Privacy Policy

Last updated 24 August 2026. Effective 24 August 2026.

This policy explains what happens to your information when you visit spiritflowsedona.com, contact me, join my mailing list, or book a session, retreat or stay.

SpiritFlow Sedona LLC
7000 AZ-179, Suite E200, The Collective Sedona
Sedona, Arizona 86351, United States
info@spiritflowsedona.com
+1 928 821 9061

I am Melina Fuhrmann, and I run SpiritFlow Sedona myself. If you have a question about your information, it comes to me directly.

What I collect

When you contact me or book, you give me your name, email address, phone number, and whatever you choose to tell me about why you are coming. For retreats and private work you may also tell me about your health, your reasons for coming, dietary needs, or difficult things happening in your life. You are never required to share any of it. Share what helps me look after you well, and no more.

When you book accommodation, I collect the dates of your stay and the names of the people staying.

When you pay, I see the amount, the date and confirmation that payment went through. I do not see or store your full card number.

When you visit the website, my systems and the services listed below receive your IP address, the pages you looked at, how long you stayed, your approximate location derived from the IP address, and details of your browser and device.

Health and other sensitive information

Some of what you tell me before a session or retreat is health information. I treat it as confidential. I use it only to prepare and adapt the work, and to keep you safe. I do not share it with anyone unless you ask me to, or unless a specialist is working with you on your retreat and needs it to do that safely — in which case I will tell you who, and why, first.

I am not a medical provider, and I am not covered by HIPAA. What protects your information here is this policy and my own practice, not a health regulation.

Recordings of online sessions and events

Most of my work is not recorded, and I do not record a one-to-one session on my own initiative.

There are two situations where a recording exists. The first is when you ask me to record your own session, so that you can return to it afterwards. The second is an online group event or class, where the session may be recorded so that people who registered can watch it later.

If a recording is being made, I will tell you before it starts. In a group event you can keep your camera and microphone off and still take part, and you can ask me not to include you.

A recording of your own session belongs with you. I will send it to you, and I keep a copy for twelve months in case you lose it, unless you ask me to delete it sooner — in which case I delete it and confirm that I have.

I may in future offer recordings of group events to people who registered but could not attend, or make a recorded class available for purchase. If I ever do that, I will ask the people who appear in it for permission first, in writing, and I will not include anyone who has not agreed. I will never publish, sell, share or use any recording of a one-to-one session, in any form, for any purpose, without asking you first and getting a clear yes.

Recordings are made through Zoom or through the streaming feature built into Vagaro, and are stored with those services and on my own devices.

How I use it

To answer you. To prepare and deliver your session, retreat or stay. To take payment and keep the records the law requires me to keep. To send you the emails you asked for. To understand how people use the website so I can improve it.

If you are in Europe, Switzerland or the UK: I rely on performing our contract for booking and delivering what you paid for, on your consent for marketing emails, for non-essential cookies and for any recording, on my legitimate interest in running and improving a small business, and on legal obligation for tax and accounting records. Where I process health information, I rely on your explicit consent, which you can withdraw at any time.

Who else is involved

I use a small number of outside services to run the business. Each one sees only what it needs.

Website hosting and email — Infomaniak, in Switzerland. My website and my email both live there, which means the messages you send me and the pages you request are handled under Swiss data protection law.

Booking, payments and streaming — Vagaro, which handles appointment booking, card processing and, occasionally, streaming an online event. Card details go to Vagaro and its payment processor, not to me.

Online sessions — Zoom, if we meet by video. Zoom sees your name, your email address if you joined by invitation, and your connection details, and holds any recording made through it.

Mailing list — Mailchimp, which stores your email address and whether you opened a message.

Website measurement — Google Analytics through Google Tag Manager, and Microsoft Clarity. Clarity records how visitors interact with pages, including mouse movement, clicks and scrolling, in order to show me where the site is confusing. These recordings are not linked to your name, and Clarity is configured to mask text entered into forms.

Forms and spam protection — Gravity Forms and the form tools built into my website, protected by Google reCAPTCHA.

Fonts, maps and reviews — Google Fonts and Google Maps, which receive your IP address when a page loads, and Trustindex, which displays my Google reviews.

Accommodation bookings made through Airbnb are governed by Airbnb's own privacy policy as well as this one.

I do not sell your information. I do not share it for advertising. I do not trade mailing lists.

Cookies

The site uses cookies. Essential ones make it work. Others measure how it is used. You choose which non-essential cookies to accept the first time you visit, and you can change that choice at any time through the cookie settings on the site. My Cookie Policy lists them individually.

Where your information goes

I am in Arizona. My website and my email are hosted in Switzerland by Infomaniak. Booking, payments, streaming, my mailing list and website measurement are handled by companies based in the United States.

If you are in the European Union, Switzerland or the UK, that means two things. Your emails to me and your visits to this website are handled in Switzerland, which the European Commission recognises as providing adequate protection for personal data, so no additional safeguard is needed for that transfer. Information that reaches Vagaro, Zoom, Mailchimp, Google or Microsoft goes to the United States, and those transfers rely on the standard contractual protections or data privacy framework commitments those companies offer.

How long I keep it

Booking and payment records: seven years, because tax law requires it.

What you told me before a session or retreat, including health information: three years after your last visit, unless you ask me to delete it sooner.

Recordings: twelve months, unless you ask me to delete yours sooner, or unless you have agreed in writing that a group recording may be kept and offered for longer.

Mailing list: until you unsubscribe.

Website measurement: Google Analytics keeps visitor-level data for up to 14 months. Microsoft Clarity keeps session recordings for 30 days and aggregated click and heatmap data for 13 months. Neither period is something I extend.

Your choices

Wherever you live, you can ask me to show you what I hold about you, correct it, delete it, or stop using it for a particular purpose. You can ask me to delete a recording of your session at any time. You can unsubscribe from any email using the link at the bottom of it, or by writing to me. Write to info@spiritflowsedona.com and I will respond within 30 days.

If you are in the European Union, Switzerland or the UK you also have the right to receive your data in a portable form, to object to processing based on legitimate interest, and to complain to your national data protection authority.

Asking me to delete your information does not oblige me to delete records I am legally required to keep, such as payment records.

Security

The site runs over an encrypted connection. Access to booking, payment and recording systems is protected by strong passwords and two-factor authentication. No system is perfect, and I will tell you promptly if something happens that affects your information.

Children

SpiritFlow Sedona is for adults. I do not knowingly collect information from anyone under 16. If a young person attends a retreat with their family, their information is provided by a parent or guardian.

Changes

If this policy changes I will update the date at the top. If the change is significant and I hold your email address, I will tell you.

Questions

Write to info@spiritflowsedona.com or call +1 928 821 9061. It reaches me, not a department.