Privacy Policy – Mangostrology

Effective date: August 2025
Who we are: Mangostrology (“we”, “us”, “our”) provides astrology and tarot readings, gift cards, and related spiritual services via mangostrology.com and mangostrology.co.uk (the “Sites”) and through email and booking channels.
Data controller: Mangostrology, 77 Brent way N31AR
Contact: mango@mangostrology.com

This notice explains how we collect, use, share, and protect your personal data and describes your rights under the UK GDPR, the Data Protection Act 2018, and—if you are in the EEA—the EU GDPR. It also covers your choices regarding cookies under the UK/EU Privacy and Electronic Communications Regulations (PECR).

1) What personal data we collect

We collect only what we need to provide our services, run our business, and comply with law.

A. Information you provide directly

• Booking details: name, email address, phone (optional), time zone/availability, service purchased.

• Astrology inputs: date of birth, exact time of birth, and place of birth for chart work.

• Reading context: the questions or themes you want to explore; any notes you voluntarily provide.

• Gifting & shop: recipient name/email (for digital gift cards), message, order details.

• Communications: emails and messages you send us (e.g., inquiries, testimonials).

• Consent records: your marketing preferences and cookie consents.

B. Information collected automatically (cookies & similar tech)

• Essential cookies (for core site functionality).

• Optional analytics/marketing cookies (only with your consent): pages viewed, time on site, device/browser information, approximate location (country/region), and referring URLs.

• See Section 8 (Cookies) for details and how to manage them.

C. Payment information

• Payments are processed securely by our provider(s) (e.g., WIX platform). We receive confirmation of payment and limited billing details (e.g., last 4 digits, transaction ID, billing country) but we do not store full card numbers on our systems.

D. Special category data (sensitive information)

• In the course of readings, you may choose to share information about your health, relationships, beliefs, or other sensitive topics. We only process such information with your explicit consent and solely to provide the reading you requested. You can withdraw consent at any time (see Section 11).

2) Why we use your data (purposes) and our legal bases

PurposeExamplesLegal basis

Provide and manage your readingsScheduling; preparing charts; delivering sessions/reports; customer supportContract (Art. 6(1)(b))

Take payment & manage ordersProcess payments, gift cards, refunds, receiptsContract (Art. 6(1)(b)); Legal obligation (tax/records)

Communicate with youRespond to inquiries; booking confirmations & remindersContract; Legitimate interests (service quality)

Maintain records & comply with lawAccounting; tax; dispute handling; fraud preventionLegal obligation; Legitimate interests

Improve our Sites/servicesOptional analytics to understand performance and interestConsent (for non-essential cookies/analytics)

MarketingEmail newsletters, offers (only if you opt-in)Consent (PECR / GDPR)

Special category data used during readingsHealth/relationship details you voluntarily shareExplicit consent (Art. 9(2)(a))

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

3) Who we share data with

We share data only with trusted recipients who need it to provide our services, subject to appropriate safeguards:

• Payment processors: [INSERT – e.g., Stripe/PayPal]

• Booking/e-commerce platform(s): [INSERT – e.g., Calendly, Square Appointments, Wix/Shopify/WordPress plugin, etc.]

• Email & communications: [INSERT – e.g., Gmail/Outlook, newsletter provider if used]

• Analytics & cookies: [INSERT – e.g., Google Analytics, Meta Pixel] (only if enabled with consent)

• IT/hosting & security: web hosting, backup, and DDoS/security providers

• Professional advisors: accountants, legal counsel (where necessary)

• Authorities: where required by law or to defend legal claims

We do not sell your personal data.

4) International transfers

Our trusted providers may process data outside the UK/EEA (e.g., in the US). Where this occurs, we rely on approved safeguards, such as:

• UK/EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, and/or

• An adequacy decision by the UK/EU for the destination country.

You can contact us to request a copy of the relevant transfer safeguards.

