MYSTIC REBELS

CONTACT AND PRIVACY REQUESTS POLICY

Last Updated: July 24, 2026

.policy-date { font-size: 0.8rem; color: #666666; /* Muted gray */ margin-top: -10px; /* Pulls it closer to the main heading */ margin-bottom: 20px; font-style: italic; }

---

This Contact and Privacy Requests Policy explains how to contact Mystic Rebels LLC, doing business as Mystic Rebels (“Mystic Rebels,” “we,” “us,” or “our”), and how to submit questions, complaints, and requests concerning personal information.

This Policy supplements the Mystic Rebels Privacy Policy, Consumer Health Data Privacy Policy, Cookie Policy, Terms of Service, and other applicable policies. Those documents contain additional information about our practices and are incorporated by reference.

1. Contact Mystic Rebels

Mystic Rebels LLC
7901 4th St N Ste 300
St Petersburg, FL 33702, USA
Email: vibe@mysticrebels.com

You may use this contact information for policy questions, privacy requests, account concerns, accessibility requests, order or service issues, and other business communications. To help us route your message, use a clear subject line such as “Privacy Request,” “Privacy Appeal,” “Consumer Health Data Request,” “Accessibility Request,” or “Order Support.”

Do not send passwords, full payment-card numbers, government identification, medical records, or other sensitive information unless Mystic Rebels specifically requests it through an appropriate secure method.

2. How to submit a privacy request

To submit a privacy request, email vibe@mysticrebels.com from the email address associated with your Mystic Rebels customer account when possible. State the right you wish to exercise and provide enough information for us to understand and locate the relevant records.

A useful request ordinarily includes:

Your full name and the email address associated with your Mystic Rebels account or transaction.

The type of request, such as access, correction, deletion, portability, consent withdrawal, opt-out, appeal, or consumer health data request.

Relevant order, booking, membership, affiliate, practitioner, or account information when the request concerns a specific interaction.

The state, country, or other jurisdiction in which you reside, when needed to determine which rights and response procedures apply.

A clear description of the information or processing activity involved.

You may also use a “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” cookie-preference, data-sharing opt-out, or similar automated control displayed on our website where available. Using an automated control may be the fastest way to apply browser- or device-level choices.

3. Privacy rights that may be available

Depending on where you live, which law applies, the nature of our relationship, and applicable exemptions, you may have the right to:

Confirm whether we process personal information about you.

Know or access specified personal information and information about its collection, use, disclosure, sale, or sharing.

Correct inaccurate personal information.

Delete certain personal information.

Receive a portable copy of certain personal information.

Withdraw consent where processing is based on consent.

Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling or automated decision-making.

Limit certain uses or disclosures of sensitive personal information.

Appeal a decision concerning a privacy request.

Use an authorized agent to submit a request where permitted.

Receive equal service and not be unlawfully discriminated or retaliated against for exercising a privacy right.

Lodge a complaint with an appropriate privacy, consumer-protection, or data-protection authority.

These rights are not identical in every jurisdiction, and not every right applies to every person, record, business, or processing activity. We may deny or limit a request where permitted or required by law, including when we cannot verify the request, an exemption applies, retention is legally required, deletion would impair another person’s rights, or the request is manifestly unfounded, excessive, technically disproportionate, or otherwise outside the applicable law.

4. Verification and data minimization

We may verify your identity and authority before acting on a request so that personal information is not disclosed, changed, or deleted improperly. Verification may include confirming control of the relevant email address or customer account, matching information already maintained in our records, confirming an order or booking identifier, or requesting another reasonable verification step.

We will request only information reasonably necessary for verification and will use verification information for the request, security, fraud prevention, compliance, and recordkeeping purposes. We ordinarily will not require you to create a new account merely to exercise an opt-out right, and we will not request government identification unless reasonably necessary and legally appropriate for the request.

If we cannot verify your identity or authority to the degree required for the requested action, we may ask for additional information, narrow the response, or deny the request. We will explain the decision where required by law.

5. Authorized agents and representatives

Where applicable law permits, an authorized agent may submit a request for you. The agent must clearly identify the request as an authorized-agent request and provide evidence of their authority. We may require signed permission, verify the agent’s identity, and contact you directly to confirm that you authorized the request, unless a valid power of attorney or other law provides otherwise.

