Privacy policy
Last updated: December 27, 2025
1. Who we are
Oracle Girl is a platform dedicated to embodying more love on this planet via public talks, group and personal purifications entirely by donation. Through the Oracle Girl website, we enable people all over the world to discover, share and sign up for Oracle Girl events.
Individuals and third parties using the Oracle Girl website and/or joining Oracle Girl events are all collectively referred to as “users” in this Privacy Policy (“Users”, “you” or “your”).
Oracle Girl LLC is a USA‑based company whose business address is 12112 N Rancho Vistoso Boulevard, Oro Valley, Arizona 85755 (“Oracle Girl”, “Jacqueline”, “us,” “we” or “our”). For residents of the EEA, the United Kingdom and Switzerland, Oracle Girl LLC acts as the data controller of your personal data collected through the Oracle Girl website and events. We have appointed external Data Protection Representatives (sometimes called “Article 27 representatives”) in the European Union, United Kingdom and Switzerland to comply with local law; these representatives act as local contact points for individuals and regulators but are not Data Protection Officers and do not provide legal advice. Their details appear at the end of this policy.
If you have any questions, please do not hesitate to contact us via jacqueline@oraclegirl.org or privacy@oraclegirl.org.
2. Guiding statement
Our baseline. We always endeavour to collect and store the barest minimum of data that can be traced back to you as a person and to store this for the shortest amount of time possible.
Our ethics. We strongly believe that data privacy is a fundamental human right. It’s your data. You are entitled to choose. We never sell your personal data.
Types of data we collect. When you interact with the Oracle Girl website, we may collect both personal and non‑personal data. The limitations and requirements in this Privacy Policy concerning personal data do not apply to non‑personal data.
3. Definitions
Anonymise. Personal identifiable information (PII) made non‑identifiable. That is, you can’t link a person to a name or an email address.
Automatic data. Technical data sent to Oracle Girl from a computer, mobile device and/or browser through which the Oracle Girl website and events can be accessed.
Business. Organisations that process personal data for their own purposes.
Cancel. When you permanently end your participation in an event.
Data controller. Oracle Girl processing personal data for its own purposes.
Data erase. A general term which includes both data deletion and data expunge.
Data processor. Oracle Girl processing personal data on behalf of other organisations.
Delete. When data is withdrawn from use, e.g. when data is anonymised; removed from our current systems; stored elsewhere in a separate secure area.
Personal account. A container for all of your sign‑ups, subscriptions, notification preferences and Specific focus.
Expunge. When all data is completely and permanently removed, e.g. from all of our current systems; from separate storage.
First‑party. The Oracle Girl website owner, Oracle Girl.
Internet Protocol (IP) address. A unique numerical label assigned to every device connected to a computer network that uses the internet for communication.
Non‑personal data. Any information that does not relate to a person and/or cannot be used to identify a person.
Personal data. Information relating to an identified or identifiable natural person or household which you give to us, e.g. personal identifiable information (PII); information in emails and any specific focus; or any data or message you add on an Oracle Girl webpage, or a webform.
Personal identifiable information (PII). Any name or email address you provide. Your IP address, country and city based on an IP geolocation check.
Processor. An entity that processes personal data on behalf of, and in accordance with the instructions of, a data controller.
Service provider. Organisation that processes personal data on behalf of other organisations.
Specific focus. An optional text for calibrating your purification.
Sub‑processor. An entity engaged by a data processor who agrees to receive from the processor, personal data exclusively intended for processing activities to be carried out.
Third party. Oracle Girl developers, vendors, processors & sub‑processors.
Vendor. An individual or entity which has entered into an Agreement with Oracle Girl.
4. Personal data that we collect
4.1 Information collected from all users
Information you provide to us. We collect personal data from all users when you voluntarily provide such information, e.g. when you sign up for a Personal account, contact us with inquiries, respond to one of our polls or surveys, join an Oracle Girl event, or browse or use Oracle Girl webpages. The personal data we may collect includes without limitation your name, address, email address, content you have signalled you are interested in (e.g. by viewing, clicking, favouriting or searching on the Oracle Girl website) and any other information that you choose to provide and/or that enables a user to be personally identified, e.g. a specific focus.
