Privacy policy

Last updated: June 22, 2026

1: Introduction

1.1 Who we are. Oracle Girl is an online platform dedicated to the charitable purpose of offering Jacqueline's spiritual presence and gifts in the world. It aims to amplify positive change via open-access community-based events and group activities based on her new, groundbreaking work, entirely by donation. We enable people all over the world to discover, share and sign up for Oracle Girl community events.

1.2 Users. Individuals and third parties using the Oracle Girl website and/or joining Oracle Girl events are all collectively referred to as “users” in this Privacy Policy (“Users”, “you” or “your”).

1.3 Data controller. Oracle Girl LLC is a USA‑based company whose business address is 12112 N Rancho Vistoso Boulevard, Oro Valley, Arizona 85755 (“Oracle Girl”, “Jacqueline”, “us,” “we” or “our”). For residents of the EEA, the United Kingdom and Switzerland, Oracle Girl LLC acts as the data controller of your personal data collected through the Oracle Girl website and events.

1.4. Representatives. We have appointed external Data Protection Representatives (sometimes called “Article 27 representatives”) in the European Union, United Kingdom and Switzerland to comply with local law. These representatives act as local contact points for individuals and regulators. They are not Data Protection Officers and do not provide legal advice. Their contact details are listed below in Section 20 (Contact us).

2: Guiding statement

2.1 Our baseline. Oracle Girl always endeavours to collect and use the barest minimum of data that can be traced back to you as a person and to store this for the shortest amount of time possible.

2.2 Our ethics. Oracle Girl strongly believes that data privacy is a fundamental human right. It’s your data. You are entitled to choose. We never sell your personal data.

2.3 Our approach. Oracle Girl may receive and hold your data. Oracle Girl will hold that data securely. By contacting Oracle Girl, you accept that we will need to use your personal information to respond to you.

3: Definitions

Anonymise. Personal identifiable information (PII) made non‑identifiable. That is, you can’t link a person to a name or an email address.

Automatic data. Technical data sent to Oracle Girl from a computer, mobile device and/or browser through which the Oracle Girl website and events can be accessed.

Cancel. When you permanently end your participation in an event.

Data controller. Oracle Girl processing personal data for its own purposes.

Data processor. Oracle Girl processing personal data on behalf of other organisations.

Delete. When data is withdrawn from use but remains recoverable, e.g. when data is anonymised; removed from our current systems; stored elsewhere in a separate secure area.

Expunge. When all data is completely erased completely and permanently, leaving no trace., e.g. from all of our current systems or from storage.

First‑party. The Oracle Girl website owner, Oracle Girl.

Internet Protocol (IP) address. A unique numerical label assigned to every device connected to a computer network that uses the internet for communication.

Personal data. Information relating to an identified or identifiable natural person or household which you give to us, e.g. personal identifiable information (PII); information in emails and any specific focus; or any data or message you add on an Oracle Girl webpage, or a webform.

Personal identifiable information (PII). Any name, email address, country or city/region information that you provide. Your IP address, country and city based on an IP geolocation check.

Processor. An entity that processes personal data on behalf of, and in accordance with the instructions of, a data controller.

Sub‑processor. An entity engaged by a data processor who agrees to receive from the processor, personal data exclusively intended for processing activities to be carried out.

4: Personal data that we collect

4.1 Information you provide to us. We collect minimum personal data from all users when you voluntarily provide such information, e.g. when you sign up for a Personal account, join an Oracle Girl event, contact us with inquiries, complete a webform, respond to one of our polls or surveys, or browse or use Oracle Girl webpages. The personal data we may collect includes:

for any Personal account sign-up, only your name and email address
or any lone newsletter sign-up, just your first name and email address
only content you have signalled you are interested in, e.g. by viewing, clicking, favouriting or searching on the Oracle Girl website
any other information that you choose to disclose and/or that enables a user to be personally identified

4.2 Information we automatically collect. We automatically collect automatic data, which includes without limitation:

a unique identifier associated with your access device and/or browser (including, for example, your IP address)
characteristics about your access device and/or browser
statistics on your event activities
information about how you came to the events and data collected through cookies.

