Privacy Policy

1. Introduction

This Privacy Policy explains how Leaf & Arrow, LLC, a Michigan limited liability company (“Leaf & Arrow,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information.

It applies to our website at https://leaf-arrow.com, our ticket sales and registration process, and the virtual events we deliver (“Events”).

This Policy is incorporated into our Ticket Purchase Terms and Conditions.

For purposes of applicable data protection law, Leaf & Arrow is the controller of the personal information described here.

2. Information We Collect

2.1 Information you give us

Registration and purchase

• Name
• Email address
• Billing address and postal code
• Organization or affiliation, if you provide it
• Event selections and ticket quantity
• Any information you enter in an order note or registration field

Payment

Payment card details are collected and processed directly by Stripe. We do not receive or store your full card number. We receive a transaction record that includes the last four digits, card brand, authorization status, and billing postal code.

Communications

• Emails, support requests, and their contents
• Accessibility requests (see Section 4)
• Feedback and survey responses, where you choose to provide them

Newsletter and marketing

• Email address and any preferences you set, where you opt in

2.2 Information collected during Events

• Your display name as shown in Zoom
• Attendance, join and leave times, and duration
• Chat messages sent in the session
• Poll, Q&A, and reaction responses
• Audio and video, where you enable your camera or microphone
• Recordings, where the Event is recorded (see Section 3)

2.3 Information collected automatically

When you visit our website:

• IP address
• Browser type, version, and language
• Device type and operating system
• Pages viewed, referring URL, and time spent
• Cookie and similar identifiers (see Section 8)

Zoom collects technical and connection data under its own privacy policy, which we do not control.

2.4 Information from third parties

• Stripe: transaction status, fraud signals, chargeback and dispute records
• Our email service provider: delivery, open, and click data, where applicable
• Zoom: registration and attendance reports

3. Recordings, Likeness, and American Sign Language

This Section deserves your attention.

Our Events are conducted in American Sign Language. Where an Event is recorded and you appear on camera, the recording captures your face, hands, body, and signing.

In an ASL context, this is inherently identifying. Unlike an audio recording, it cannot be anonymized, blurred, or voice-altered without destroying the content. If you appear on camera in a recorded Event, you should assume you are personally identifiable in that recording.

What we do with recordings.

Consistent with the consent you give under our Ticket Purchase Terms, we may use recordings for educational distribution to Attendees, archival purposes, and promotion of Leaf & Arrow and our Events.

What we do not do:

• We do not run facial recognition, face-matching, or facial geometry analysis on recordings
• We do not create or store biometric identifiers or biometric templates from your image
• We do not use attendee recordings to train, fine-tune, or develop machine learning models or artificial intelligence systems, and we do not license them to others for that purpose
• We do not sell, license, or otherwise make available your likeness as a standalone product, and we do not sell attendee footage to third parties. Where a recording of a full session is offered for sale or on-demand access, any attendee visible in it appears only incidentally, as part of the session as delivered

Your options.

You can attend any recorded Event without appearing in the recording. Keep your camera off, refrain from posting in public chat, and avoid interactive features that place you on screen. Attendees who do this will not appear in the recording. Contact us at info@leaf-arrow.com before an Event if you want to discuss participation options.

Where an Event is recorded, we disclose it on the Event Page and announce it at the start of the session.

Zoom AI features

Where Zoom AI summarization, transcription, or similar features are used, we will disclose it on the Event Page. Zoom processes that data under its own terms.

4. Accessibility Requests and Disability-Related Information

When you request an accommodation – interpretation, CART, captioning, or another access service – you may disclose information about a disability or health condition.

We treat this as sensitive information.

• We use it only to arrange and provide the requested accommodation
• We share it with third parties only where necessary to deliver that accommodation, such as engaging an interpreter or captioner, and only to the minimum extent necessary
• We do not disclose it to Presenters unless necessary for delivery, and not in a form that identifies you where that can be avoided
• We do not use it for marketing, profiling, or any decision about you other than providing the accommodation
• We do not sell or share it for advertising purposes
• We retain it only as long as needed for the Event and any related record, then delete it in accordance with Section 10

Please note. Accessibility requests are received at our general contact address, info@leaf-arrow.com, which is accessible to Leaf & Arrow staff generally rather than to a restricted group. If you prefer to limit who sees the details of your request, you may send a request without specifics — simply ask us to contact you about an accommodation — and we will arrange a more private channel for the details.

You may request deletion of accommodation records at any time under Section 11.

