Who we are
Morning Groundwork is a website operated by Leadspire LLC ("we," "us"), 8 The Green, Ste A, Dover, DE 19901, USA. We're an independent dōTERRA® Wellness Advocate. We don't sell products on this site; purchases happen on doterra.com, which has its own privacy policy. This policy explains what we collect on morninggroundwork.com and in our emails, why, and what you can do about it.
The short version
- We collect your email only if you give it to us, and we use it to send the guide and a short series of emails. You can unsubscribe in one click.
- We use Meta (Facebook and Instagram) advertising tools, the Meta Pixel and the Conversions API, to understand which ads brought you here and whether they worked. Under California law this may count as "sharing" personal information. You can opt out with the link in our footer.
- We keep what we collect for 13 months, then delete or anonymize it.
- We never see your payment details. dōTERRA handles checkout.
- We don't sell your personal information for money. We don't knowingly collect information from anyone under 16.
What we collect
Information you give us
- Email address and, optionally, first name, when you ask for the 2-Minute Morning guide.
- The email you used at checkout and, optionally, your order number, when you confirm an order on our Confirm page.
- Anything you write to us by email.
Information collected automatically when you visit
- Device and browser information: IP address (stored hashed), browser type, operating system, screen size, language.
- Site activity: pages viewed, buttons clicked, time on page, the link you clicked to reach checkout.
- How you got here: referring site, campaign parameters in the URL (utm_source, utm_medium, utm_campaign, utm_content, ad set and ad identifiers), and the Meta click identifier (fbclid).
- Cookies and similar identifiers, listed below.
Information from dōTERRA
dōTERRA may send us, as the referring Wellness Advocate, a notification when an order placed through our link is completed. Where it does, it may include the buyer's name, the email used, the date, and the order type. We use it only to match confirmations and measure our advertising. We don't receive your payment details or shipping address from dōTERRA, and we don't share dōTERRA's customer lists with anyone.
Cookies and similar technologies
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
mg_sid | us | Recognizes your browser across pages so we can count one visit as one visit and match your confirmation to your visit | 13 months |
mg_consent | us | Remembers your "Do Not Sell or Share" and "Limit Use" choices | 13 months |
_fbp | Meta | Meta Pixel browser identifier used to measure and deliver ads | 90 days |
_fbc | us / Meta | Stores the Meta click identifier (fbclid) from the ad you clicked so the conversion can be attributed | 90 days |
We don't use third-party analytics suites, session-replay tools, or advertising networks other than Meta. We don't show a cookie banner because US law doesn't require one for this use; instead, we give you the opt-out link described below and honor Global Privacy Control signals.
How we use information
- To send you the guide and the email series you asked for, and to answer your messages.
- To know whether you completed your order, so we can stop the pre-purchase emails and start the welcome series.
- To measure and improve our advertising: which ad, ad set, and campaign led to a visit, a click to checkout, and a confirmed order.
- To keep the site secure, stop abuse, and debug errors.
- To comply with law and enforce our Terms of Use.
We don't use your information to make automated decisions with legal or similarly significant effects, and we don't build profiles about your health.
Meta Pixel and Conversions API
We use the Meta Pixel (in your browser) and the Meta Conversions API (from our server) to send Meta, Inc. ("Meta") events such as a page view, a click to checkout, and a confirmed order. Before any email, phone number, or IP address is sent to Meta, we hash it with SHA-256, so Meta receives a scrambled string rather than the plain value. Meta uses this data to attribute conversions to our ads, to build audiences, and for its own purposes described in Meta's Privacy Policy and Business Tools terms. Meta may combine it with other data it holds about you.
Under the California Consumer Privacy Act as amended by the CPRA, disclosing personal information to Meta for cross-context behavioral advertising is "sharing." You can opt out at any time using the Do Not Sell or Share My Personal Information link in our footer. When you do, we stop loading the Pixel in your browser and stop sending server-side events about you, and we set a cookie to remember that choice on this device and browser.
