Cookie Policy

Effective Date: October 24, 2025

Village Haven LLC, wholly owned by Heart Space Sanctuary, a faith-based 508(c)(1)(a) ministry.

This Cookie Policy explains how we use cookies and similar technologies when you access or use our websites, mobile applications, and related technology services (collectively, the "Platform").

The Platform operates solely as a technology marketplace that connects Customers with independent Service Providers. The Company does not provide, supervise, control, or guarantee services performed by Service Providers and is not a party to agreements formed between Users.

The Platform may be used across multiple jurisdictions within the United States. We design our data and technology practices to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") and other applicable state privacy frameworks.

This Cookie Policy forms part of Village Haven's broader privacy and platform governance framework and should be read together with:

• A. Terms of Service: Terms of Use
• B. Payment Terms & Refund Policy: Payment Terms & Refund Policy
• C. Privacy Notice: Privacy Notice
• D. Cookie Preferences (Preference Center): Cookie Preferences
• E. Do Not Sell or Share / Opt Out of Targeted Advertising: Do Not Sell or Share

1. What Are Cookies?

This Cookie Policy applies to cookies and similar technologies used on the Platform and in Platform-related communications or embedded features (for example, content loaded from third parties inside our pages).

For purposes of this Cookie Policy:

• (a) "Cookies" are small text files stored on your device by a website or app.
• (b) "Pixels" / "Web Beacons" are small code snippets (often a 1x1 image) that can transmit information about your device and interaction with a page or email.
• (c) "SDKs" (Software Development Kits) are code libraries used in mobile apps that may collect device and usage information and transmit it to an SDK provider.
• (d) "Local Storage" (including HTML5 local storage, IndexedDB, or app storage) stores information locally on your device outside of traditional cookies.
• (e) "Device Identifiers" include identifiers associated with your device or browser, such as advertising IDs, device IDs, IP address, and similar identifiers.
• (f) "Similar Technologies" means cookies, pixels, SDKs, local storage, and device identifiers. For simplicity, we refer to all of these in this policy as "cookies," unless we say otherwise.

Cookies may be:

• (a) Session cookies (deleted when you close your browser), or
• (b) Persistent cookies (stored until they expire or are deleted).

2. Why We Use Cookies

Village Haven uses cookies for legitimate business purposes, including to:

• (a) Operate and secure the Platform
• (b) Authenticate Users and maintain sessions
• (c) Enable bookings, scheduling, and transactions
• (d) Maintain payment and checkout continuity through third-party payment processors
• (e) Detect fraud, abuse, unauthorized access, and account takeovers
• (f) Prevent chargebacks, payment manipulation, and circumvention of Platform payments
• (g) Enforce Platform policies and investigate violations
• (h) Support dispute resolution and transaction verification
• (i) Monitor service availability, errors, and performance
• (j) Comply with legal and regulatory obligations

Some cookies are strictly necessary for the Platform to function. Disabling them may prevent completion of bookings, payments, or access to account functionality.

We apply data minimization principles and use cookies only to the extent reasonably necessary for the purposes described above.

3. Types of Cookies We Use

A. Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off in our systems.

They are used for:

• (a) Account authentication and secure session management
• (b) Transaction processing and checkout continuity
• (c) Security, fraud prevention, and abuse prevention
• (d) Load balancing and service availability

B. Functional Cookies

These cookies enable enhanced functionality and personalization, such as:

• (a) Remembering preferences (language, region)
• (b) Saving login settings (where enabled)
• (c) Supporting accessibility preferences

C. Analytics & Performance Cookies

These cookies help us understand how users interact with the Platform so we can improve performance, features, and usability, such as:

• (a) Pages visited and navigation patterns
• (b) Time spent and feature engagement
• (c) Error reporting and diagnostics

Analytics information is used for internal operational improvement. We do not permit analytics technologies deployed through the Platform to be used for cross-context behavioral advertising unless disclosed and opt-out/choice mechanisms are provided as required by law.