Information we automatically collect. We automatically collect automatic data, which includes without limitation, a unique identifier associated with your access device and/or browser (including, for example, your IP address), characteristics about your access device and/or browser, statistics on your event activities, information about how you came to the events and data collected through cookies. Oracle Girl uses such technologies to collect information on a real‑time basis about how you use and navigate the Oracle Girl website. This may include information about your browsing behaviour, page visits, clicks and searches on our sites. You can find out more information about how we use cookies in “11. Website usage & cookies” below.
5. How we use your personal data
5.1 How we collect your personal data
We collect and use the personal data we collect in a manner that is consistent with this Privacy Policy, and applicable privacy laws.
5.2 Why we collect your personal data
We may use this data for:
A specific reason. For example, if your provide personal data for a certain purpose, Oracle Girl may use that data in connection with the purpose it was provided for.
Access & use. For example, if you provide personal data in order to obtain access to or use of the Oracle Girl website or any of its functionality, Oracle Girl will use your personal data to provide you with access to or use of the Oracle Girl website or functionality and to analyse your use of its website or functionality
Internal business purposes. For example, including without limitation, to help us improve the content and functionality of the Oracle Girl website, to better understand our website users, to improve Oracle Girl events and the Oracle Girl website, to manage your Personal account and provide you with email responses, and to generally manage the the Oracle Girl website, Oracle Girl events and the Oracle Girl business.
5.3 Personal account
Set-up & use. We store your email address so you can set up and use your Personal account.
Data storage. We keep the visible data in your Personal account for as long as you have an account. This is so we can answer any enquiries you may have; improve the features and efficiency of your Personal account; and keep your data and our data systems compliant and secure in line with changing legal requirements.
5.4 Emailing us
Use & storage. If you send an email to jacqueline@oraclegirl.org we may use the information you give in that email to answer you. This includes personal data. We will also store your email in line with changing legal requirements.
Testimonials. If you send us a testimonial via email, we may use part or whole of that data, as a testimonial, including your name if you choose to give it. We will not do this if you specifically request us in writing not to do so.
With your consent. If you send them in, we may request to use your photos, your own artwork, poetry or any photo of yourself on our website or in a Newsletter. We will always ask your explicit permission first, in writing, before we use anything.
5.5 Event sign-up & donations
Personal identifiable information (PII). If you join an event, use the gift option, Donate+ or request Immediate assistance we collect and store the following PII from you, in line with changing legal requirements:
- The name you provide and your email address.
- Your IP address, country and city based on an IP geolocation check.
Card details. We do not collect, process, or store any payment card details and all donation transactions are processed directly by our third-party payment service providers, Stripe, PayPal and Nimiq, who collect and store this information in accordance with their respective privacy policies. As independent data controllers, Stripe and PayPal are responsible for the processing of your payment card information. For questions or concerns regarding how your payment card data is collected, used, or stored, please refer to:
How we use & store your PII. We use this information to send you donation receipts; reminder and event emails - but only if necessary. We also store this information in line with changing legal requirements.
5.6 Live chat during events
Data collection. When you interact with us via the live chat during events or other support features, the following data may be collected:
- Your name, email address, and any other contact details you voluntarily provide.
- Usage data such as IP address, browser type, and your interaction history with our website.
Storage. Any chat history is stored for up to 6 hours after the event has finished and is then expunged from the system.
5.7 Newsletter
If you sign up. Your email address is stored on our newsletter mailing list only, until you unsubscribe.
If you unsubscribe. Your email address is expunged from our newsletter mailing list immediately so you cannot receive further newsletters. It is stored on our system in line with changing legal requirements.
How to unsubscribe. Click on the Unsubscribe link in your newsletter or email jacqueline@oraclegirl.org or privacy@oraclegirl.org.
5.8 Questions
Use. If you send a question via email, attached to an event sign-up and/or an event explore page, we may use part or whole of that data for and/or during events and on official Oracle Girl social media platforms.
Storage & access. Questions data is stored by automation, on our system in line with changing legal requirements.