5. How We Use Information

6. Legal Bases (Where GDPR or UK GDPR Applies)

If you are in the European Economic Area, the United Kingdom, or Switzerland:

• Contract – processing necessary to sell you a ticket and deliver the Event
• Legitimate interests – security, fraud prevention, service improvement, and defense of legal claims, where not overridden by your rights
• Consent – marketing email, non-essential cookies, and recording of your image and signing. You may withdraw consent at any time, without affecting prior processing
• Legal obligation – tax and accounting records

Accommodation-related information and recordings that reveal disability may constitute special category data under Article 9. Where that applies, we rely on your explicit consent, and you may withdraw it as described in Section 10.

7. How We Share Information

Presenters. We share your name and, where necessary, your registration details with the Presenter delivering your Event. Presenters see your display name, chat messages, and video if your camera is on, the same as any other participant. Presenters are contractually required to keep attendee information confidential and to use it only to deliver the Event.

Service providers. We use vendors who process information on our behalf under contract:

Legal. We may disclose information where required by law, subpoena, or court order, or where necessary to protect our rights, property, or safety, or those of Attendees or the public.

Business transfer. If Leaf & Arrow is involved in a merger, acquisition, reorganization, or sale of assets, information may transfer as part of that transaction. We will notify you if your information becomes subject to a materially different privacy policy.

With your consent. Any other sharing occurs only with your direction or consent.

8. What We Do Not Do

• We do not sell your personal information
• We do not share your personal information for cross-context behavioral advertising or targeted advertising
• We do not use your personal information, recordings, or chat contributions to train, fine-tune, or develop machine learning models or artificial intelligence systems, and we do not license them to third parties for that purpose
• We do not use sensitive information to infer characteristics about you

9. Cookies and Tracking

Our website uses:

• Strictly necessary cookies – session management, cart, checkout, security. These cannot be disabled.
• Analytics cookies – how visitors use the site, in aggregate.
• Preference cookies – remembering settings you choose.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent checkout from working.

Global Privacy Control. We honor the Global Privacy Control (GPC) signal as a valid opt-out request where applicable law requires it.

We do not respond to browser Do Not Track signals, as there is no consistent industry standard for them.

10. Data Retention

We may retain information longer where necessary to resolve a dispute, enforce our agreements, or comply with law.

11. Your Rights

Depending on where you live, you may have the right to:

• Know or access – what personal information we hold about you
• Correct – inaccurate personal information
• Delete – your personal information, subject to legal exceptions
• Portability – receive a copy in a portable format
• Opt out – of sale, targeted advertising, or profiling. We do not engage in these, but the right exists
• Limit use of sensitive information
• Withdraw consent – including consent to appear in a recording
• Non-discrimination – we will not deny service or charge different prices because you exercise a right
• Appeal – if we deny your request, you may appeal as described below

We extend these rights to all Attendees regardless of residence, to the extent we are able.

Recordings specifically. You may request that we remove your appearance from a recording. Where a recording has already been distributed, complete removal may not be possible, but we will make reasonable efforts to remove or edit the material we control and to cease further distribution of the affected segment. Tell us which Event and approximately when you appear.

How to exercise a right

Email info@leaf-arrow.com with your request and enough detail to identify your records. We may need to verify your identity, typically by confirming information associated with your purchase.

We respond within 45 days, and may extend once by an additional 45 days where reasonably necessary, with notice to you. Where GDPR applies, we respond within one month, extendable by two further months for complex requests.

An authorized agent may submit a request on your behalf with written authorization.

Appeals

If we deny your request, you may appeal by emailing info@leaf-arrow.com with “Privacy Appeal” in the subject line. We will respond within 45 days with our decision and reasoning. If we deny the appeal, you may contact your state attorney general.

EEA, UK, and Swiss residents

You have the right to lodge a complaint with your local supervisory authority.

12. International Transfers

We are based in the United States, and personal information we collect is stored and processed in the United States. Some of our service providers are organized outside the United States and may access data from other jurisdictions in the course of providing support and maintaining their services.

If you access our services from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from your own.

Where we transfer personal information from the EEA, UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

13. Children

Our Events and website are intended for individuals 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact info@leaf-arrow.com and we will delete it.

Where a parent or guardian registers a minor for an Event, the parent or guardian is responsible for that registration and for the consents in Section 3.

14. Security

We use reasonable administrative, technical, and physical safeguards, including encrypted transmission, access controls, and restricting access to personnel who need it.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

If a breach affecting your personal information occurs, we will notify you and any required regulator as applicable law requires.

15. Third-Party Links

Our website and Event materials may link to third-party sites we do not control. This Policy does not apply to them. Review their privacy policies before providing information.

16. Changes to This Policy

We may update this Policy. We will post the revised version with an updated Effective Date. If changes are material, we will notify registered Attendees by email or through a notice on our website. Continued use after the Effective Date constitutes acceptance.

17. Contact

Leaf & Arrow, LLC 2222 W Grand River Ave, Ste A Okemos, Michigan 48864

Privacy inquiries, rights requests, accessibility requests, and general support: info@leaf-arrow.com