Oracle Girl uses such technologies to collect information on a real‑time basis about how you use and navigate the Oracle Girl website. This may include information about your browsing behaviour, page visits, clicks and searches on our sites. You can find out more information about how we use cookies in Section 11 (Website usage & cookies).

5: How we use your personal data

5.1 Purposes. We collect personal data for use, storage and access in a manner that is consistent with this Privacy Policy, and applicable privacy laws. This includes:

A specific reason. For example, if you provide personal data for a certain purpose, Oracle Girl may use that data in connection with the purpose it was provided for.
Access & use. For example, if you provide personal data in order to obtain access to or use of the Oracle Girl website or any of its functionality, Oracle Girl will use your personal data to provide you with access to or use of the Oracle Girl website or functionality, also to analyse your use of its website or functionality
Internal business purposes. For example, including without limitation, to help us improve the content and functionality of the Oracle Girl website, to better understand our website users, to improve Oracle Girl events and the Oracle Girl website, to manage your Personal account and provide you with email responses, and to generally manage the the Oracle Girl website, Oracle Girl events and the Oracle Girl business.
Legal basis for processing. For users located in the European Economic Area, the United Kingdom and Switzerland, data protection law requires us to have a lawful basis for processing personal data. Please see Section 17.2 (EEA, Switzerland & UK only).

5.2 Be the first to know. If you provide your country and city/region, we use this information to email you - but only if necessary. We also store this information in line with changing legal requirements.

5.3 Donate+. Any messages attached to Donate+ are read by Jacqueline only. They are stored by automation on our system in line with changing legal requirements. Access to Donate+ data is restricted to Jacqueline and in exceptional circumstances (such as critical technical emergencies), a senior member of the Oracle Girl Team may be granted temporary access with written authorisation from Jacqueline and with notification to the affected user where feasible.

5.4 Emailing us. If you send an email to jacqueline@oraclegirl.org we may use the information you give in that email to answer you. This includes personal data. We will also store your email in line with changing legal requirements.

If you send us a testimonial via email. We may use part or whole of that data, as a testimonial, including your name if you choose to give it. We will not do this if you specifically request us in writing not to do so.
If you send in photos, artwork & poetry. We may request to use your photos, your own artwork, poetry or any photo of yourself on our website or in a Newsletter. We will always ask your explicit permission first, in writing, before we use anything.

5.5 Event sign-up & donations

Personal identifiable information (PII). If you join an event, use the gift option, Donate+ or request Immediate assistance we collect and store the following PII from you, in line with changing legal requirements:
- The name you provide and your email address.
- Your IP address, country and city based on an IP geolocation check.
Card details. We don't know your card details. As independent data controllers, Stripe, PayPal and Nimiq are responsible for the processing of your payment card information. All donation transactions are processed directly by our third-party payment service providers, Stripe, PayPal and Nimiq, who collect and store this information in accordance with their respective privacy policies. Oracle Girl therefore does not directly collect, process, or store any of your card details. For questions or concerns regarding how your card data is collected, used, or stored, please refer to:
How we use & store your PII. We use this information to send you donation receipts; reminder and event emails - but only if necessary. We also store this information in line with changing legal requirements.

5.6 Help Centre - embedded YouTube videos

We may embed videos in our help centre from YouTube, a service provided by Google Ireland Limited ("Google").

When you visit a help centre page containing an embedded video, YouTube may set cookies on your device and establish a connection to Google's servers as soon as the page loads. This may transmit information such as your IP address, browser and device details, and the page you are visiting, regardless of whether you play the video.
If you play a video or are logged into a Google account, additional data may be collected and associated with your account. This processing is carried out by Google as an independent controller, and we have no control over the data collected.
You can find more information about how Google handles your data in Google's Privacy Policy: https://policies.google.com/privacy

5.7 Live chat. When you interact with us via the live chat during events, the following data may be collected:

Your name, email address, and any other contact details you voluntarily provide.
Usage data such as IP address, coarse address and browser type.