5.9 Specific focus
Immediate assistance. Any specific focus data is automatically stored in our system after you complete the sign-up process. Immediate assistance sign-ups do not appear in your Personal account. We automatically expunge the specific focus data attached to your Immediate assistance within 30 days of the date you submit your sign-up.
All other events. These sign-ups appear in your Personal account. Any specific focus data you enter during the sign-up process is automatically stored, including modifications, in your Personal account after you complete the sign‑up process.
Storage & access. Any specific focus data is stored by automation, in a separate high security area, in line with changing legal requirements. Access to specific focus data is restricted to Jacqueline and in exceptional circumstances (such as critical technical emergencies), a senior member of the Oracle Girl Team may be granted temporary access with written authorisation from Jacqueline and with notification to the affected user where feasible.
5.10 Testimonials
Use. If you send a testimonial via email or our 'Send a testimonial' webform, we may use part or whole of that data as a testimonial on our What people say webpage, for and/or during events and on official Oracle Girl social media platforms.
Editing. We may edit your testimonial in line with Jacqueline's request that you show evidence of change; sensitive content and length.
Publishing. We will not use your testimonial if you specifically request us in writing not to do so.
Storage & access. Testimonial data is stored by automation, on our system in line with changing legal requirements.
5.11 Donate+
Use. Donate+ messages are read by Jacqueline only.
Storage & access. Donate+ data is stored by automation on our system in line with changing legal requirements. Access to Donate+ data is restricted to Jacqueline and in exceptional circumstances (such as critical technical emergencies), a senior member of the Oracle Girl Team may be granted temporary access with written authorisation from Jacqueline and with notification to the affected user where feasible.
5.12 Legal basis for processing (EEA/UK/Swiss only)
For users located in the European Economic Area, the United Kingdom and Switzerland, data protection law requires us to have a lawful basis for processing personal data. Depending on the context, we rely on one or more of the following legal bases:
- Contract performance. We process your data to perform our agreement with you, for example to provide events and administer your Personal account.
- Legitimate interests. We process data to pursue our legitimate interests, such as improving our services, ensuring security and preventing fraud, while ensuring that your interests and fundamental rights do not override those interests.
- Consent. We rely on consent to send you newsletters and other marketing communications. You have the right to withdraw your consent at any time.
- Legal obligation. We process data to comply with our legal obligations, such as tax, accounting and regulatory requirements.
6. How we disclose & transfer your personal data
6.1 No selling
We do not sell your personal data, including to third parties or third-party advertisers.
6.2 Agents, consultants and service providers
We may share your personal data with Oracle Girl contractors and service providers who process personal data on our behalf to perform certain business‑related functions. These companies include data services providers, database service providers, back‑up and disaster recovery service providers, email service providers, payment processing partners, customer support, tech support, hosting companies and others. We ensure that these third parties are subject to confidentiality obligations and only process personal data under our instructions and for purposes consistent with this policy.
6.3 International transfers & safeguards
Your personal data may be transferred to and processed in countries outside of your country of residence, including the United States, Hong Kong and other jurisdictions where Oracle Girl or our service providers operate. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum (IDTA) or rely on adequacy decisions. These safeguards ensure that your data remains protected when transferred outside the EEA, UK or Switzerland.
7. How we access & process your personal data
7.1 Access
Need-to-know. We restrict access to your personal data to only those who have a specific and authorised business need to access it.
Oracle Girl Team. The Oracle Girl Team only processes personal data according to whether they have been authorised and within the remit of their role. All of the Oracle Girl Team follow strict procedures concerning the handling of personal data and confidential information. They have signed a strict Non Disclosure Agreement (NDA) which lasts in perpetuity. The Oracle Girl Team has also been specifically trained in the handling of personal data.
External contractors & service providers. All Oracle Girl contractors are checked before hiring. They are only given access to personal data on a need-to-know basis under the strict supervision of Oracle Girl senior management. Service provider privacy policies are checked before acquiring their services.
7.2 Data processing
For users outside the EEA. We process your data in accordance with applicable local data protection laws and industry best practices.
