Privacy Policy

Effective date: March 1st, 2026

This Privacy Policy explains how Nameless Mountain (“we,” “us,” or “our”) collects, uses, and shares information when you visit [your domain] (the “Site”) or interact with our forms, email list, events, donations, or other services (collectively, the “Services”).

1) Where your data is stored

The Site is hosted on Squarespace. Information you submit through the Site (such as contact forms, waitlists, applications, and email signups) is stored on Squarespace’s servers and may also be exported into our internal records stored in Google (for example, Google Docs and related tools).

Donations and some purchases may be processed through Givebutter and its payment processing partners.

These providers handle data under their own privacy policies. Links can be found on their websites.

2) Information we collect

A) Information you provide

We may collect:

  • Contact details (name, email address, phone number)

  • Messages and form responses (anything you type into forms, applications, inquiries, or surveys)

  • Event and retreat details you choose to provide (logistics preferences, emergency contact information, accessibility needs)

  • Donation or purchase information (amount, items selected, confirmations, and related records)

We generally do not want you to submit sensitive information through general website forms unless we explicitly request it.

B) Information collected automatically

Squarespace (and sometimes embedded services) may automatically collect:

  • Device and browser data (IP address, browser type, operating system)

  • Usage data (pages viewed, clicks, referral URLs, approximate location derived from IP)

3) How we use information

We use information to:

  • Operate the Site and provide the Services

  • Respond to inquiries and provide support

  • Send updates you request (newsletters, announcements, confirmations)

  • Administer registrations, donations, and event logistics

  • Maintain internal records and improve our Services

  • Protect the safety and integrity of our community and Services

  • Comply with legal obligations and enforce our policies

4) How we share information

We do not sell your personal information.

We may share information:

  • With service providers who help run the Site and Services (for example, Squarespace; Google Workspace tools; Givebutter and payment partners), only as needed to provide their services

  • With professional advisors (legal, accounting) as necessary

  • For legal and safety reasons when we believe disclosure is necessary to comply with law, respond to lawful requests, enforce policies, or protect rights, safety, and property

5) Donations and payments via Givebutter

If you donate or register through Givebutter, your transaction and certain related data (such as donation amount, name, email, billing details, and receipt information) may be collected and processed by Givebutter and its payment processing partners. We receive the information we need to acknowledge your donation, provide receipts, manage registrations, and maintain our records.

If you choose to make your donation public or leave a comment through the donation platform, that information may be visible according to the settings on that platform.

6) Cookies and similar technologies

Squarespace and embedded services may use cookies or similar technologies to enable core Site functionality and understand Site usage. You can control cookies through your browser settings. Disabling cookies may affect some features of the Site.

7) Email communications

If you subscribe to updates, we may send newsletters and announcements. You can unsubscribe using the link in any marketing email.

Even if you unsubscribe from marketing emails, we may still send important transactional or administrative messages when necessary (for example, confirmations, schedule changes, policy updates, or event logistics).

8) Sensitive information and health-related information

Please do not submit highly sensitive personal information through general web forms, including:

  • Medical or mental health diagnoses, detailed treatment history, or psychotherapy notes

  • Government ID numbers

  • Financial account numbers (other than what payment processors request in their secure flows)

If an event or retreat requires certain sensitive details (for example, an emergency contact or accessibility needs), we aim to collect only what is reasonably necessary.

9) HIPAA disclaimer

Nameless Mountain is not a healthcare provider or health plan, and the Site is not designed to comply with the U.S. Health Insurance Portability and Accountability Act (HIPAA). Do not submit protected health information (PHI) through the Site. If you choose to share health-related information with us, you understand it will be handled under this Privacy Policy and our operational practices, not as HIPAA-protected medical records.

10) Photo, video, and audio media policy

We may take photographs, record audio, or capture video at events, retreats, or gatherings for documentation, education, and promotion of Nameless Mountain.

Consent and notice

  • By attending an in-person event where signage, registration terms, or staff notices indicate that recording may occur, you consent to being photographed or recorded in group settings, unless you opt out as described below.

  • We will make reasonable efforts to provide notice when recording is taking place.

Opt-out

  • If you do not want to be photographed or recorded, you can contact us in advance and/or tell staff at check-in.

  • We will make reasonable efforts to honor opt-out requests, such as providing an opt-out marker (for example, a wristband) and instructing photographers to avoid you.

  • We cannot guarantee you will not appear incidentally in wide crowd shots or background footage.

Use

  • Media may be used on our website, email newsletters, social media, printed materials, or other communications.

  • If we plan to feature an identifiable close-up image, interview clip, or testimonial prominently, we may request additional explicit permission.

Minors

  • We aim to avoid identifiable images of minors without a parent or guardian’s permission. If you believe an image of a minor has been posted in a way that concerns you, contact us and we will review promptly.

11) Data retention

We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including recordkeeping, event administration, legal compliance, dispute resolution, and enforcing agreements. Retention periods vary depending on the type of information and why it was collected.

12) Security

We use reasonable administrative, technical, and organizational measures to protect information. No system is perfectly secure, so we cannot guarantee absolute security.

13) Your choices and rights

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Request deletion of certain information

  • Object to or restrict certain processing

  • Withdraw consent where processing is based on consent

To make a request, contact us. We may need to verify your identity before responding.

Colorado Privacy Act (CPA)

If you are a Colorado resident, you may have rights under the Colorado Privacy Act, including access, correction, deletion, data portability, and the right to opt out of certain processing. You can contact us at [contact email] with any request.

14) EU/UK GDPR notice

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following may apply.

Controller
Nameless Mountain is the “controller” of your personal data for purposes of the GDPR.

Legal bases for processing
We process personal data on the following bases, depending on context:

  • Consent (for example, email newsletter signups, certain media use where we request explicit permission)

  • Contract (for example, processing registrations or donations you initiate)

  • Legitimate interests (for example, operating and improving the Site, keeping records, preventing fraud, ensuring safety at events)

  • Legal obligation (for example, compliance and recordkeeping)

Your rights
You may have the right to request access, correction, deletion, restriction, portability, and to object to certain processing. You may also withdraw consent at any time where consent is the basis of processing.

International transfers
Your data may be transferred to and processed in the United States where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) or other lawful transfer mechanisms.

Complaints
You may lodge a complaint with your local data protection authority. We encourage you to contact us first so we can try to resolve your concern.

15) Children’s privacy

The Site is not intended for children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided personal information through the Site, contact us and we will take steps to remove it.

16) Contact

If you have questions about this Privacy Policy or privacy requests, please contact us. We will respond as promptly as we are able.