Privacy Policy

Last updated: 2026-05-21

1. Who we are and how to reach us

Earth-Based Institute ("EBI," "we," "our," "us") is a coach training organization based in Colorado. We run the Nature-Connected Coaching (NCC) program and related advanced programs, faculty resources, and community offerings.

This Privacy Policy explains what personal information we collect when you visit earthbasedinstitute.org and any other pages or subdomains we operate (the "Site"), what we do with that information, who we share it with, and what rights you have. It applies to the Site. Enrollment in our programs is governed by separate enrollment agreements signed through programs.earthbasedinstitute.org.

To contact us about this policy or about your personal information:

Earth-Based Institute
PO Box 881, Niwot, Colorado 80544
Email: info@earthbasedinstitute.org
Phone: 720-897-3707

2. Information we collect

We collect information in three ways: information you give us directly, information we collect automatically when you use the Site, and information we receive from third parties.

Information you give us directly:

  • Name, email address, and phone number when you fill out a contact form, register for an event, request a brochure, or join a mailing list
  • Information you choose to share in form fields, surveys, or messages (such as your coaching background, professional context, or reason for inquiring about a program)
  • Mailing address, if you request a printed item or attend an in-person event
  • Demographic information you provide voluntarily

Information we collect automatically:

  • IP address, approximate location based on IP, browser type, operating system, and device type
  • Pages you view, links you click, and time spent on the Site
  • Referring URL (where you came from before arriving at the Site)
  • Cookie identifiers and similar tracking data (see our Cookie Policy for the full list and your options)

Information from third parties:

  • Information from our payment processor (Stripe) when you make a payment for an EBI offering, limited to transaction confirmation data. Stripe handles card details directly; we do not see or store full card numbers.
  • Information from our community platform (Mighty Networks) about your participation in EBI community spaces, if you join one.
  • Information from advertising platforms (Meta, Google) about which ads led you to the Site, in aggregate form.

We do not collect Social Security numbers, government identifiers, financial account details, or precise geolocation through the Site. We do not sell personal information.

3. How we use your information

We use the information we collect to:

  • Respond to your inquiries and provide the information you requested
  • Process program applications and route them to our admissions team
  • Send you the email communications you opted into (newsletters, program updates, event announcements)
  • Operate, maintain, and improve the Site
  • Measure how the Site performs and which content is useful
  • Run advertising on platforms like Meta and Google, and measure whether those ads are effective
  • Comply with legal obligations
  • Protect the security of the Site and our users

4. Legal bases for processing (EU, UK, and similar jurisdictions)

If you are in the EU, UK, or a jurisdiction with similar privacy laws, we rely on the following legal bases under GDPR:

  • Consent. When you opt into our email list, submit a form, or accept cookies on our cookie banner.
  • Contract. When processing is necessary to take steps before entering into a contract with you (for example, when you apply for a program).
  • Legitimate interests. For analytics, fraud prevention, site security, and improving our services, where these interests are not overridden by your rights.
  • Legal obligation. When we are required by law to process or retain information.

You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

5. Who we share information with

We share information with the following categories of recipients:

Service providers (subprocessors) who help us run the business:

  • Webflow (website hosting and form submissions)
  • Ontraport (CRM, email marketing, automation, application portal)
  • Stripe (payment processing)
  • Mighty Networks (community platform)
  • Zoom (program sessions and recordings)
  • Google Workspace (email, document storage)
  • Google Analytics (website analytics)
  • Google Ads and Meta Ads (advertising and measurement)
  • CookieYes (cookie consent management and consent record-keeping)

Each of these providers handles your information under their own privacy policies and our written agreements with them. We do not authorize them to use your information for their own marketing purposes.

Legal and safety. We may disclose information when required by law, in response to a valid legal request, or when we believe disclosure is necessary to protect the rights, property, or safety of EBI, our users, or others.

Business transfers. If EBI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We do not sell personal information. We do not share personal information with advertisers for cross-context behavioral advertising without your consent.

6. International data transfers

EBI is based in the United States. If you access the Site from outside the United States, the information we collect is transferred to and processed in the United States. For users in the EU and UK, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms with our service providers.

