Effective Date: April 6, 2026   |   Last Revised: April 6, 2026

Organization	Weimar Institute (DBA NEWSTART® Lifestyle Medicine Program, Weimar University)
Mailing Address	20601 W Paoli Lane, Weimar, CA 95736
Privacy Contact	[email protected]
Governing Law	California (CCPA/CPRA), US Federal (CAN-SPAM, COPPA, HIPAA considerations)
Applies To	All websites, microsites, landing pages, and digital properties operated by Weimar Institute

1. Who We Are & Scope of This Statement

Weimar Institute is a California-based nonprofit organization operating the NEWSTART® Lifestyle Medicine Program and Weimar University (collectively, “we,” “us,” or “our”). This Privacy Statement applies to all websites, mobile-optimized pages, online forms, email communications, and digital services owned or operated by Weimar Institute, including but not limited to weimar.edu, newstart.com, and any affiliated microsites or landing pages (collectively, the “Sites”).

By using any of our Sites, you acknowledge that you have read and understand this Privacy Statement. If you do not agree to its terms, please discontinue use of our Sites.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information you voluntarily provide when you:

• Register for a NEWSTART® program session or Weimar University course
• Submit an inquiry, application, or contact form
• Subscribe to our email newsletter or marketing communications
• Make a donation or purchase through our Sites
• Participate in surveys, testimonials, or feedback requests

This may include: full name, mailing address, email address, phone number, date of birth, health history and intake information, payment or billing details, and communications preferences.

2.2 Information Collected Automatically

When you visit our Sites, we and our service providers automatically collect certain technical data, including:

• IP address and general geographic location
• Browser type, version, and operating system
• Pages visited, time spent on each page, and referring URLs
• Device identifiers and screen resolution
• Cookie identifiers and session data (see Section 5)

2.3 Information from Third Parties

We may receive information about you from third-party partners such as payment processors, donor management platforms, CRM systems (e.g., Keap/Infusionsoft), and social media platforms when you interact with our content on those services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To process program registrations, donations, and service requests
• To communicate with you about your registration, account, or inquiry
• To send you newsletters, health education content, and promotional emails (with your consent or as permitted by law — see Section 7 on CAN-SPAM compliance)
• To personalize your experience on our Sites and in our communications
• To operate, maintain, and improve our Sites and digital services
• To comply with applicable laws, regulations, and legal obligations
• To detect fraud, protect our Sites, and ensure the security of your information
• To conduct analytics and measure the effectiveness of our programs and outreach

We do not sell your personal information to third parties for monetary compensation.

4. How We Share Your Information

We may share your personal information with:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., email delivery, payment processing, CRM management, web hosting, analytics), bound by appropriate data processing agreements.
• Affiliated Programs: Other departments or programs within Weimar Institute, such as between NEWSTART® and Weimar University, as necessary for administrative or program continuity purposes.
• Legal Compliance: Government authorities, law enforcement, or legal counsel when required by law, court order, or to protect our legal rights.
• Business Transfers: In the unlikely event of a merger, acquisition, or dissolution, your information may be transferred to a successor nonprofit organization.

We do not share your health intake or medical history information with third parties for marketing purposes. Such information is treated with the same care as Protected Health Information (PHI) and disclosed only as needed to deliver program services or as required by law.

5. Cookies & Tracking Technologies

Our Sites use cookies, web beacons, pixel tags, and similar tracking technologies to enhance functionality and analyze usage. Categories of cookies we use include:

• Strictly Necessary Cookies: Required for basic site functions such as form submission and session management.
• Analytics Cookies: Help us understand how visitors interact with our Sites. We use Google Analytics, which may collect data including your IP address, browsing behavior, and device information.
• Marketing & Remarketing Cookies: Used to deliver relevant advertising through Google Ads and similar platforms. These may track your activity across websites.

5.1 Google Analytics & Google Ads Disclosure

We use Google Analytics and related Google advertising services on our Sites. Google may use the data collected to contextualize and personalize ads within its advertising network. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On available at tools.google.com/dlpage/gaoptout. We have enabled Google Analytics Advertising Features including remarketing and demographic reporting. By using our Sites, you consent to the processing of data about you by Google in the manner and for the purposes described in Google’s Privacy Policy (policies.google.com/privacy).

