquiries, send confirmations, support messages, and service announcements)
Send marketing communications (newsletters, offers, event updates) where permitted; you can opt out anytime
Personalize your experience (remember preferences, tailor content)
Improve and secure the Site (debugging, performance, preventing fraud/abuse)
Analytics and measurement (understand usage, conversion tracking, campaign performance)
Comply with legal obligations (tax, accounting, lawful requests)

5) Legal Bases for Processing (EEA/UK visitors)

If you are located in the EEA/UK, we process personal data only when we have a lawful basis, including:

Contract (to provide what you requested)
Legitimate interests (security, improvement, marketing where allowed)
Consent (e.g., optional cookies, email marketing in certain regions)
Legal obligations (recordkeeping, compliance)

6) Cookies, Pixels, and Similar Technologies

We use cookies and similar technologies to operate the Site, understand engagement, and support advertising/retargeting where enabled.

Types of cookies we may use:

Strictly necessary (site functionality, security)
Performance/analytics (understand site usage)
Functional (remember preferences)
Advertising (measure ads, retargeting)

Your choices:

Adjust browser settings to block or delete cookies (may impact site features).
Where required, you’ll be offered a cookie banner/consent tool to manage preferences.

Do Not Track: Some browsers offer “Do Not Track” signals. Because there isn’t a consistent industry standard, we may not respond to all DNT signals.

7) How We Share Information

We do not sell your personal information in the “traditional” sense (for money). We may share information in these situations:

A. Service Providers (Processors)

We share information with trusted vendors who help us run the business, such as:

Website hosting/Email/Payments: Kajabi
Analytics: Google Analytics
Advertising tools: Meta Pixel

These providers are permitted to use information only to perform services for us, subject to contractual protections.

B. Legal, Safety, and Rights

We may disclose information if we believe it’s necessary to:

comply with law or legal process,
protect our rights, property, or safety,
prevent fraud or abuse,
enforce agreements.

C. Business Transfers

If we’re involved in a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction.

8) Data Retention

We keep personal information only as long as reasonably necessary for the purposes described, including to:

provide Services,
maintain records,
comply with legal/tax obligations,
resolve disputes,
enforce agreements.

Retention periods vary by data type and legal requirements.

9) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No online system is 100% secure, so we cannot guarantee absolute security.

10) Your Privacy Rights and Choices

A. Email Marketing

You can opt out of promotional emails at any time using the “unsubscribe” link in the email. Even if you opt out, we may still send non-marketing messages (e.g., receipts, service updates).

B. State Privacy Rights (U.S.)

Depending on your state of residence, you may have rights to:

Know/access the personal information we have about you
Correct inaccurate personal information
Delete certain personal information
Opt out of certain data processing (e.g., targeted advertising in some states)
Non-discrimination for exercising your rights

To exercise rights, email [email protected] with the subject line: “Privacy Request”. We may need to verify your identity before completing your request.

Authorized agents (certain states): You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and identity verification.

C. EEA/UK Rights

If you are in the EEA/UK, you may also have the right to object to processing, restrict processing, and request data portability. You may lodge a complaint with your local data protection authority.

11) International Visitors and Cross-Border Transfers

If you access the Services from outside the United States, your information may be processed and stored in the U.S. or other countries where our service providers operate. Those locations may have different data protection laws than your region.

12) Children’s Privacy

The Services are not intended for children under 13 (or older where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

13) Third-Party Links

Our Site may link to third-party websites or tools we do not control. Their privacy practices are governed by their own policies, not this one.

14) Changes to This Privacy Policy

We may update this Policy from time to time. We will post the updated version on this page and update the “Effective Date” above. Material changes may also be communicated via prominent notice on the Site.

15) Contact Us

Questions or requests? Contact: