1. Introduction

I take your privacy seriously and am committed to protecting your personal data. This Privacy Policy outlines how your information is collected, used, and stored when you interact with this website and make purchases of digital services such as spellwork and tarot readings.

By using this website, you agree to the terms of this Privacy Policy.

2. Who I Am

This website is operated by a sole trader based in the United Kingdom. If you have any questions about your data or this policy, you can contact me directly:

Email: shopgypsywitchspells@gmail.com
Phone: (+44) 7507 153379

3. What Personal Data I Collect

When you use this website or purchase services, I may collect the following types of information:

• Identity Data: Name, username (if applicable)

• Contact Data: Email address, billing address

• Transaction Data: Details of services purchased, payment information (processed securely by a third-party processor, e.g., PayPal or Stripe)

• Technical Data: IP address, browser type, time zone, location, operating system

• Communication Data: Any messages or requests sent via contact forms or email

I do not knowingly collect data from anyone under the age of 18.

4. How Your Data Is Used

Your personal data is used to:

• Provide the services you have requested

• Process payments and deliver service confirmations

• Respond to enquiries or issues

• Comply with legal obligations (e.g., tax reporting)

• Maintain website security and performance

I do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

Under UK GDPR, the legal bases I rely on for processing your personal data are:

• Contractual Obligation: To fulfill the service you have requested

• Legal Obligation: For accounting and compliance with UK law

• Legitimate Interests: To improve services and website functionality

• Consent: Where you have explicitly opted in (e.g., for newsletters)

6. Sharing Your Information

I do not sell or rent your personal data to third parties.

However, I may share your data with:

• Payment processors (e.g., PayPal, Stripe)

• Hosting providers and technical service providers

• Legal or governmental authorities where required by law

All third parties are obligated to protect your data and comply with UK data protection law.

7. Data Retention

I retain personal data only for as long as necessary to:

• Fulfil the purposes for which it was collected

• Comply with legal, tax, or reporting obligations

Typically, transaction records are kept for 6 years as required by HMRC.

8. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data I hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your data (where legally permitted)

• Object to or restrict processing in certain circumstances

• Withdraw consent at any time (where consent is the basis for processing)

To exercise any of these rights, contact me using the details provided above.

9. Cookies

This website may use cookies or similar tracking technologies to improve your experience. Where applicable, a separate Cookie Policy will explain this in detail.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Any significant changes will be posted on this page and, where appropriate, notified by email.