Any chat history is stored for up to 6 hours after the event has finished and is then totally expunged from the system.

5.8 Newsletter

If you sign up. Your email address is stored on our newsletter mailing list only, until you unsubscribe.
If you unsubscribe. Your email address is expunged from our newsletter mailing list immediately so you cannot receive further newsletters. It is stored on our system in line with changing legal requirements.
How to unsubscribe. Click on the Unsubscribe link in your newsletter or email us as indicated in Section 20 (Contact us).

5.9 Personal account

Set-up & use. We collect and store your email address only so you can set up and use your Personal account.
Data storage. We keep the visible data in your Personal account for as long as you have an account. This is so we can answer any enquiries you may have; improve the features and efficiency of your Personal account; and keep your data and our data systems compliant and secure in line with changing legal requirements.

5.10 Questions

Use. If you send a question via email, attached to an event sign-up and/or an event explore page, we may use part or whole of that data for and/or during events and on official Oracle Girl social media platforms.
Storage. Questions data is stored by automation, on our system for 30 days and then expunged.

5.11 Specific focus

Immediate assistance. Any specific focus data is automatically stored in our system after you complete the sign-up process. Immediate assistance sign-ups do not appear in your Personal account. We automatically expunge the specific focus data attached to your Immediate assistance within 30 days of the date you submit your sign-up.
All other events. These sign-ups appear in your Personal account. Any specific focus data you enter during the sign-up process is automatically stored, including modifications, in your Personal account after you complete the sign‑up process.
Storage. Any specific focus data is stored by automation, in a high security area, in line with changing legal requirements.
Access. Access to specific focus data is restricted to Jacqueline and in exceptional circumstances (such as critical technical emergencies), a senior member of the Oracle Girl Team may be granted temporary access with written authorisation from Jacqueline and with notification to the affected user where feasible.

5.12 Testimonials

Use. If you send a testimonial via email or our 'Send a testimonial' webform, we may use part or whole of that data as a testimonial on our What people say webpage, for and/or during events and on official Oracle Girl social media platforms.
Publishing. We will not use your testimonial if you specifically request us in writing not to do so. We may decide not to use it if it does not fall in line with Jacqueline's request that you show evidence of change.
Editing. We may edit your testimonial in line with Jacqueline's request that you show evidence of change; the sensitivity of the content and its length; also language errors. Any necessary additions are shown in square brackets.
Storage. Testimonial data is stored by automation, on our system in line with changing legal requirements.

5.13 YouTube Live

Use. If you sign in to your own YouTube account during YouTube Live events and are active on the YouTube livechat, Jacqueline may mention your Unique Handle (user-specific "@" handle) live. YouTube's privacy policy dictates that livestream chats are public conversations. These are governed by Google's Privacy policy and YouTube's Community Guidelines.
Storage. The YouTube livechat may be stored as part of an Oracle Girl event and stored indefinitely while that event is published on the Oracle Girl website for sign-up.

6: How we disclose & transfer your personal data

6.1 No selling. We do not sell your personal data, including to third parties or third-party advertisers.

6.2 Agents, consultants and service providers. We may share your personal data with Oracle Girl contractors and service providers who process personal data on our behalf to perform certain business‑related functions. These companies include data services providers, database service providers, back‑up and disaster recovery service providers, email service providers, payment processing partners, customer support, tech support, hosting companies and others. We ensure that these third parties are subject to confidentiality obligations and only process personal data under our instructions and for purposes consistent with this policy.

