Privacy Policy
Last updated:
We collect information you provide directly to us, such as when you:
- Create an account or use our services
- Submit contact forms or communicate with us
- Participate in surveys, contests, or promotions
- Subscribe to our newsletters or updates
Types of information may include:
- Name, email address, phone number
- Account credentials and preferences
- Communications and correspondence
- Usage data and analytics information
- Device information and IP addresses
We may use the information we collect for various purposes, including:
- Providing, maintaining, and improving our services
- Processing transactions and sending related information
- Sending administrative information and updates
- Responding to comments, questions, and requests
- Personalizing and improving user experience
- Conducting research, analytics, and data analysis
- Marketing and promotional communications (with consent)
- Detecting, preventing, and addressing fraud or security issues
- Complying with legal obligations and protecting rights
Forms on this site use Jid Signals, which reads your approximate location and network type from your connection to help prevent fraud; your IP address is not stored. When you submit a form, we check the business details you give (such as your e-mail address, company name, phone number, location and message) with Jid (jid.com), our fraud-prevention provider, to confirm the enquiry comes from a real business. Leads are stored by Jid as our processor: Jid keeps the enquiry (your name, e-mail address, phone number, company, website and message) with its result in our leads inbox, encrypted, for up to 12 months, or less if we delete it sooner. For the check itself, Jid keeps the result, your e-mail domain, a keyed one-way hash of your e-mail address and a one-way hash of the message for 30 days. After we review an enquiry we may mark it with Jid as legitimate, a sales pitch, spam or a scam. Jid keeps that report for up to 24 months with the company and e-mail domain concerned and the keyed hash of your e-mail address (never the address itself). Jid publishes only counts about businesses, once at least two independent businesses agree, never anything about an individual (jid.com/privacy, section 2b).
We may share your information in the following circumstances:
- With Service Providers: Third-party vendors who perform services on our behalf
- For Legal Compliance: When required by law or to protect rights and safety
- Business Transfers: In connection with mergers, acquisitions, or asset sales
- With Consent: When you explicitly agree to share information
- Aggregated Data: De-identified, aggregated information for research or analytics
We reserve the right to use, analyze, and derive insights from all data provided to improve our services and conduct research.
When you send an enquiry from a retreat centre's profile, we store your name, email address, timeframe, message, the centre and page it was about, and the time. It comes to Peyote.com.
The form has a box, unticked by default, that reads "Share my enquiry with [centre name] so they can reply to me directly". With your enquiry we store whether you ticked it, when, and the exact wording and version you were shown.
- If you tick it: we send your enquiry (name, email address, timeframe and message) to that one named centre and no one else, so it can reply to you directly. Our server checks the consent stored with your enquiry before sending. What the centre then does with it is governed by the centre's own privacy policy.
- If you leave it unticked: your enquiry stays with Peyote.com and is not shared with any centre.
We do not sell leads, and we never sell or rent personal information. Centres pay no per-lead or per-enquiry fee, and we do not pass enquiries to any other centre, broker or marketer.
Centres can pay for featured placement, which is a listing feature and never includes access to readers' details. Some centres outside the United States may pay us a commission on bookings that came through the site (see the disclosure page). A commission is worked out from the centre's own booking records or a tracked link; we do not send a centre your details to claim one. To ask us to delete an enquiry, write to hello@peyote.com.
A centre that buys featured placement pays through Stripe, which processes the payment and holds the card or bank details; we never see them. We keep the billing email, the centre it is for and the links, photos and note the centre supplies for its listing, with the subscription, to run and display the placement and to email receipts and changes to it.
When you send a booking request from /book, we store your name, email address, phone number if you give one, the state, the centres you chose, your date window, individual or group, preferred language, your note, that you confirmed you are 21 or older, and the consent you gave, with its exact wording and version. We do not ask for, and you should not send, any health or medical information: the state's screening questions are asked by the centre's licensed facilitator, privately.
- Sharing: we send your request, name and contact details only to the centres you named, because you ticked the box asking us to. We store each centre's answer. When you choose one, we send that centre the date you chose and your contact details, and tell the others only that you chose another centre. What a centre then does with your details is governed by its own privacy policy and its state's confidentiality rules.
- Payment: if a booking fee applies, Stripe processes the card payment and holds the card details; we never see them. We keep the Stripe session reference and whether it was paid. We never take payment for the centre's services or the psilocybin product.
- Afterwards: a few days after the date you booked, we email you once to ask how it went, as described under review requests below. Peyote.com sends it, never the centre or a facilitator.
- Retention: requests and the centres' answers are deleted automatically 24 months after the request was made. To have yours deleted sooner, write to hello@peyote.com.
We never sell booking requests or the details in them, and no centre pays us for them.
Our quarterly data reports are free to read on the web, and the CSV of their tables is free to download without giving us anything. To get a report as a PDF, you give us your email address, and optionally your name and organisation. We store them with the report you asked for, the time, the country your connection comes from (as reported by our host, Vercel) and the newsletter wording you were shown and your answer.
- To deliver the report: we email you a download link that works for 7 days. That is the only email sent for the download itself.
- In the EU and EEA, the UK, Switzerland and Canada: the form has a box, unticked by default, to also receive the Peyote.com newsletter. We add you to it only if you tick the box. You get the PDF either way.
- Everywhere else: the form says that we will also send you a link to join the newsletter. You join only if you press that confirmation link.
In every case the newsletter uses double opt-in through Brevo, our newsletter provider, and every issue has a one-click unsubscribe link. We do not add an address that has unsubscribed from us or bounced. We use your name and organisation only to know who reads the reports, never to sell or share them.
About three weeks after you send an enquiry about a retreat centre, or a few days after the date of a booking you confirmed, we email you once to ask how it went, with a link to a review form. Everyone who enquires gets the same single email, whatever they wrote or whichever centre it was about. We use your name and email address from the enquiry for this, and we do not send it if you have opted out of email from us or your address has bounced. Each email has a one-click link to stop all review requests, which we record so you are not asked again.
If you send a review, we store with it:
- whether you attended, the dates you give, your star rating and your review text;
- any safety concern you write in the separate box, which goes by email to Neil Bostick, who runs Peyote.com, and is never published;
- whether you agreed to show your first name and country, and those two details if you did;
- the enquiry it belongs to, so each review link works once.
Reviews are checked before publication only against our posting rules (someone else's personal data, threats, spam, or nothing to do with the centre). A published review shows your rating, text, dates if given, whether you attended and the label "Enquired through Peyote.com"; your name and country appear only if you agreed, otherwise it reads "A Peyote.com reader". Your email address is never published or given to the centre. The centre may post one public reply. To have your review taken down or deleted, write to hello@peyote.com.
We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
Security Measures:
- Industry-standard encryption and security protocols
- Regular security assessments and updates
- Limited access to personal information on a need-to-know basis
- Secure data storage and transmission practices
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request transfer of your information
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, please contact us using the form on our About page.
Educational Purpose Only
This website provides educational information about psychedelic substances. We do not encourage illegal activities and are not responsible for how you use this information.
Cookies: We use cookies and similar technologies to enhance user experience and collect analytics data.
Third-party Links: Our website may contain links to third-party sites. We are not responsible for their privacy practices.
International Users: Information may be transferred to and processed in countries other than your own.
Children's Privacy: Our services are not intended for individuals under 18 years of age.
Questions or Concerns?
If you have any questions about this Privacy Policy, please use our contact form.
We reserve the right to update this policy at any time. Changes will be posted on this page with an updated date.