Privacy Policy

This policy applies to Way Show Er Sanctuary LLC and our Sanctuary operations, including wayshowersanctuary.com, sync.wayshowersanctuary.com, links.wayshowersanctuary.com, and information supplied to us through Sanctuary lead forms, email, booking services, or social-media conversations.

It covers physical and online yoga, movement, sound-healing, events, and individualized services. Separately operated products or services with their own privacy notices are governed by those notices rather than this policy.

When you use another company's platform, including an embedded booking service, that company's privacy notice also applies to its own handling of your information.

Depending on how you interact with us, we receive contact information such as your name, email address, optional phone number, and optional ZIP code; service-interest selections; booking, registration, membership, purchase, or account information; and the content of messages or other information you voluntarily provide.

You may choose to tell us about your preferences, accessibility needs, or personal circumstances when asking about services. We use relevant information to respond and help provide the requested service. Please avoid sending medical records, diagnoses, full payment-card details, or other unnecessary sensitive information through advertising forms, social messages, or ordinary email.

The main Sanctuary website currently has no standalone contact-submission or newsletter-signup form. Its email links open your own email application; clicking a link alone does not send an inquiry or subscribe you to a marketing list. Forms provided by Arketa or Meta are handled through those platforms as described below.

If you submit a Sanctuary Instant Form on Facebook or Instagram, Meta makes the information you submit available to us. Our lead forms can ask for your full name, email address, optional ZIP code, optional phone number, and answers about the services that interest you. We may also receive the form or advertisement source, submission time, and related lead or campaign identifiers.

We use those details to respond to your inquiry, discuss relevant services, and follow up with you. Where permitted by law and consistent with the choices or permissions you provide, we may also send promotional email communications. Submitting a lead form does not, by itself, mean that your information has been added automatically to a particular email-marketing platform.

If you choose an option to receive updates or start a Messenger conversation, communications may also occur through Facebook Messenger. Facebook or Instagram messages, their contents, and associated account information are handled by Meta and can be available to the business. Messenger permission is separate from permission to send promotional SMS.

• Meta Privacy Policy

We use Arketa for scheduling, customer accounts, class and event registrations, bookings, memberships, packages, on-demand access, gift cards, and hosted purchasing experiences. The main website retrieves class information for its schedule and links to or embeds Arketa experiences.

Current public booking and purchase buttons take you to Arketa, sometimes with an offering, class, service, or pricing identifier in the destination URL. Those buttons do not automatically forward contact information or payment-card details that you entered into the main website. Arketa collects information you enter into its account, registration, or checkout interfaces directly.

Our scheduling API also supports reservation submissions. If that API is used, our server processes and forwards the relevant name, email address, optional phone number, or existing Arketa client and purchase identifiers to Arketa. The current public booking interface uses the Arketa handoff rather than this reservation API. The website application does not save reservation submissions in a customer database.

Full card details are entered into the hosted payment experience and handled by Arketa and the payment processor used there, under their own notices. The main Sanctuary website has no card-entry form and does not directly receive or store full card numbers. We can receive booking, purchase, payment-status, and account information necessary to deliver services and maintain business records.

• Arketa Privacy Policy

When you load a page or an embedded service, hosting, network, and third-party providers process technical connection information, including your IP address and browser request information. Analytics providers can also process browser and device characteristics, online identifiers, approximate location, referral information, pages viewed, and interactions.

Our main-site analytics send page paths and titles, campaign attribution, and interaction details such as the offering or content viewed, booking-button clicks, and contact-link clicks. Routine website analytics measure page activity and actions rather than the content of your email correspondence.

The application API's normal request logs record a request identifier, HTTP method, requested path without its query string, timestamps, response status, response time, and operational errors. Its current request serializer does not include IP addresses, browser user-agent strings, contact-form bodies, or full cookie or authorization headers in routine request records. Hosting and third-party infrastructure process connection data independently of those application logs.

The main website does not currently use its own customer-information database or its own sign-in session. Arketa account sessions and records are maintained through Arketa. Main-site schedule search text is used within the page and is not a contact-form submission.

The main website uses first-party browser storage for campaign attribution, and Google, Meta, and embedded services may use their own cookies or other identifiers. Which third-party cookies are actually present depends on the page, browser settings, prior visits, and provider behavior.

The main website does not currently create its own session-storage entries or its own customer-account session cookie. Embedded third-party services can use their own storage. Cookie lifetimes are controlled by the relevant provider; they are not the same as the retention periods for our business records.