6.3 International transfers & safeguards. Your personal data may be transferred to and processed in countries outside of your country of residence, including the United States, Hong Kong and other jurisdictions where Oracle Girl or our service providers operate. Where required by law, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum (IDTA) or rely on adequacy decisions. These safeguards ensure that your data remains protected when transferred outside the EEA, UK or Switzerland.

7: How we access & process your personal data

7.1 Access

Need-to-know. We restrict access to your personal data to only those who have a specific and authorised business need to access it.
Oracle Girl Team. The Oracle Girl Team only processes personal data according to whether they have been authorised and within the remit of their role. All of the Oracle Girl Team follow strict procedures concerning the handling of personal data and confidential information. They have signed a strict Non Disclosure Agreement (NDA) which lasts in perpetuity. The Oracle Girl Team has also been specifically trained in the handling of personal data.
External contractors & service providers. All Oracle Girl contractors are checked before hiring. They are only given access to personal data on a need-to-know basis under the strict supervision of Oracle Girl senior management. Service provider privacy policies are checked before acquiring their services.

7.2 Data processing

For users outside the EEA. We process your data in accordance with applicable local data protection laws and industry best practices.
For users in the European Economic Area (EEA), Switzerland, and the UK. We process your data in accordance with the General Data Protection Regulation (GDPR) and equivalent data protection laws. When we transfer data outside these regions, we implement Standard Contractual Clauses, rely on adequacy decisions or other legally recognised transfer mechanisms to ensure that the data remains protected.
Third-party service providers. In limited circumstances, certain technical metadata, system monitoring data, or service-related information may be processed by third-party service providers located outside the EU. When this occurs, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other legally recognised transfer mechanisms

8: How we secure & store your personal data

8.1 Data security

Our data security practices. We do our best effort to implement data security practices wherever feasible and practical. We have in place appropriate measures to protect the security of your personal data. We take what we believe to be reasonable steps to protect all personal data collected from loss, misuse, unauthorised use, access, inadvertent disclosure, alteration and destruction.
How we protect your personal data. We implement appropriate technical and organisation measures, including:
- Encrypted connections (TLS/HTTPS) for all data transmitted between your device and the Oracle Girl website; and
- Database-level security measures provided by our hosting infrastructure
Use of third parties. We use minimal, reputable 3rd party service providers ("sub-processors") for business infrastructure, internal communication tools, and collecting your donation to provide specific functionality so that we can provide events, e.g. Stripe, PayPal, Nimiq, Sentry. These maintain their own security standards.

8.2 Storage. We may store personal data itself or such information may be stored by third parties to whom we have transferred it in accordance with this Privacy Policy.

Server location. Your personal data is primarily processed and stored on servers located within the European Union.
Duration. We only store your data for as long as necessary to engage with you and complete legitimate data handling processes in line with changing legal requirements. In some cases, for legal or regulatory reasons we retain certain categories of data (such as donation and financial records) for up to seven years. If you close your Personal account, your personal data will be anonymised within 30 days, whatever method you use to close your account.
Disclaimer. No method of electronic storage or transmission, including any network, server, database, internet or email transmission is ever 100% secure or error free, and we cannot guarantee absolute security.
Recommendation. You should always decide carefully what information you choose to give to anyone - including Oracle Girl - especially when disclosing any personal data.

9: How you can manage your personal data

9.1 In your personal account. You can access, update and delete most of your personal data directly through the Settings in your Personal account:

Update your name: Go to your Settings page > Name
Change your email: Go to your Settings page > Change email
Delete your account: Go to your Settings page > Delete account

9.2 Correcting your personal data. If you find you cannot change any personal data in your Personal account, please email us as indicated in Section 20 (Contact us).

9.3 Deleting your personal data. You can permanently delete your account and all associated data. This action will close your account and it cannot be undone. Whatever method you use to close your account, including if you click on "Delete account" in your Personal account, your personal data will be anonymised within 30 days.