For users in the European Economic Area (EEA), Switzerland, and the UK. We process your data in accordance with the General Data Protection Regulation (GDPR) and equivalent data protection laws. When we transfer data outside these regions, we implement Standard Contractual Clauses, rely on adequacy decisions or other legally recognised transfer mechanisms to ensure that the data remains protected.
Third-party service providers. In limited circumstances, certain technical metadata, system monitoring data, or service-related information may be processed by third-party service providers located outside the EU. When this occurs, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other legally recognised transfer mechanisms
8. How we secure & store your personal data
8.1 Data security
Our data security practices. We implement the best data security practices wherever feasible and practical. We have in place appropriate measures to protect the security of your personal data. We take what we believe to be reasonable steps to protect all personal data collected from loss, misuse, unauthorised use, access, inadvertent disclosure, alteration and destruction.
How we protect your personal data. We implement appropriate technical and organisation measures, including:
- Encrypted connections (TLS/HTTPS) for all data transmitted between your device and the Oracle Girl website; and
- Database-level security measures provided by our hosting infrastructure
Use of third parties. We use minimal, reputable 3rd party service providers ("sub-processors") for business infrastructure, internal communication tools, and collecting your donation to provide specific functionality so that we can provide events, e.g. Stripe, PayPal, Nimiq, Sentry. These maintain their own security standards.
8.2 Storage
We may store personal data itself or such information may be stored by third parties to whom we have transferred it in accordance with this Privacy Policy.
Server location. Your personal data is primarily processed and stored on servers located within the European Union.
Duration. We only store your data for as long as necessary to engage with you and complete legitimate data handling processes in line with changing legal requirements. In some cases, for legal or regulatory reasons we retain certain categories of data (such as donation and financial records) for up to seven years. If you close your Personal account, your personal data will be anonymised within 30 days, whatever method you use to close your account.
Disclaimer. No method of electronic storage or transmission, including any network, server, database, internet or email transmission is ever 100% secure or error free, and we cannot guarantee absolute security.
Recommendation. You should always decide carefully what information you choose to give to anyone - including Oracle Girl - especially when disclosing any personal data.
9. How you can access, update, correct or delete your personal data
9.1 Managing your data
You can access, update and delete most of your personal data directly through the Settings in your Personal account:
- Update your information: Go to your Settings page > Name
- Change your email: Go to your Settings page > Change email
- Delete your account: Go to your Settings page > Delete account
9.2 Correcting your personal data
If you find you cannot change any personal data in your Personal account, please contact us via privacy@oraclegirl.org.
9.3 Deleting your personal data
If you close your Personal account, your personal data will be anonymised within 30 days, whatever method you use to close your account. When legally permitted, we will delete your data. Please note that data erasure is subject to certain restrictions. We may be required or permitted to retain certain data under applicable data protection laws or other legal obligations. In some cases:
- We must retain specific types of data for legally mandated retention periods (e.g., financial records, transaction history)
- We may anonymise your data rather than immediately expunging it from our systems
- Some data may need to be retained for legitimate business purposes such as fraud prevention, legal compliance, or to resolve disputes
9.4 Requesting further assistance
If you're unable to manage your data through your Personal account, or if you have specific requests regarding your personal data, please contact us via privacy@oraclegirl.org. We will consider your request in accordance with applicable laws and respond to verified requests within 30 days.
9.5 Additional rights for EEA, UK & Swiss residents
If you are resident in the EEA, United Kingdom or Switzerland, you also have the right to:
- Access. Request a copy of the personal data that Oracle Girl holds about you.
- Rectification. Request that Oracle Girl corrects any inaccurate or incomplete personal data.
- Erasure. Request deletion of your personal data when it is no longer needed or when processing is based on consent.
- Restriction. Request that Oracle Girl restricts processing of your data under certain circumstances.
- Objection. Object to processing of your personal data where we rely on legitimate interests.
- Data portability. Request that we provide your data in a structured, commonly used and machine‑readable format and transfer it to another controller.
- Withdraw consent. Withdraw your consent at any time where we rely on consent for processing.
You can exercise these rights by contacting us at privacy@oraclegirl.org or through your Personal account. We will respond to your request within the timeframes required by law (usually within one month). You also have the right to lodge a complaint with your local supervisory authority if you believe your data has been handled unlawfully.