5) How long we keep your data

We keep personal data only as long as necessary for the purposes described above:

• Reading preparation notes & charts: typically 12 months after your session (so we can handle follow-ups), unless you ask us to delete sooner.

• Client/accounting records (invoices, transactions): up to 6 years to meet tax and accounting obligations.

• Emails & general inquiries: up to 24 months after the last interaction, unless deletion is requested earlier.

• Marketing lists: until you unsubscribe or we clean inactive lists.

• Cookie data: per cookie lifetimes listed in our Cookie section (and consent tool).

We may retain limited data longer where necessary to establish, exercise, or defend legal claims.

6) Children’s data

Our services are intended for adults (18+). If you are under 18, a parent/guardian must book on your behalf and provide consent. We do not knowingly collect personal data from children under the age of 13.

7) Your rights

Depending on where you live (UK/EEA), you have the right to:

• Access your personal data and obtain a copy

• Rectify inaccurate or incomplete data

• Erase your data (“right to be forgotten”) in certain cases

• Restrict processing in certain cases

• Object to processing based on legitimate interests or to direct marketing

• Data portability (receive your data in a structured, commonly used format)

• Withdraw consent at any time (for consent-based processing)

To exercise your rights, contact mango@mangostrology.com. We will respond within one month (extendable per GDPR where permitted).

Complaints:

• UK: You can complain to the Information Commissioner’s Office (ICO).

• EEA: You can complain to your local Data Protection Authority.
  We would appreciate the chance to resolve your concerns first.

8) Cookies & similar technologies

We use cookies to make our Sites work and, with your consent, to understand performance and tailor content.

Types of cookies

• Strictly necessary: enable core features like page navigation, checkout, and security. These are always on.

• Analytics/Performance (optional): help us understand visits and page performance.

• Marketing (optional): help measure campaign effectiveness.

Your choices

• On your first visit, you’ll see a cookie banner/manager allowing you to accept or reject non-essential cookies.

• You can change or withdraw your consent at any time via the cookie settings link in the footer (or by clearing cookies in your browser).

• Browser controls allow you to block or delete cookies; however, essential features may not work without necessary cookies.

[OPTIONAL – If known, list specific tools]

• Google Analytics: stores a random ID to recognize returning visitors; typical retention: 14 months (configurable).

• Meta Pixel: measures ad performance and conversions.

9) Marketing communications

We will send you service emails (e.g., booking confirmations, receipts, operational notices).
We will send marketing emails only if you opt-in or if PECR permits (e.g., soft opt-in for similar products after a purchase, where available). You can unsubscribe at any time using the link in our emails or by contacting us.

10) Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls, and least-privilege practices. No method of transmission or storage is 100% secure; we continuously review and improve our safeguards.

11) Special category data & consent during readings

You are never required to share sensitive information. If you choose to share special category data (e.g., health, religious/philosophical beliefs, sexual orientation) during a session, we will process it only with your explicit consent and solely to deliver the reading you requested. You may withdraw consent at any time by telling us during the session or emailing mango@mangostrology.com; we will stop using such data and, where feasible, delete related notes.

12) Third-party links and platforms

Our Sites may link to third-party platforms for booking, payments, or social media. Those platforms have their own privacy policies and cookie practices. Please review them before using those services.

13) EU/EEA clients and Article 27 representative

If we offer services to individuals in the EEA and do not maintain an EU establishment, we may be required to appoint an EU representative under GDPR Article 27.
Status: [INSERT if you regularly serve EU clients: name and contact details of appointed EU representative; otherwise state: “We are assessing whether Article 27 applies to our operations and will update this section if an EU representative is appointed.”]

14) Changes to this policy

We may update this notice from time to time. We will post any changes here and update the effective date above. If changes are material, we will provide a more prominent notice or seek consent where required.

15) How to contact us

Email: mango@mangostrology.com

If applicable: EU Representative contact details (see Section 13)