Wherever it is legally permitted we will always delete your personal data. Please note that this is subject to certain restrictions. We may be required or permitted to retain certain data under applicable data protection laws or other legal obligations. In some cases:

We must retain specific types of data for legally mandated retention periods (e.g., financial records, transaction history)
We may anonymise your data rather than immediately expunging it from our systems
Some data may need to be retained for legitimate business purposes such as fraud prevention, legal compliance, or to resolve disputes

9.4 Expunging your personal data. The following personal data is automatically expunged by Oracle Girl:

Online chat: within 6 hours of the event
Specific focus data (IA): within 30 days of sign-up
Questions: within 30 days of the event

9.5 Requesting further assistance. If you're unable to manage your data through your Personal account, or if you have specific requests regarding your personal data, please email us as indicated in Section 20 (Contact us). We will consider your request in accordance with applicable laws and respond to verified requests within 30 days.

10: How long we retain your personal data

10.1 Duration. We may retain your personal data for as long as you are registered to use a Personal account. You can delete your account by visiting the Settings page.

10.2 Legal obligations. We may retain personal data for an additional period as is permitted or required under applicable laws. When retention is required, we will restrict processing to only what is necessary for the legal basis requiring retention. Even if Oracle Girl deletes your personal data, this data may persist in secure areas for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes. For example, donation records are typically retained for seven years to comply with accounting and tax laws.

11: Website usage & cookies

11.1 Browsing. We collect some PII. When you browse our website without creating an account or making a donation, we collect minimal technical data including your IP address (which is considered personal identifiable information), browser type, and pages visited. This data is used for security, analytics, and to improve website functionality.

11.2 If you make a donation. We use your public IP address to determine your geographic location. We store the country, state/province, and city associated with your IP address for our financial records and regulatory compliance purposes.

11.3 Cookie definitions.

Analytical cookies. For gathering valuable insights into how the Oracle Girl website is being used and how to customise its webpages. Aids in identifying areas for improvement, understanding user preferences, and ensuring the relevance of content. This may include information about browsing behaviour, page visits, clicks, cursor movements and searches.
Cookies. Small data files placed on your computer or mobile device when you visit a website. Make websites function smoothly. Assist in remembering user actions across pages within a website to enhance overall website experience.
First-party cookies. Cookies set by the website owner, Oracle Girl.
Functionality cookies. Enhance the performance and functionality of the Oracle Girl website, but are not required for their use. Without these cookies, certain functionalities may become limited or unavailable.
Necessary cookies. Ensure proper functioning of and to provide you with access to and the basic use of the Oracle Girl website. Primarily for essential tasks like user authentication, enabling the website to recognise and remember logged-in users as they navigate between pages or refresh the site, access to secure areas and setting your preferences. These cookies cannot be turned off.
Permanent cookies. Allow first- and third parties to understand visitors’ browsing behaviour over a longer period of time, to provide them with additional features related to website use, the content saved or stored through them, as well as for advertising and marketing purposes. Depending on their function, this type of cookie may persist for different lengths of time ranging from several hours, to a week, or even several years. This type of cookie will persist after you end a browsing session and can be used by us or third parties to recognise your device when you begin a new browsing session.
Temporary/session cookies. Allows website browsing without interruption. After the browsing session ends, this type of cookie does not store any information on your hard drive.
Third-party cookies. Cookies set by parties other than the website owner, Oracle Girl, which enable third-party features or functionality to be provided on or through the Oracle Girl website (e.g. interactive content, analytics).

11.4 Cookie policy. We use the minimum amount of cookies to ensure your use of the Oracle Girl website is convenient and secure.

11.5 Cookie management. To modify your cookie settings at any time, please visit the "Manage Cookies" link in the footer of the Oracle Girl website.

11.6 Cookie types. Oracle Girl uses the following first- and third-party cookies only: necessary, functionality and analytical cookies. We do not use advertising cookies. Oracle Girl also uses temporary/session and persistent cookies.