10. How long we retain your personal data
10.1 Duration
We may retain your personal data for as long as you are registered to use a Personal account. You can delete your account by visiting the Settings page.
10.2 Legal obligations
We may retain personal data for an additional period as is permitted or required under applicable laws. When retention is required, we will restrict processing to only what is necessary for the legal basis requiring retention. Even if Oracle Girl deletes your personal data, this data may persist in secure areas for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes. For example, donation records are typically retained for seven years to comply with accounting and tax laws.
11. Website usage & cookies
11.1 Website usage
Browsing. We collect some PII. When you browse our website without creating an account or making a donation, we collect minimal technical data including your IP address (which is considered personal identifiable information), browser type, and pages visited. This data is used for security, analytics, and to improve website functionality.
If you make a donation. We use your public IP address to determine your geographic location. We store the country, state/province, and city associated with your IP address for our financial records and regulatory compliance purposes.
11.2 Cookies
Cookie definitions:
Analytical cookies. For gathering valuable insights into how the Oracle Girl website is being used and how to customise its webpages. Aids in identifying areas for improvement, understanding user preferences, and ensuring the relevance of content. This may include information about browsing behaviour, page visits, clicks, cursor movements and searches.
Cookies. Small data files placed on your computer or mobile device when you visit a website. Make websites function smoothly. Assist in remembering user actions across pages within a website to enhance overall website experience.
First-party cookies. Cookies set by the website owner, Oracle Girl.
Functionality cookies. Enhance the performance and functionality of the Oracle Girl website, but are not required for their use. Without these cookies, certain functionalities may become limited or unavailable.
Necessary cookies. Ensure proper functioning of and to provide you with access to and the basic use of the Oracle Girl website. Primarily for essential tasks like user authentication, enabling the website to recognise and remember logged-in users as they navigate between pages or refresh the site, access to secure areas and setting your preferences. These cookies cannot be turned off.
Permanent cookies. Allow first- and third parties to understand visitors’ browsing behaviour over a longer period of time, to provide them with additional features related to website use, the content saved or stored through them, as well as for advertising and marketing purposes. Depending on their function, this type of cookie may persist for different lengths of time ranging from several hours, to a week, or even several years. This type of cookie will persist after you end a browsing session and can be used by us or third parties to recognise your device when you begin a new browsing session.
Temporary/session cookies. Allows website browsing without interruption. After the browsing session ends, this type of cookie does not store any information on your hard drive.
Third-party cookies. Cookies set by parties other than the website owner, Oracle Girl, which enable third-party features or functionality to be provided on or through the Oracle Girl website (e.g. interactive content, analytics).
Cookie policy. We use the minimum amount of cookies to ensure your use of the Oracle Girl website is convenient and secure.
Cookie management. To modify your cookie settings at any time, please visit the "Manage Cookies" link in the footer of the Oracle Girl website.
Cookie types. Oracle Girl uses the following first- and third-party cookies only: necessary, functionality and analytical cookies. We do not use advertising cookies. Oracle Girl also uses temporary/session and persistent cookies.
Cookie duration. The duration of cookie storage on your device may vary, according to whether the cookie is temporary or permanent. Please note that in general, all third-party applications use and store their cookies.
Cookie usage. We use cookies in the following ways listed below. Please note that while we endeavour to maintain a completely accurate and up-to-date cookie list, this may not always be possible:
- Cf_clearance. To detect web bots. Expiry: within 6 months.
- Intercom-session. Keeping track of sessions. Expiry: 1 week.
- Intercom-id. Anonymous identifier cookie. Expiry: 9 months.
- Intercom-device-id. To determine the unique devices interacting with the Intercom Messenger to prevent abuse. Expiry: 9 months.
- cookie_consent. To remember your cookie consent choice and avoid annoying website browsing. Expiry: 6 months.
- payload-token. To keep you logged in and make your browsing convenient. Expiry: 14 days with auto-refresh.
- _ga and _ga_1XX1X1XXXX. Used by Google Analytics to distinguish one visitor from another. These cookies are optional. Expiry: 13 months.