D. Advertising & Targeting Cookies

If enabled, these cookies may be used to:

• (a) Deliver relevant content or measure marketing effectiveness
• (b) Support targeted advertising (as defined by some state privacy laws)

Village Haven does not knowingly sell personal information. We do not permit the use of advertising cookies for cross-context behavioral advertising ("sharing" under CPRA) without providing legally required choice/opt-out mechanisms, including for California residents.

4. Cookie Table

The specific cookies used may change over time (for example, when we add new security features, update analytics tools, or change vendors). We maintain a current list of active cookies in our Cookie Preference Center: Cookie Preferences.

The table below provides a framework of cookie categories used on the Platform. Where a vendor or technology may change, placeholders are used.

5. Third-Party Cookies

Some cookies may be set by third parties that support our Platform, such as analytics providers, payment processors, hosting providers, and security vendors.

• (a) Service provider restrictions. Where third parties act as our service providers/processors, they are contractually restricted to processing information to support Platform operations and are restricted from using that information for unrelated purposes, subject to applicable law and the terms under which they provide services.
• (b) Third-party controls. Some third-party cookies/SDKs may be controlled by the third party (for example, where their content is embedded or their SDK is integrated). We do not control third-party privacy practices outside our contractual relationships and disclaim responsibility for third-party practices beyond what the law requires.
• (c) Payments. Payment flows may involve third-party payment processing tools that use cookies or similar technologies to prevent fraud and complete transactions.

6. Your Cookie Choices

A. Cookie Banner and Preference Center

When you visit the Platform, we may present a cookie banner and provide a cookie preference center where you can choose which non-essential cookies to allow, depending on your location and applicable law.

• (a) Preference center: Cookie Preferences
• (b) Do Not Sell or Share / Opt out of targeted advertising: Do Not Sell or Share

B. How to Change Your Choices

You can change your preferences at any time by:

• (a) Using the cookie preference center link above; and/or
• (b) Adjusting your browser/device settings as described below.

C. Browser and Device Controls

Most browsers and devices let you:

• (a) View and delete cookies
• (b) Block cookies or limit cross-site tracking
• (c) Receive alerts before cookies are placed

Blocking certain cookies may impact Platform functionality (including login, bookings, payments, or security features).

D. Do Not Track

Some browsers transmit "Do Not Track" signals. There is no universally accepted standard for responding to these signals, and we do not respond to Do Not Track signals at this time.

E. Global Privacy Control (GPC)

Where required by law (and depending on our technical implementation), we treat a recognized Global Privacy Control (GPC) signal as a valid request to opt out of:

• (a) "Selling" and/or "Sharing" under the CPRA (as applicable); and/or
• (b) Targeted advertising under certain state privacy laws.

If we detect a GPC signal, we will apply it at least to the browser/device and, where feasible, to your account once authenticated, subject to verification and technical limitations.

For more information and current implementation details, see: Privacy Notice.

7. California (CCPA/CPRA) Cookie Disclosures and Rights

This section applies to California residents as required by the CCPA/CPRA.

A. Do cookies involve "selling" or "sharing"?

Under the CPRA:

• (a) "Selling" generally means disclosing personal information for monetary or other valuable consideration.
• (b) "Sharing" generally means disclosing personal information for cross-context behavioral advertising.

We use cookies for security, fraud prevention, and operational purposes. If we use Advertising & Targeting cookies in a way that constitutes "sharing" for cross-context behavioral advertising, we will provide the right to opt out via:

• (a) Do Not Sell or Share, and/or
• (b) our cookie preference center: Cookie Preferences, and/or recognized opt-out preference signals such as GPC where required/implemented.

Statement of intent: Village Haven does not knowingly sell personal information. We do not knowingly share personal information for cross-context behavioral advertising without providing an opt-out as required.

B. Right to Opt Out of Sale/Share

California residents have the right to direct a business to stop selling and/or sharing their personal information (as those terms are defined under CPRA). You can exercise this right via:

• (a) Do Not Sell or Share link: Do Not Sell or Share
• (b) Cookie preferences: Cookie Preferences
• (c) GPC (where applicable/implemented): see Section 6(E)

C. Right to Limit Use and Disclosure of Sensitive Personal Information

To the extent we collect Sensitive Personal Information as defined by the CPRA through cookies or similar technologies (for example, precise geolocation, certain account log-in credentials, or other sensitive categories), California residents may have the right to limit our use and disclosure of that information to what is necessary to provide requested services and as otherwise permitted by law.