5.2 Managing Your Cookie Preferences

You may control cookies through your browser settings or a cookie consent manager on our Sites. Note that disabling certain cookies may affect site functionality. For more information on managing cookies, visit allaboutcookies.org.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA) grant you specific rights regarding your personal information.

6.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address); personal records (address, phone); characteristics (age, health-related information for program intake); commercial information (donations, purchases); internet activity (browsing data); and inferences drawn from the above to create a profile.

6.2 Your California Rights

As a California resident, you have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Correct: Request correction of inaccurate personal information.
• Opt-Out of Sale or Sharing: We do not sell your personal information. We do share data with advertising technology providers (e.g., Google Ads) which may constitute “sharing” under CPRA. You may opt out of this sharing by using our cookie preference tool or contacting us directly.
• Limit Use of Sensitive Personal Information: You have the right to limit the use of sensitive personal information (such as health data) to purposes necessary to provide services.
• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

6.3 How to Submit a California Privacy Request

To exercise your rights, submit a verifiable consumer request to: [email protected] or call us at our published contact number. We will respond within 45 days of receipt of a verifiable request, with the possibility of an extension of an additional 45 days where reasonably necessary. We do not charge a fee for processing a request unless the request is excessive or repetitive.

7. Email Communications & CAN-SPAM Compliance

We send commercial and informational email communications, including program announcements, newsletters, donation appeals, and health education content, in compliance with the CAN-SPAM Act of 2003 and applicable state law.

All commercial email communications from Weimar Institute, NEWSTART®, and Weimar University will:

• Include our physical mailing address: 20601 W Paoli Lane, Weimar, CA 95736
• Include a clear, conspicuous, and functional opt-out / unsubscribe link in every commercial message
• Honor opt-out requests within 10 business days of receipt
• Not use deceptive subject lines or header information

To unsubscribe from marketing emails, click the ‘Unsubscribe’ link at the bottom of any email or send a written request to [email protected]. Please note that transactional or administrative messages (e.g., program confirmations, receipts) are not subject to opt-out and will continue as necessary to fulfill your request or agreement.

8. Children’s Privacy (COPPA)

Our Sites are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. In connection with Weimar University programs, applicants under the age of 18 must have a parent or legal guardian provide or authorize the submission of their personal information.

If we become aware that we have inadvertently collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly. Parents or guardians may contact us at [email protected] to review, request deletion of, or refuse further collection of their child’s personal information.

9. Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, and destruction. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews of our systems and vendors.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you in accordance with applicable state and federal breach notification laws.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Statement, to comply with our legal obligations, resolve disputes, and enforce our agreements. Health intake and program records are retained in accordance with applicable healthcare record retention requirements. Donor records are retained as required for nonprofit regulatory compliance. When data is no longer needed, we delete or anonymize it using secure methods.

11. Third-Party Links & Services

Our Sites may contain links to third-party websites, social media platforms, and embedded content (such as YouTube videos or donation processors). This Privacy Statement does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party site you visit. We are not responsible for the content, data practices, or privacy policies of external sites.

12. Changes to This Privacy Statement

We reserve the right to update or modify this Privacy Statement at any time. When we make material changes, we will update the ‘Last Revised’ date at the top of this page and, where appropriate, notify you via email or a prominent notice on our Sites. Your continued use of our Sites following the posting of changes constitutes your acceptance of the revised statement. We encourage you to review this page periodically.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Statement or our data practices, please contact:

Privacy Officer	Weimar Institute
Mailing Address	20601 W Paoli Lane, Weimar, CA 95736
Email	[email protected]
Website	weimar.edu | newstart.com

We are committed to working with you to resolve any concerns about your privacy and our use of your personal information in a manner that reflects our faith-based values of integrity, transparency, and service.

This Privacy Statement covers all digital properties operated by Weimar Institute, NEWSTART® and Weimar University.