• wayshower-attribution — main-site local storage. Records a landing page, referring page, and available utm_source, utm_medium, utm_campaign, utm_content, utm_term, fbclid, and gclid parameters. It helps preserve campaign attribution across visits and interactions. The application sets no automatic expiry; it remains until removed, replaced, or cleared by your browser.
• way-shower-inbound-utms — session storage on the Sanctuary links site. Retains available UTM campaign parameters during the browser-tab session and can pass them to links to Sanctuary domains. Links can also include ws_ref=linkhub to identify that referral.
• _ga and _ga_* — cookies commonly used by Google Analytics 4 to distinguish browsers and measure visits and sessions, where Google sets them.
• _fbp and _fbc — identifiers commonly used by Meta for browser and advertisement-click attribution, where Meta sets them. A Facebook click identifier can also appear as fbclid in a URL.
• Arketa and payment-provider storage — embedded account, booking, on-demand, and checkout experiences can use their own cookies or storage for account access, functionality, fraud prevention, and transactions, under their own notices.

We use Google Analytics 4 to understand website use, and Meta Pixel and a Meta dataset to measure website activity, advertising attribution, and audiences. These providers receive online identifiers, page or event information, and technical information according to their technologies and settings. Advertising platforms may associate website activity with information they hold about you.

Meta's configuration also includes an external event-forwarding gateway. Relevant event and identifier information may therefore be transmitted through that gateway as well as through the browser Pixel. The current main-site application does not contain its own separately implemented Meta Conversions API sender.

The current main-site application uses GA4 rather than a separately installed Google Ads/remarketing tag or Google Tag Manager container. The Google Analytics script is delivered from Google's googletagmanager.com domain; that delivery URL alone does not mean that a Tag Manager container is installed. Replit also provides hosting/project traffic analytics.

You can restrict or delete cookies and site data in your browser and use the privacy or advertising controls offered by Google and Meta. Removing storage may affect attribution or account/booking functionality, and cookie restrictions do not necessarily block every network request or every use of information.

The current main-site application has no cookie-consent or in-site advertising opt-out control and does not implement automatic responses to browser Do Not Track or Global Privacy Control signals. Contact us about available privacy choices or rights that apply to your information. This policy describes current practices; posting it does not itself block analytics or change tracking settings.

Disclosures of online identifiers and activity to advertising providers may be treated as a sale, sharing, or targeted advertising under some privacy laws, even without payment for that information. The choices and obligations that apply depend on the law and its applicability to our business.

• Google Privacy Policy
• Google Analytics browser opt-out
• Meta advertising preferences

We use information for the purposes relevant to your interaction with us, including:

• Responding to questions, discussing your interests, and recommending appropriate Sanctuary services.
• Processing or managing bookings, registrations, purchases, memberships, and requested services.
• Sending confirmations, scheduling changes, service notices, and other operational communications.
• Sending marketing or promotional communications where permitted and consistent with your permissions and choices.
• Understanding website use, measuring campaigns, improving services, protecting systems, investigating errors or misuse, and meeting legal, tax, accounting, or recordkeeping requirements.

Information is handled through providers as necessary for the services you use. The following descriptions distinguish website integrations from tools that apply only when you use a particular communication or service:

• Replit — website/application hosting, delivery, operational infrastructure, and project traffic analytics. Hosting processes network and browser information needed to serve and monitor the website.
• Arketa — scheduling, customer accounts, bookings, registrations, memberships, packages, purchases, and embedded service experiences. Its hosted checkout and the payment provider used there handle payment-card information.
• Google Analytics 4 — online identifiers, usage and event data, browser/device information, and campaign attribution. Google Fonts also receives browser requests when fonts load.
• Meta — website Pixel/dataset events, advertising measurement, audience features, Instant Form submissions, and Facebook/Instagram/Messenger conversations. The configured forwarding gateway can also handle tracking-event information in transit.
• Email providers — the main site's email links send no message themselves. Messages you choose to send are handled by your email provider and our email infrastructure. The Sanctuary domain's current public mail-routing records point to Network Solutions/Open-Xchange infrastructure; downstream mailbox or forwarding services may also handle messages.
• Mailchimp — if you join a Sanctuary email list managed through Mailchimp, subscriber contact information, preferences, subscription records, and email engagement can be processed there. This does not mean every visitor, booking, or Meta lead is automatically added to a Mailchimp list.
• Zoom — if you register for or join an online Sanctuary service held through Zoom, Zoom can process participant names, registration details, meeting metadata, and audio/video or chat you choose to share. Any recording, where offered, is subject to the notices and permissions given for that session.
• Unsplash — an externally hosted image on the main website generates a browser request to its image-delivery infrastructure. Other Sanctuary image assets and the curated review content are served by our website rather than through a live review-feed widget.