A parent, guardian, executor, attorney-in-fact, or other representative must provide documentation reasonably sufficient to establish their authority and the scope of the requested action.

6. Response timing, fees, and appeals

We will acknowledge and respond to verified requests within the period required by applicable law. Many U.S. state privacy laws use an initial 45-day response period, while other laws use different periods or allow extensions. If we need a permitted extension, we will provide notice and the reason where required.

We ordinarily do not charge for a privacy request. We may charge a reasonable fee or decline to act when applicable law allows it because a request is manifestly unfounded, excessive, repetitive, or made beyond a law’s free-request allowance. We will explain any fee before proceeding.

If we deny a request in whole or in part, we will provide the legally required explanation and appeal instructions. To appeal, email vibe@mysticrebels.com with the subject “Privacy Appeal” and include the original request, our decision, and the reason you believe the decision should be reconsidered. We will respond within the time required by the applicable law and, where required, provide information about contacting the appropriate regulator.

7. Sale, sharing, targeted advertising, and preference signals

Mystic Rebels does not sell personal information for money. Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain advertising, analytics, cookie, pixel, or cross-context behavioral-advertising disclosures even when no money is exchanged. Our Privacy Policy and Cookie Policy explain the tools and processing currently in use.

Where required, you may opt out through the website’s automated privacy controls or by emailing vibe@mysticrebels.com. We will recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, where required and where the signal can reasonably be associated with the relevant browser, device, account, or consumer.

An opt-out may apply only to the browser, device, account, or identifier through which it was submitted. Clearing cookies, using another browser or device, or signing out may require you to renew the preference unless the choice is associated with your account or otherwise preserved.

8. Consumer health data requests

Requests involving health and wellness intake, service-related health information, inferences about health, or other consumer health data may be governed by the Mystic Rebels Consumer Health Data Privacy Policy and applicable consumer health privacy laws. Use the subject “Consumer Health Data Request” when emailing vibe@mysticrebels.com.

Depending on applicable law, consumer health data rights may include access, deletion, withdrawal of consent, and an appeal. Consumer health data may be subject to different response rules, exceptions, and deletion obligations than ordinary account or transaction data.

9. Non-discrimination

Mystic Rebels will not unlawfully discriminate or retaliate against you for exercising an applicable privacy right. We will not unlawfully deny goods or services, charge a different price or rate, provide a different level or quality, or suggest that you will receive different treatment because you exercised such a right.

This does not prevent Mystic Rebels from offering a lawful financial incentive or loyalty arrangement with the required notice and consent; correcting an account based on deleted information; enforcing its Terms of Service; preventing fraud, abuse, threats, or unlawful conduct; or refusing or ending service for a lawful reason unrelated to the exercise of a privacy right.

10. Regulatory complaints and international rights

We encourage you to contact Mystic Rebels first so that we can understand and address your concern. You may also have the right to complain to an attorney general, privacy regulator, consumer-protection authority, or data-protection authority with jurisdiction over your complaint.

If the European Economic Area General Data Protection Regulation applies, you may lodge a complaint with a data-protection authority in the EEA country of your habitual residence, place of work, or the alleged infringement. If the United Kingdom GDPR applies, you may contact the UK Information Commissioner’s Office. These rights do not prevent you from seeking another administrative or judicial remedy available under applicable law.

Mystic Rebels has not identified an EU or UK representative in this Policy. If Mystic Rebels formally appoints a representative required by applicable law, verified contact information will be added to the Privacy Policy and this Policy.

11. Accessibility and communication accommodations

If you need this Policy or a privacy-request process in an alternative format, or need a reasonable communication accommodation, email vibe@mysticrebels.com with the subject “Accessibility Request.” Describe the format or assistance you need without providing unnecessary health or disability information.

12. Business communications and legal notices

The contact information in Section 1 may be used for ordinary business correspondence and notices expressly permitted by our policies. Email is not accepted as formal service of legal process unless Mystic Rebels expressly agrees in writing or applicable law requires otherwise. Formal legal process should be directed in accordance with applicable law to Mystic Rebels LLC at its current registered or legally authorized service address.

13. Changes to this Policy

Mystic Rebels may update this Policy when its contact information, request methods, business practices, technologies, or legal obligations change. The revised Policy will be posted with a new effective date. Additional notice will be provided where required.