Privacy Policy

Last updated: March 2026

This privacy policy explains how Soriah The Tarot Reader ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website at www.soriahthetarotreader.co.uk and our services. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Data Controller

The data controller responsible for your personal data is Soriah The Tarot Reader, operating from Newcastle, Tyne and Wear. For any questions about this policy or your personal data, please contact us at soriah@soriahthetarotreader.co.uk.

Information We Collect

We may collect and process the following personal data:

Name and email address (when you book a reading, make a purchase, or create an account)
Payment information (processed securely through Wix payment gateways, which comply with PCI DSS standards)
Booking and purchase history
Messages and communications you send to us
Technical data such as your IP address, browser type, and device information
Usage data including pages visited, time spent on site, and navigation patterns

How We Use Your Information

We use your personal data for the following purposes:

To provide our services, including tarot readings, training, and digital product delivery
To process payments and manage your bookings
To communicate with you about your orders, bookings, and account
To send marketing communications (only where you have given consent)
To improve our website and services
To comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract: Where processing is necessary to fulfil a booking, order, or service you have requested
Consent: Where you have given clear consent for us to process your data for a specific purpose, such as marketing emails
Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
Legal obligation: Where we are required by law to process your data

Email Marketing and Your Right to Opt In or Opt Out

We believe in giving you full control over the communications you receive from us. At checkout or when creating an account, you will be given the option to opt in to our marketing emails. This is entirely your choice and is not required to complete a purchase or booking.

Our marketing emails may include updates about new tarot courses and training, digital downloads and product launches, special offers and promotions, blog posts and tarot insights, and event announcements.

You can opt out of marketing emails at any time by clicking the unsubscribe link at the bottom of any email, contacting us at soriah@soriahthetarotreader.co.uk, or updating your communication preferences in your account settings.

When you opt out, we will remove you from our marketing mailing list promptly and you will not receive any further promotional emails from us. Please note that opting out of marketing communications does not affect essential service communications, such as booking confirmations, order receipts, or account notifications.

Data Sharing

We do not sell, trade, or rent your personal data to third parties. Your data may be shared with Wix.com (our website hosting platform) for the purpose of operating our website and processing transactions, payment processors for handling secure payments, and email service providers for sending transactional and marketing communications (where you have opted in). All third parties we work with are required to handle your data securely and in accordance with data protection law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically, booking and purchase records are kept for six years in line with HMRC requirements. Account data is kept for as long as your account remains active. Marketing consent records are kept for as long as you remain subscribed, plus a reasonable period after unsubscription to evidence your opt out. If you request deletion of your data, we will do so within 30 days unless we are legally required to retain it.

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our site. You can manage your cookie preferences through your browser settings or through the cookie consent notice on our website. For more information about the cookies we use, please refer to our cookie notice.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can ask us to correct any inaccurate or incomplete data
Right to erasure: You can request that we delete your personal data where there is no compelling reason for us to continue processing it
Right to restrict processing: You can ask us to limit how we use your data
Right to data portability: You can request your data in a structured, commonly used format
Right to object: You can object to the processing of your data, including for direct marketing purposes
Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time

To exercise any of these rights, please contact us at soriah@soriahthetarotreader.co.uk. We will respond to your request within 30 days.

Data Security

We take the security of your personal data seriously. This website is hosted on the Wix.com platform, which provides industry standard security measures. All payment processing complies with PCI DSS standards, ensuring your payment information is handled securely. While no method of transmission over the internet is completely secure, we take all reasonable steps to protect your data.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at soriah@soriahthetarotreader.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.