• Replit Privacy Policy
• Network Solutions Privacy Policy
• Mailchimp Privacy Policy
• Zoom Privacy Statement
• Unsplash Privacy Policy

We disclose relevant information to providers and people involved in operating the business and delivering the services you request. Information may also be disclosed when necessary to meet legal obligations, respond to valid legal process, protect rights or safety, investigate misuse, or in connection with a business transfer subject to applicable privacy requirements.

If you interact with our Google Business Profile, reviews, Facebook, Instagram, or another linked third-party platform, that platform processes information under its own policies. Public reviews or posts can be visible to others. Google Maps directions on the main website are outbound links, not an embedded map.

The main website includes Arketa embeds. We have not installed a live YouTube, Vimeo, Instagram-feed, or Google Maps embed in the current main-site application. Following a link or loading embedded content can provide the destination or resource provider with your IP address, browser information, and other request or referral data.

Providers may process information outside California or the United States. Their own notices describe their processing locations and safeguards. We do not control the privacy practices of independent websites or platforms.

You can stop promotional emails by using the unsubscribe option provided with the message or by contacting info@wayshowersanctuary.com. Tell us which address and type of communication your request concerns. Operational messages necessary for a booking, transaction, or requested service may still be sent.

Providing a phone number in a lead form or booking record does not, by itself, consent to promotional text messages. Any promotional SMS program requires its own applicable consent and disclosures. Messenger conversations or permissions are not SMS consent.

You can ask us to stop optional marketing contact and use Facebook, Instagram, or Messenger settings to manage platform communications. A privacy or unsubscribe request is not a cancellation of a booking or membership; use the relevant service's cancellation process for that.

We retain information for the purposes for which it was collected, including delivering services, maintaining relevant business records, handling inquiries or disputes, and meeting legal or accounting requirements. The appropriate period varies by record type, service provider, purpose, and applicable obligation. An unsubscribe request does not necessarily require deletion of transaction or legally required records.

Browser attribution storage and third-party cookies have the behavior described above. Hosting logs, provider accounts, mailbox records, booking records, and marketing lists can have different retention practices; this policy does not promise a single deletion deadline for all providers or record types.

We use available provider and operational safeguards to protect information and limit its use to relevant business purposes. No website, email system, transmission, or storage method is completely secure. Please do not send full payment-card information or unnecessary sensitive personal information to us through ordinary email, social messaging, or lead forms.

You may contact us to ask about personal information we hold about you, request a correction or deletion, or change communication preferences. We may need information to verify your identity and locate the relevant records, and legal or operational exceptions may limit a request. We will explain applicable limitations rather than promise deletion of information we must retain or that an independent platform controls.

California law provides different rights depending on the type of information, activity, and whether a business is covered by a particular law. Where applicable, these can include rights to know or access information, correct it, delete it, obtain a copy, opt out of sale/sharing or targeted advertising, limit certain uses of sensitive information, and exercise rights without unlawful discrimination.

Operating in California does not by itself establish that the California Consumer Privacy Act applies to our business. We do not represent here that every CCPA-specific obligation or right applies to Way Show Er Sanctuary LLC. California residents can also ask about certain disclosures for other businesses' direct marketing to the extent applicable law provides that right.

Send requests to info@wayshowersanctuary.com with the subject “Privacy request.” Include the contact information used in your interaction with us and the request you want us to address, but do not send identification documents or sensitive information unless we request an appropriate verification method. You may use an authorized agent where permitted by law; we may request proof of authority.

For data held independently by Arketa, Meta, Google, or another platform, that provider may also need to receive your request directly.

Our website marketing and advertising lead forms are intended for adults arranging services, not for children under 13 to submit their own information. A parent or guardian may provide relevant information when arranging an appropriate family or youth service.

We do not knowingly seek personal information directly from children under 13 without any legally required parental permission. If you believe a child has supplied information without appropriate permission, contact us so we can investigate and address the information.

We may update this policy as our services, providers, practices, or legal requirements change. The updated version will be posted at our privacy-policy URL with a revised date. Where applicable law requires additional notice or consent for a change, that requirement applies.

Way Show Er Sanctuary LLC

435 Valley View Road, Suite 100, El Sobrante, CA 94803, United States

For privacy questions, requests, or communication preferences, email info@wayshowersanctuary.com.

• Email a privacy request