7. How long we keep your information

We keep personal information for as long as we need it for the purpose we collected it, then we delete or anonymize it. Specifically:

  • Form inquiries and applications: retained for up to 5 years from your last interaction
  • Mailing list data: retained until you unsubscribe, then anonymized within 12 months
  • Analytics data: retained for up to 26 months in Google Analytics (default)
  • Payment records: retained as required by tax and accounting law (typically 7 years)
  • Program participation records: retained as required for ICF accreditation and our own teaching records (typically 7 years)

You can request earlier deletion at any time, subject to our legal retention obligations.

8. Your privacy rights

Everyone has the following baseline rights:

  • Access. Ask us what personal information we hold about you.
  • Correction. Ask us to correct inaccurate information.
  • Deletion. Ask us to delete your information, subject to our legal retention obligations.
  • Opt-out of marketing. Unsubscribe from our emails at any time.

If you are in the EU, UK, or similar jurisdiction (GDPR rights):

  • Right to portability (receive your data in a portable format)
  • Right to restrict processing
  • Right to object to processing
  • Right not to be subject to solely automated decision-making (we do not engage in this)
  • Right to lodge a complaint with your local data protection authority

If you are a California resident (CCPA/CPRA rights):

  • Right to know what personal information we collect, use, disclose, and share
  • Right to delete personal information
  • Right to correct inaccurate personal information
  • Right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information, and we honor the Global Privacy Control signal.
  • Right to limit the use of sensitive personal information. We do not collect sensitive personal information for purposes beyond providing services.
  • Right to non-discrimination for exercising your rights

If you are a Colorado resident (Colorado Privacy Act rights):

  • The same rights as California, plus the right to appeal our decision on a privacy request.

Other states. Residents of Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights. We honor requests from residents of any U.S. state with comparable rights.

9. How to exercise your rights

Email us at info@earthbasedinstitute.org with the subject line "Privacy Request" and tell us:

  • What you are asking for (access, deletion, correction, opt-out, etc.)
  • The state or country you live in
  • Enough information for us to verify your identity (typically the email address and name you used when you contacted us)

We will respond within 45 days, or longer if needed with notice to you. There is no charge.

You can also unsubscribe from any marketing email by clicking the unsubscribe link at the bottom.

If we deny your request and you live in a state where appeal is allowed, you can appeal by emailing us at the same address with "Privacy Appeal" in the subject line.

10. Children's privacy

This Site is intended for adults. We do not knowingly collect personal information from children under 13. If you are under 13, do not submit any information to us. If we learn that we have collected personal information from a child under 13, we will delete it.

Our coach training programs are limited to adults 18 and older. Program enrollment is governed by separate enrollment agreements.

11. Sensitive personal information

We do not knowingly collect sensitive personal information (such as racial or ethnic origin, religious beliefs, health information, sexual orientation, precise geolocation, or government identifiers) through this Site. If you choose to share sensitive information voluntarily in a form field or message, we will treat it confidentially and use it only for the purpose you shared it.

12. Security

We use commercially reasonable safeguards to protect your information, including TLS encryption for all data submitted through the Site, password protection, access controls, and reputable third-party service providers.

No method of transmission over the internet or storage is 100% secure. We cannot guarantee absolute security, but we work to protect your information using current industry standards.

13. Data breach notification

If we discover a breach involving your personal information, we will notify you and the appropriate regulators in line with applicable law. For users in the EU and UK, this means notifying the relevant data protection authority within 72 hours of becoming aware of the breach where required by GDPR.

14. Cookies and tracking

The Site uses cookies and similar technologies. See our Cookie Policy for full details, including the categories of cookies we use, the tools they enable, and how to manage your preferences.

We honor the Global Privacy Control (GPC) browser signal. If your browser sends a GPC signal, we treat it as an opt-out of the sale or sharing of personal information.

15. Third-party links

This Site contains links to other websites, including our application portal at programs.earthbasedinstitute.org, our community platform on Mighty Networks, and partner organizations. We are not responsible for the privacy practices of other websites. We encourage you to read their privacy policies before sharing information.

16. Changes to this policy

We will update this policy from time to time as our practices change or as required by law. When we make material changes, we will update the "Last updated" date at the top of this page and, for substantive changes, post a notice on our homepage or send an email to people on our mailing list.

Continued use of the Site after a change indicates acceptance of the updated policy.

17. Contact us

Questions about this Privacy Policy, requests about your information, or complaints can be sent to:

Earth-Based Institute
PO Box 881, Niwot, Colorado 80544
Email: info@earthbasedinstitute.org
Phone: 720-897-3707

If you are not satisfied with our response, you can contact your state attorney general or, if you are in the EU/UK, your local data protection authority.