- Stripe donations gateway. For successfully using the checkout. Stripe uses its own set of cookies which means that if you join an event and use the Stripe donation method, Stripe places cookies in your device. Expiry: __stripe_sid = 30 minutes and __stripe_mid = 1 year.
- Vimeo player cookies (embedded). For viewing optimisation and bot protection. Vimeo uses its own set of cookies which means that if you join an event featuring a video link or watch a video on a website page, Vimeo places an indirect cookie in your browser.
12. Exclusions
12.1 Personal data provided to others
This Privacy Policy does not apply to any personal data that you provide to another user or visitor through the Oracle Girl website or through any other means, including information posted by you to any public areas of the Oracle Girl website.
12.2 Third-party links
This Privacy Policy applies only to the Oracle Girl website, which may contain links to other websites not operated or controlled by us ("third-party sites"). The policies and procedures we describe here do not apply to third-party sites. Links from the Oracle Girl website do not imply that we endorse or have reviewed such third-party sites. We suggest contacting those sites directly for information on their privacy policies.
13. Children: Children's Online Privacy Protection Act (COPPA)
13.1 Data collection
We do not knowingly collect personal data from children under the age of 13. In some jurisdictions (such as the EEA), data protection law sets a higher age threshold (generally 16) for consent. If you are under 16 and reside in the EEA, UK or Switzerland, please do not submit any personal data through the Oracle Girl website.
13.2 If you are under age 13
Please do not submit any personal data through the Oracle Girl website including via any Personal account, live chat, webpage or webform.
13.3 Parents & legal guardians
We encourage parents and legal guardians to monitor their children’s internet usage. Please help us to enforce our Privacy Policy by instructing your children never to provide personal data through the Oracle Girl website without your permission. If you are in the EEA, UK or Switzerland, please ensure that children under 16 do not provide personal data.
13.4 Breach
If you have reason to believe that a child under the age of 13 has provided personal data to Oracle Girl, please contact us immediately via privacy@oraclegirl.org and we will endeavour to delete that information from our databases.
14. Your choices
14.1 "I wish to stop all emails."
There are 3 things you need to do:
a) Newsletter. You can opt out of receiving Newsletter emails by clicking on the "Unsubscribe" link at the bottom of any Newsletter or switching off your Newsletter notifications on the Settings page in your Personal account.
b) In your Personal account. On the Settings page, you can opt out of all emails except receiving replies from the Oracle Girl Team if you email them. We only recommend this if you plan to stop participating in Oracle Girl events entirely:
- Newsletter (if you didn't unsubscribe already in the newsletter email)
- Send a reminder before a live event
- Donation receipts
- Receive event materials by email
- Abandoned sign-ups
c) Write to us. Contact us at jacqueline@oraclegirl.org or privacy@oraclegirl.org to request complete email opt-out. This means you won't receive any emails from us, including responses to your emails and/or questions from the Oracle Girl Team.
14.2 "I wish to limit the personal data I provide."
If you want to minimise the personal data you provide, you can browse the Oracle Girl website without creating an account or signing up for events. However, please note that even when browsing, we automatically collect certain technical data (such as your IP address, browser type, and pages visited), which is considered personal data under applicable privacy laws.
If you want to avoid providing additional personal data beyond this automatic collection, you should not:
- Sign up for the Newsletter or a Personal account
- Join any events, use any live chat on the homepage or during an event, or email us via jacqueline@oraclegirl.org
- Any webform which requires you to input PII or personal data or submit any question via email, attached to an event sign-up and/or an event explore page.
15. Changes to this Privacy Policy
15.1 Updates
This Privacy Policy was updated on the date indicated above. We may update this policy from time to time. Please check this webpage regularly for the most recent version and especially before you provide any personal data.
15.2 Modifications
Oracle Girl events and the Oracle Girl business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, according to our sole discretion, to update or modify this Privacy Policy at any time. Modifications will be posted on this webpage with a change to the "Updated" date at the top of this Privacy Policy.
15.3 Notice of modifications
In certain circumstances Oracle Girl may, but need not, provide you with additional notice of such modifications, such as via email. Modifications will be effective 30 days following the "Updated" date or such other date as communicated in any other notice to you.