11.7 Cookie duration. The duration of cookie storage on your device may vary, according to whether the cookie is temporary or permanent. Please note that in general, all third-party applications use and store their cookies.

11.8 Cookie usage. We use cookies in the following ways listed below. Please note that while we endeavour to maintain a completely accurate and up-to-date cookie list, this may not always be possible:

cf_clearance and __cf_bm. To detect web bots. Expiry: within 1 year.
__cf_lb. To help load balance requests. Expiry: within 1 hour
intercom-session. Keeping track of sessions. Expiry: 1 week.
intercom-id. Anonymous identifier cookie. Expiry: 9 months.
intercom-device-id. To determine the unique devices interacting with the Intercom Messenger to prevent abuse. Expiry: 9 months.
cookie_consent. To remember your cookie consent choice and avoid annoying website browsing. Expiry: 6 months.
payload-token. To keep you logged in and make your browsing convenient. Expiry: 14 days with auto-refresh.
_ga and _ga_1XX1X1XXXX. Used by Google Analytics to distinguish one visitor from another. Expiry: 13 months.
muxData. Used by Mux for video analytics. Expiry: 7 days.
Stripe donations gateway. For successfully using the checkout. Stripe uses its own set of cookies which means that if you join an event and use the Stripe donation method, Stripe places cookies in your device. Expiry: __stripe_sid = 30 minutes and __stripe_mid = 1 year.
Vimeo player cookies. For viewing optimisation and bot protection. Vimeo uses its own set of cookies which means that if you join an event featuring a video link or watch a video on a website page, Vimeo places third-party cookies in your browser. Expiry: player_clearance = 7 days, cf_clearance = 1 year, _cf_bm = 30 minutes, _cfuvid = session

12: Exclusions

12.1 Personal data provided to others. This Privacy Policy does not apply to any personal data that you provide to another user or visitor through the Oracle Girl website or through any other means, including information posted by you to any public areas of the Oracle Girl website.

12.2 Third-party links. This Privacy Policy applies only to the Oracle Girl website, which may contain links to other websites not operated or controlled by us ("third-party sites"). The policies and procedures we describe here do not apply to third-party sites. Links from the Oracle Girl website do not imply that we endorse or have reviewed such third-party sites. We suggest contacting those sites directly for information on their privacy policies.

13: Children: Children's Online Privacy Protection Act (COPPA)

13.1 Data collection. We do not knowingly collect personal data from children under the age of 13. In some jurisdictions (such as the EEA), data protection law sets a higher age threshold (generally 16) for consent. If you are under 16 and reside in the EEA, UK or Switzerland, please do not submit any personal data through the Oracle Girl website.

13.2 If you are under age 13. Please do not submit any personal data through the Oracle Girl website including via any Personal account, live chat, webpage or webform.

13.3 Parents & legal guardians. We encourage parents and legal guardians to monitor their children’s internet usage. Please help us to enforce our Privacy Policy by instructing your children never to provide personal data through the Oracle Girl website without your permission. If you are in the EEA, UK or Switzerland, please ensure that children under 16 do not provide personal data.

13.4 Breach. If you have reason to believe that a child under the age of 13 has provided personal data to Oracle Girl, please contact us immediately via privacy@oraclegirl.org and we will endeavour to delete that information from our databases.

14: Your choices

14.1 If you wish to stop all emails. You can opt out of all emails. We only recommend this if you plan to stop participating in Oracle Girl events and Oracle Girl Team emails entirely. You need to do 3 things:

(1) Newsletters. Click on the "Unsubscribe" link at the bottom of any Newsletter or switch off your Newsletter notifications on the Settings page in your Personal account.

