Sovereign Privacy Policy

Our Covenant

The Bourne Collective operates from one foundational truth: your data is your sovereignty. We are stewards, not owners, of what you share within this space. What you bring here belongs to you, fully and completely.

This policy governs how we handle personal data collected across the Collective's pages, including Mango's PMail, the Sanctuary Shop, and the Reiki Academy, in accordance with GDPR, UK GDPR, and other applicable privacy laws.

What We Collect & Why

We collect only what is necessary to hold your journey here:

• Identity data: your name and email, when you register, apply for the Academy, or reach out through the Concierge.
• Journey data: PMail submissions, scholarship applications, and any messages you send us, kept solely to serve the purpose you shared them for.
• Technical data: IP address, browser type, and session data, used for security and to keep the site running smoothly.
• Payment data: shop purchases are processed securely through Wix. We never see or store your card details.

We do not sell, trade, or lease your data to third parties. Ever.

Legal Basis (GDPR & UK GDPR)

We process your data under the following lawful bases:

• Contract: to deliver the offerings you have requested or purchased.
• Legitimate interests: to maintain platform security and respond to your messages.
• Consent: for optional communications, session recordings, and cookies. You may withdraw consent at any time.

Your Sovereign Rights

You hold full dominion over your data. Under GDPR, UK GDPR, and CCPA you have the right to:

• Access: request a copy of everything we hold about you.
• Rectification: correct any inaccurate data.
• Erasure: request deletion of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing where we rely on legitimate interests.

To exercise any of these rights, reach us through the Concierge or the Contact link in the footer. We do not require an email address to honor your request.

Cookies & Session Recordings

We use only essential cookies required for the platform to function. With your acknowledgment, we also keep anonymous session recordings, capturing how you move through the site such as clicks, scrolls, and page paths, so we can see where travelers get stuck or lost.

These recordings never capture what you type into forms, and they are deleted automatically and permanently after 30 days. You can change your preference at any time from the “Privacy Choices” link in the footer.

Data Retention

We keep your journey data for as long as your relationship with the Collective is active, or as required by law. Anonymized, non-identifiable usage statistics may be kept indefinitely. Session recordings are deleted automatically after 30 days.

International Transfers

Our platform infrastructure is hosted within the United States. Where data is transferred outside your home region, we rely on Standard Contractual Clauses and equivalent safeguards to keep your data protected to GDPR standards.