1. Introduction At theforgottenhalftarot.co.uk, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website, use our free daily pull, subscribe to our mailing list, create an account, or purchase our products/services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Theforgottenhalftarot.co.uk is the data controller responsible for your personal data. If you have any questions, please contact us at hello@theforgottenhalftarot.co.uk.

3. The Data We Collect About You We may collect, use, store, and transfer different kinds of personal data about you, including:

• Identity Data: First name, last name, or username.

• Contact Data: Email address, billing address, and delivery address.

• Financial Data: Payment card details. (Note: We do not store your full card details; these are processed securely by our payment gateway providers).

• Transaction Data: Details about payments to and from you, and other details of products or services you have purchased from us.

• Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, and feedback.

• Technical Data: IP address, browser type and version, time zone setting, and operating system.

• Usage Data: Information about how you use our website (e.g., how often you use the daily pull).

4. How We Use Your Data and Legal Basis We will only use your personal data when the law allows us to. Our legal bases for processing your data are:

• Performance of a Contract: To process your order, manage your account, and deliver the services or products you have purchased.

• Consent: To send you marketing communications, newsletters, and updates via our subscription service. You can withdraw this consent at any time by unsubscribing.

• Legitimate Interests: To run our website, keep it secure, support your experience throughout this website, analyze usage to improve our services, and troubleshoot technical issues.

• Legal Obligation: To retain necessary financial and transaction records for HMRC tax compliance.

5. Data Sharing and Third Parties We do not sell your personal data. We may share your data with trusted third parties who assist us in operating our website and fulfilling orders, such as:

• Dropshipping and fulfillment partners: We share necessary Identity and Contact Data (such as your name and shipping address) with our UK-based third-party suppliers solely for the purpose of printing, packing, and delivering your purchased items.

• Payment gateways (e.g., [Insert Stripe/PayPal/Square etc.]): To securely process your financial transactions.

• Email marketing service providers: (e.g., Mailchimp, MailerLite).

• Website analytics providers: (e.g., Google Analytics).

These third parties are bound by strict data protection agreements and are only permitted to process your data for specified purposes.

6. Data Retention We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.

• For tax and legal purposes, we are required by UK law (HMRC) to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers.

• If you unsubscribe from our mailing list, your Contact Data will be deleted or moved to a suppression list to ensure you receive no further marketing communications.

7. Your Legal Rights (UK GDPR) Under data protection laws, you have rights including:

• Right of Access: You can ask us for copies of your personal information.

• Right to Rectification: You can ask us to rectify inaccurate information or complete incomplete information.

• Right to Erasure: You can ask us to erase your personal information in certain circumstances (“Right to be forgotten”).

• Right to Restriction of Processing: You can ask us to restrict the processing of your information.

• Right to Object to Processing: You can object to the processing of your personal data.

• Right to Data Portability: You can ask that we transfer the information you gave us to another organization, or to you.

To exercise any of these rights, please contact us at hello@theforgottenhalftarot.co.uk. We try to respond to all legitimate requests within one month.

8. Complaints You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.