THE ANCESTRAL ROOTS

Privacy Policy

Last updated: June 3, 2026

At The Ancestral Roots, we deeply value the trust you place in us when you choose to share your personal information. This Privacy Policy explains how we collect, use, protect, and share your data when you visit our website (www.theancestralroots.com), make a booking, or otherwise engage with our services — including retreats, ceremonies, wellness experiences, and weddings based in Tulum and around the world.

Please read this policy carefully. By using our website or services, you agree to the practices described herein.

1. Who We Are

The Ancestral Roots is a transformative retreat and ceremonial experience company, based in Tulum, Mexico, offering sacred journeys to destinations worldwide — including Peru, Costa Rica, and beyond.

For the purposes of data protection law, The Ancestral Roots acts as the data controller of your personal information.

Contact: contact@theancestralroots.com | www.theancestralroots.com

2. Information We Collect

We collect information to provide you with meaningful, personalized experiences and to manage our retreat bookings and communications. The types of personal data we may collect include:

2.1 Information You Provide Directly

• Full name, email address, and phone number (via our contact and booking forms)

• Health and wellness information (where relevant for retreat planning and safety)

• Dietary requirements, allergies, and special needs

• Payment information (processed securely through Squarespace Payments and third-party payment providers)

• Any other information you voluntarily share when contacting us or filling out our retreat inquiry forms

2.2 Information Collected Automatically

• IP address, browser type, device information, and operating system

• Pages visited, time spent on our site, and referring URLs

• Cookie data and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

• Information passed via social media platforms (e.g., Instagram) if you contact us through those channels

• Analytics data from tools such as Google Analytics or Squarespace Analytics

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support

• To process retreat bookings, payments, and confirmations

• To prepare and customize your retreat experience, including health and dietary needs

• To send you important information about your booking, itinerary, and retreat logistics

• To send newsletters, retreat announcements, and promotional content (only with your consent)

• To improve our website, services, and user experience

• To comply with legal obligations

  
  

4. Legal Basis for Processing

Where applicable under data protection laws (such as the GDPR), we process your personal data based on the following legal grounds:

• Contract performance: to fulfill our obligations related to retreat bookings and services

• Legitimate interests: to operate and improve our business, provided these interests are not overridden by your rights

• Consent: for marketing communications and non-essential cookies — you may withdraw consent at any time

• Legal obligation: where required by applicable law

5. How We Share Your Information

We do not sell your personal data. We may share your information with trusted third parties only when necessary:

• Service providers: accommodation partners, local guides, ceremony facilitators, and logistics teams who help deliver your retreat experience

• Payment processors: to handle secure transactions (e.g., Squarespace Payments, Stripe)

• Website platform: Squarespace, our website hosting provider, which processes certain data on our behalf

• Legal authorities: when required by law, court order, or to protect the safety of our clients and team

Any third parties we work with are required to handle your data with appropriate care and in accordance with applicable privacy laws.

6. International Data Transfers

The Ancestral Roots operates from Tulum, Mexico, and may share data with collaborators and service providers located in other countries, including within the European Union, the United States, Peru, and Costa Rica.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and understand how visitors use our site. Cookies we may use include:

• Essential cookies: necessary for the website to function properly

• Analytics cookies: to understand site usage and improve our content (e.g., Google Analytics)

• Marketing cookies: to deliver relevant content and measure the effectiveness of our communications

You can manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Booking records may be retained for up to 7 years for accounting and legal compliance purposes. Marketing contact lists are maintained until you unsubscribe or request deletion.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you

• Right to rectification: to request correction of inaccurate or incomplete information

• Right to erasure: to request deletion of your personal data in certain circumstances

• Right to restrict processing: to ask us to limit how we use your data

• Right to data portability: to receive your data in a structured, machine-readable format

• Right to object: to object to our processing of your data for certain purposes, including direct marketing

• Right to withdraw consent: at any time, where processing is based on consent

To exercise any of these rights, please contact us at: contact@theancestralroots.com. We will respond to your request within 30 days.

10. Data Security

We take the security of your personal data seriously. Our website is hosted on Squarespace, which uses industry-standard security protocols including SSL/TLS encryption. We also take care to limit access to your data internally to only those who need it.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their information, please contact us and we will promptly delete it.

12. Third-Party Links

Our website may contain links to external websites, including social media platforms such as Instagram. We are not responsible for the privacy practices of those third-party sites and encourage you to review their respective privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on our website with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch:

The Ancestral Roots

Email: contact@theancestralroots.com

Website: www.theancestralroots.com

Location: Tulum, Quintana Roo, Mexico