(2) Personal account:

On the "Personal account" page, under the Upcoming and Retreats tabs, cancel any event by clicking on "Cancel registration."
On the "My subscriptions" page, click the red word Cancel next to all Reboot Group subscriptions.
On the Settings page, toggle the slider to the "off" position for:
- Newsletter (if you didn't unsubscribe already in the newsletter email)
- Reminders before a livestream events
- Donation receipts
- Abandoned sign-ups

(3) Email us. Request complete email opt-out for all events as indicated in Section 20 (Contact us). This means you won't receive any further emails from us, including responses to your emails and/or questions from the Oracle Girl Team.

14.2 If you wish to limit the personal data you provide. If you want to minimise the personal data you provide, you can browse the Oracle Girl website without creating an account or signing up for events. However, please note that even when browsing, we automatically collect certain technical data (such as your IP address, browser type, and pages visited), which is considered personal data under applicable privacy laws.

14.3 If you want to avoid providing personal data beyond automatic collection. You should not:

Sign up for the Newsletter or a Personal account
Join any events, use any live chat on the homepage or during an event, or email us via jacqueline@oraclegirl.org
Interact with any webform which requires you to input PII or personal data or submit any question via email, attached to an event sign-up and/or an event explore page.

15: Changes to this Privacy Policy

15.1 Updates. This Privacy Policy was updated on the date indicated above. We may update this policy from time to time. Please check this webpage regularly for the most recent version and especially before you provide any personal data.

15.2 Modifications.

Oracle Girl events and the Oracle Girl business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, according to our sole discretion, to update or modify this Privacy Policy at any time. Modifications will be posted on this webpage with a change to the "Updated" date at the top of this Privacy Policy.
In certain circumstances Oracle Girl may, but need not, provide you with additional notice of such modifications, such as via email. Modifications will be effective 30 days following the "Updated" date or such other date as communicated in any other notice to you.

15.3 Continued use. Your continued sign-up for Oracle Girl events and use of the Oracle Girl website, following any modifications to this Privacy Policy, constitutes acceptance of those modifications. If any modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing, signing up and otherwise using the Oracle Girl website.

16: Complaints & resolution

If you have a complaint about Oracle Girl privacy practices you should email us as indicated in Section 20 (Contact us). Alternatively you can contact us via any of the methods listed in that section. We will take reasonable steps to work with you to attempt to resolve your complaint.

If, after contacting us and seeking all due remedies, you still wish to lodge a complaint or you believe that your data is being handled unlawfully, you can contact your local supervisory authority:

Residents based in the EEA, Switzerland or the UK who believe that their information has not been processed in compliance with the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework or the UK Extension to the EU-US Data Privacy Framework: please click here.
Residents based outside of the EEA, Switzerland or the UK: please click here.

17: EEA, Switzerland & UK only

The EU General Data Protection Regulation (GDPR) requires Oracle Girl to provide you with more information about the processing of your personal data as follows:

17.1 Legal grounds for processing. For users located in the European Economic Area, the United Kingdom and Switzerland, data protection law requires us to have a lawful basis for processing personal data. We process your personal data on one or more of the legal grounds described below:

Your consent: when you have given us express permission to process your data, such as when you sign up for newsletters or other communications.
Contract performance: when processing is necessary for the performance of an agreement with you, such as providing events or managing your Personal account.
Legal obligation: when processing is necessary to comply with our legal or regulatory obligations, such as tax and accounting requirements.
Legitimate interests: when processing is necessary for our legitimate interests, such as improving our services, understanding how our services are used, securing our systems and preventing fraud, while ensuring that your interests and fundamental rights do not override those interests.

17.2 Transfers of personal data. If we transfer personal data outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your personal data. This includes the use of Standard Contractual Clauses issued pursuant to Commission Implementing Decision (EU) 2021/914 of June 4, 2021, and for transfers from the UK, the UK International Data Transfer Addendum (IDTA). We may also rely on adequacy decisions or other recognised transfer mechanisms.