15.4 Continued use
Your continued sign-up for Oracle Girl events and use of the Oracle Girl website, following any modifications to this Privacy Policy, constitutes acceptance of those modifications. If any modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing, signing up and otherwise using the Oracle Girl website.
16. Complaints & resolution
If you have a complaint about Oracle Girl privacy practices you should write to us at: FAO Privacy Officer, Oracle Girl LLC, 12112 N Rancho Vistoso Boulevard, Oro Valley, Arizona 85755, USA or via privacy@oraclegirl.org.
We will take reasonable steps to work with you to attempt to resolve your complaint.
Residents of the EEA, Switzerland or the UK who believe that their information has not been processed in compliance with the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework or the UK Extension to the EU-US Data Privacy Framework may raise their complaints in a number of ways. For further information, please see the US Department of Commerce’s Data Privacy Framework program.
17. EEA, Switzerland & UK only
17.1 Additional information
The EU General Data Protection Regulation (GDPR) requires Oracle Girl to provide you with more information about the processing of your personal data as follows:
17.2 Legal grounds for processing
We process your personal data on one or more of the legal grounds described below:
- Your consent: when you have given us express permission to process your data. For example, when you sign up for newsletters or marketing emails.
- Contract performance: when processing is necessary for the performance of a contract with you, such as providing events or managing your Personal account.
- Legal obligation: when processing is necessary to comply with our legal or regulatory obligations, such as tax and accounting requirements.
- Legitimate interests: when processing is necessary for our legitimate interests and these are not overridden by your rights, such as improving our services, understanding how our services are used, securing our systems and preventing fraud.
17.3 Transfers of personal data
If we transfer personal data outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your personal data. This includes the use of Standard Contractual Clauses issued pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021, and for transfers from the UK, the UK International Data Transfer Addendum (IDTA). We may also rely on adequacy decisions or other recognised transfer mechanisms.
17.4 Personal data retention
Oracle Girl retains your personal data for as long as necessary to provide you with access to Oracle Girl events, or for other important purposes such as complying with legal obligations. If you have a Personal account with Oracle Girl, we will typically retain your personal data for a period of 30 days after you have requested that your account is closed. Certain categories of data (such as donation records) may be kept for up to seven years for accounting and tax purposes.
17.5 Your rights
Data protection law provides you with rights relating to the personal data that Oracle Girl holds about you, including the right to request a copy of your personal data, to request that Oracle Girl rectifies, restricts or deletes your personal data, and to unsubscribe from email communications.
- You can exercise these rights by signing in to your Personal account or changing the cookie settings in your browser. If you can't find what you're looking for, please contact us using the contact information in "16. Complaints & resolution" above.
- Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. Sometimes Oracle Girl is not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation.
17.6 Complaints
If after contacting privacy@oraclegirl.org, you have a complaint about how we handle your personal data, please get in touch with us as indicated in Section 16 above. If you are not satisfied after we have attempted to resolve your complaint, you may contact the relevant data protection authority.
17.7 Oracle Girl as data controller versus data processor
Oracle Girl may act as either a data controller or a data processor in respect of your personal data, according to the circumstances.
- For example, if you create a Personal account with us to manage your events, Oracle Girl will be a data controller in respect of the personal data that you provide as part of your account.
- If you have questions about how your personal data is handled, these should be directed to the relevant data controller as detailed in Section 1 above.
18. Residents of certain states
If you are a resident of a USA state that has implemented a law that provides you with additional personal data rights including California, Virginia, Colorado, Connecticut, Utah or Nevada, we can provide additional information about our information practices and you may have certain rights with respect to your information. Depending on your state, these rights may include the right to request access to and deletion of personal data, the right to opt out of certain processing or the right to obtain information about our data practices. Please contact us for State‑Specific Supplementary Privacy Notices via privacy@oraclegirl.org.
19. Brazil only
If you are a Brazil user, we can provide additional information about our information practices and you may have certain rights with respect to your information. Please contact us for Brazil Supplementary Privacy Notices via privacy@oraclegirl.org.