People tell me things they haven't told anyone. I take that seriously, so this page is written plainly rather than in legal language: what I collect, why, how long I keep it, and what you can ask me to do about it.
Who I am
Emily Mangan, trading as Emily's Tarot Readings. I work online from County Offaly, Ireland.
Contact: hello@emilystarotreadings.com
I am the data controller — there is no company behind me, it is just me and the cards.
What I collect, and why
When you order a recorded reading
Your name, email address, WhatsApp number, and whatever you write in the focus box. That is the whole list — there is no date of birth, no address, no account to create. I need the number to send your reading and the focus text to know what to read for. The legal basis is performance of our contract.
I never see your card details. Nothing on this website touches them: PayPal takes the payment on their own pages and tells my server only whether it succeeded and for how much.
When you book a live sitting
Your name, email address, the time you choose and anything you write in the notes box. This is collected by Cal.com, which runs my calendar, holds your slot while you pay and issues the video link. The booking also appears in my own Google Calendar.
When you use the contact form
Your name, email address and message — nothing else. The legal basis is my legitimate interest in answering people who write to me.
When you draw a free card
Nothing at all. The card is chosen in your own browser and never sent anywhere — I have no idea which one you turned. The site stores a single value on your device to remember you have already seen the opening animation, so it does not play again. It disappears when you close the tab and it does not identify you.
What you tell me in a reading
People bring grief, illness, relationships and things they are ashamed of. You are never required to tell me any of it — a reading works perfectly well from “general life”.
Whatever you do share is used for your reading and nothing else. It is never posted, never quoted as an example, never shown to anyone, and never used in anything I write or record publicly. If you would rather I deleted it the moment your reading is delivered, ask and I will.
Who else handles your data
I use a small number of services to run the practice. Each one only receives what it needs to do its job.
- PayPal — takes payments. They are the controller of your payment details, not me, and their own privacy policy governs them.
- Cal.com — runs the booking calendar for live sittings and issues the video link.
- Web3Forms — passes contact form messages to my inbox.
- Google — my calendar and my email.
- Cloudflare — hosts the site and keeps ordinary server logs, which include visitors' IP addresses.
- WhatsApp (Meta) — recorded readings are delivered there, so Meta carries the message.
Some of these are based outside the EU/EEA. Where that is so, the transfer relies on the European Commission's Standard Contractual Clauses or on an adequacy decision for that country.
I do not sell your data, share it for advertising, or hand it to anyone who is not on that list.
How long I keep it
- Order and payment records — six years. Irish Revenue requires business records to be kept that long. I cannot delete these earlier even if you ask.
- Your reading and the notes behind it — twelve months, so I can resend it if you lose it. Deleted after that, or sooner if you ask.
- Contact form messages — twelve months, then deleted.
- Booking records — twelve months after the sitting.
Your rights
You can ask me for a copy of everything I hold about you, ask me to correct it, ask me to delete it, object to how I am using it, ask me to restrict it, or ask for it in a portable file. Email hello@emilystarotreadings.com and I will answer within one month. It is free, and you do not have to give a reason.
The one exception is the six-year tax record above, which I am required to keep.
If you are unhappy with how I have handled your data you can complain to the Irish Data Protection Commission at dataprotection.ie. I would rather you told me first and gave me the chance to put it right.
Cookies and tracking
This site sets no advertising or analytics cookies. There is no Google Analytics, no advertising pixel, and nothing that follows you to other websites — which is also why you are not being asked to click a consent banner.
PayPal and Cal.com set their own cookies when you reach their checkout or booking pages. Those are theirs, governed by their own policies.
Children
Readings are sold only to adults. I do not knowingly collect anything from anyone under 18.
If this changes
If I change this policy, the date at the top of the page changes with it. If the change is significant and I hold your email address, I will tell you.