17.3 Personal data retention. Oracle Girl retains your personal data for as long as necessary to provide you with access to Oracle Girl events, or for other important purposes such as complying with legal obligations. If you have a Personal account with Oracle Girl, we will typically retain your personal data for a period of 30 days after you have requested that your account is closed. Certain categories of data (such as donation records) may be kept for up to 7 years for accounting and tax purposes.

17.4 Your rights. If you are resident in the EEA, United Kingdom or Switzerland, data protection law provides you with rights relating to the personal data that Oracle Girl holds about you, including the right to request a copy of your personal data, to request that Oracle Girl rectifies, restricts or deletes your personal data, and to unsubscribe from email communications.

You can exercise these rights by signing in to your Personal account or changing the cookie settings in your browser. Please also see Section 9 (How you can manage your personal data).
If you can't find what you're looking for, please email us as indicated in Section 20 (Contact us). We will respond to your request within the timeframes required by law (usually within one month).
Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. Sometimes Oracle Girl is not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation.

Your rights as a data subject under existing data protection law and GDPR are:

The right to be informed. Receive notifications at each stage of your rights in respect of your personal data.
The right of access. Request a copy of the personal data that Oracle Girl holds about you.
The right to rectification. Request that Oracle Girl corrects any inaccurate or incomplete personal data.
The right to erasure. Request deletion of your personal data when it is no longer needed or when processing is based on consent.
The right to restrict processing. Request that Oracle Girl restricts processing of your data under certain circumstances.
The right to data portability. Request that we provide your data in a structured, commonly used and machine‑readable format and transfer it to another controller.
The right to object. Request that we provide your data in a structured, commonly used and machine‑readable format and transfer it to another controller.
The right to withdraw consent. Withdraw your consent to the use by Oracle Girl of your personal data. Please note that exercising your right to withdraw consent may impact your ability to interact with Oracle Girl, its community events and group activities. Oracle Girl will also still retain and may process your personal data to the extent required by law as set out in this Privacy Policy.

17.5 Complaints. If you have a complaint about how we handle your personal data, please get in touch with us as indicated in Section 16 (Complaints & resolution).

17.6 Oracle Girl as data controller & data processor. EU data protection law makes a distinction between organisations that process personal data for their own purposes (known as "data controllers") and organisations that process personal data on behalf of other organisations (known as "data processors"). If you have a question about how your personal data is handled, this should always be addressed to the data controller since they are primarily responsible for your personal data.

Oracle Girl may act as either a data controller or a data processor in respect of your personal data, according to the circumstances. For example, if you create a Personal account with us to manage your events, Oracle Girl will be a data controller in respect of the personal data that you provide as part of your account.

18: Residents of certain US states

If you are a resident of a USA state that has implemented a law that provides you with additional personal data rights including California, Virginia, Colorado, Connecticut, Utah or Nevada, we can provide additional information about our information practices and you may have certain rights with respect to your information. Depending on your state, these rights may include the right to request access to and deletion of personal data, the right to opt out of certain processing or the right to obtain information about our data practices. Please email us for State‑Specific Supplementary Privacy Notices as indicated in Section 20 (Contact us).

19: Brazil only

If you are a Brazil user, we can provide additional information about our information practices and you may have certain rights with respect to your information. Please email us for Brazil Supplementary Privacy Notices as indicated in Section 20 (Contact us).

20: Contact us

If you wish to contact us to exercise your data rights, or ask about our data processing, please email us via privacy@oraclegirl.org.

Alternatively you can write to us at Oracle Girl LLC, 12112 N Rancho Vistoso Blvd, Oro Valley, Arizona 85755, USA.

If you’re based in the EU/EEA, UK or Switzerland, and wish to contact us via our GDPR Representative, DataRep, please use either of the 2 following methods, placing "Oracle Girl LLC" in the subject line:

Alternatively you can write to:

For the EU/EEA: DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany.
For the UK: DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom.
For Switzerland: DataRep, Leutschenbachstrasse 95, Zurich, 8050, Switzerland.