We send email through Lettermint, an email delivery provider that processes your address and message content on our behalf under a contract that limits its use to delivering our mail. We send marketing email only with your consent, given when you check the box in our form. Every email includes a one-click unsubscribe link and our postal address, as required by the CAN-SPAM Act. We may still send a one-time transactional reply if you write to us.
Service providers
We share information only with companies that process it for us under contract: Lettermint (email), Railway (hosting and database, United States), Cloudflare (DNS, security, and content delivery), and Meta (advertising measurement, as described above). We don't sell personal information for money.
How long we keep it
We keep personal information for 13 months from your last interaction with us (visit, click, email open, or reply), then delete it or anonymize it so it no longer identifies you. We may keep records longer where the law requires it, to resolve a dispute, or to honor an opt-out (we keep opt-out records so we can respect them).
Your rights under California law (CCPA/CPRA)
If you live in California, you have the right to:
- Know what personal information we collect, use, disclose, and share, and to receive a copy.
- Delete personal information we hold about you, with legal exceptions.
- Correct inaccurate personal information.
- Opt out of sale or sharing of your personal information. Use the Do Not Sell or Share My Personal Information link in our footer, or turn on Global Privacy Control in your browser; we honor a GPC signal as an opt-out request for that browser.
- Limit the use of sensitive personal information. We don't collect sensitive personal information as defined by the CPRA (such as health information, precise location, or account credentials) and we never ask about your health. If you volunteer such information in an email, we use it only to reply. The Limit the Use of My Sensitive Personal Information link in our footer records your request and we honor it.
- Not be discriminated against for exercising any of these rights.
To exercise your rights, email [email protected] with the subject "Privacy request." We'll verify your request by matching the email you write from against our records; we may ask one or two follow-up questions. We respond within 45 days, extendable once by 45 days with notice. You may use an authorized agent; we'll ask for written permission and may still verify your identity directly.
Notice at collection (categories, as defined by the CCPA): identifiers (email, name, IP address hashed, cookie IDs, Meta click ID); internet or network activity (pages viewed, clicks, referrer, campaign parameters); commercial information (whether you confirmed an order, which offer you chose); inferences we draw (whether you're likely to be interested in follow-up offers). Sources: you, your browser, Meta, and dōTERRA's referral notifications. Purposes: as listed under "How we use information." Disclosed to service providers listed above. Shared for cross-context behavioral advertising with Meta (identifiers and internet activity) unless you opt out. Not sold for money. Retained 13 months.
In the past 12 months we have not sold personal information. We have shared identifiers and internet activity with Meta for advertising as described.
Do Not Sell or Share My Personal Information
Use the control below to opt out of the sharing of your personal information with Meta for cross-context behavioral advertising on this device and browser. We also honor Global Privacy Control signals.
Do Not Sell or Share My Personal Information
Limit the Use of My Sensitive Personal Information
We don't collect sensitive personal information and never ask about your health. If you want your request recorded anyway, use the control below; we honor it.
Limit the Use of My Sensitive Personal Information
Other US states
Residents of states with comparable privacy laws (including Colorado, Connecticut, Oregon, Texas, Utah, and Virginia) may have similar rights of access, deletion, correction, and opt-out of targeted advertising. Use the same contact and footer links; we apply the same process.
Children
This site is for adults. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.
Security
We use HTTPS everywhere, store secrets outside our code, hash IP addresses and email addresses before sending them to Meta, restrict access to the database to the people who run the site, and keep logs for debugging only. No system is perfectly secure; if a breach affects you, we'll notify you as the law requires.
Do Not Track
Browsers can send a "Do Not Track" signal. There's no agreed standard for it, so we don't respond to it specifically; we do honor Global Privacy Control as an opt-out of sharing.
Links to other sites
Our site links to doterra.com and to Meta. Their privacy policies, not ours, govern what they collect.
Changes
If we change this policy in a meaningful way, we'll update the date at the top and, if you're on our email list, tell you by email. Continued use of the site after the date means you accept the updated policy.
Contact
Leadspire LLC · 8 The Green, Ste A, Dover, DE 19901, USA · [email protected]