We do not use Sensitive Personal Information collected through cookies for purposes other than those permitted by the CPRA without providing appropriate notices and choices.

Where applicable, the limitation request mechanism is available at: [LIMIT USE OF SENSITIVE PI LINK].

D. Right to Opt Out of Targeted Advertising

If our use of cookies constitutes targeted advertising (as defined by applicable privacy laws), you may opt out using the links in Section 6(A) and 7(B).

8. Other U.S. State Privacy Rights

Certain U.S. state privacy laws (including, as applicable, Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA)) provide residents with rights related to targeted advertising, certain profiling, and some forms of data sales.

A. Opt Out of Targeted Advertising

Where applicable, you may opt out of targeted advertising through:

• (a) Do Not Sell or Share
• (b) Cookie Preferences

B. Opt Out of Profiling in Furtherance of Decisions with Legal or Similarly Significant Effects

Where applicable, residents may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. If we engage in such profiling (if at all), we will provide a mechanism described in our Privacy Notice: Privacy Notice.

C. Appeals Process

Where required, if we deny a consumer privacy request, you may appeal our decision by contacting: hello@villagehaven.org.

We will respond to appeals as required by applicable law. If an appeal is denied, we will provide additional information as required (including, where applicable, how to contact your state Attorney General).

D. Expandable State Supplements

We may publish additional state-specific cookie and tracking disclosures in our Privacy Notice or a state supplement page: Privacy Notice.

9. Platform Security and Fraud Prevention

Cookies and device identifiers help maintain marketplace integrity by enabling:

• (a) Fraud detection and account takeover prevention
• (b) Payment risk management and dispute investigation
• (c) Booking abuse prevention and enforcement of Platform rules
• (d) Integrity controls designed to deter payment circumvention and manipulation

These measures protect Users and help preserve marketplace reliability. Cookie-related security data is retained only for periods reasonably necessary for operational, security, and dispute-resolution purposes unless longer retention is required by law.

10. Data Retention and Security for Cookie Data

A. Retention

We retain cookie data for durations that vary by cookie category and purpose:

• (a) Strictly necessary/security logs may be retained longer where needed for fraud prevention, security investigations, chargeback defense, and legal compliance.
• (b) Analytics data is retained for a period consistent with our operational needs and vendor configurations.

Specific durations are described in our cookie preference center and/or vendor documentation: Cookie Preferences.

B. Security

We use reasonable administrative, technical, and physical safeguards designed to protect cookie-related data. No method of transmission or storage is completely secure; therefore, we cannot guarantee absolute security.

11. Children and Minors

The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through cookies or similar technologies.

We do not knowingly use targeted advertising cookies to target minors where prohibited by applicable law. If you believe a child has provided information to us, please contact us at: hello@villagehaven.org.

12. Compelled Disclosure

We may disclose information collected through cookies or similar technologies if we believe disclosure is required by law or legal process (for example, a subpoena, court order, or regulatory request), or as otherwise necessary to:

• (a) Enforce these policies and our Terms
• (b) Protect the rights, property, and safety of Village Haven, Users, and others
• (c) Detect, prevent, or address fraud, security, or technical issues

Where appropriate and lawful, we may attempt to provide notice before disclosure.

13. Updates to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in law, technology, vendors, or Platform operations. Updates become effective when posted with a new Effective Date.

If changes are material, we may provide additional notice (for example, via the Platform, email, or a banner), consistent with applicable law.

14. Contact Us

If you have questions about this Cookie Policy or our data practices, contact us at:

• Village Haven LLC
• Wholly owned by Heart Space Sanctuary
• Email: hello@villagehaven.org
• Address: 30 N Gould St Ste 100, Sheridan, WY 82801

Privacy Rights Requests

To submit a privacy rights request (including cookie-related opt-out requests), use:

• (a) Email: hello@villagehaven.org (e.g., webform/email/phone)
• (b) Privacy Notice: Privacy Notice