Privacy Policy

Last updated: September 2026

Our Privacy Promise

We collect the minimum data needed to generate your reading, we never sell it, and you can ask us to delete it at any time. This page explains exactly what that means.

1. What We Collect

  • Birth details (date, time, place of birth) — used solely to calculate your BaZi chart. These inputs are processed by our calculation engine to generate your reading.
  • Email address — collected when you register to unlock a full report, so you can be recognized when you return.
  • Name (optional) — used only to personalize your report.
  • Gift recipient details — if you send someone a gift, we collect that person's email address, and (for physical gifts) an optional shipping name, address and phone number. We use this only to deliver the gift the sender requested, never for our own marketing, and the recipient can unsubscribe from any message we send.
  • Waitlist email — if you ask to be notified when checkout opens, we keep your email for that single purpose.
  • Technical data — standard server logs (IP address, browser type, pages visited) used for security and, if you consent, aggregate analytics.

We do not collect payment card information. When payments are enabled, they are processed by a licensed third-party payment provider under its own privacy policy.

A note on birth details: date, time and place of birth, combined with a name, can be sensitive. We treat them as personal data, never display them publicly, and never use them for advertising or profiling.

2. Why We Collect It (Legal Bases)

  • To provide the service you requested — calculating and displaying your reading (contract necessity);
  • To maintain your account — recognizing returning members (contract necessity);
  • To keep the site secure and improve it — aggregate analytics (legitimate interest);
  • To send service emails — e.g., report access, account support. Marketing emails, if ever introduced, will use opt-in consent with one-click unsubscribe.

3. What We Never Do

  • We never sell, rent, or trade your personal data to anyone.
  • We never share your birth details with third parties for marketing.
  • We never use your data to build advertising profiles.

4. Data Storage & Retention

Your data is stored on our hosting provider's servers. Chart and report records are retained so you can revisit your reading; account data is retained while your account is active.

  • Account data — kept until you delete your account.
  • Reports and birth details — kept so you can revisit your reading. If you delete your account, they are no longer linked to you and are deleted or irreversibly anonymised.
  • Server logs — kept briefly for security and troubleshooting, then discarded.
  • Unsubscribe records — kept permanently, because we need them to honour your opt-out.

Deletion requests remove your personal records promptly, typically within 30 days. We may retain a minimal, non-identifiable record where the law requires it (for example, tax or fraud-prevention records).

5. Your Rights

Depending on your jurisdiction (including GDPR in the UK/EU and various US state laws such as CCPA in California), you have the right to:

  • Access the personal data we hold about you;
  • Correct inaccurate data;
  • Delete your data and account ("right to be forgotten");
  • Export your data in a portable format;
  • Object or withdraw consent to processing at any time.

Self-service tools. You can do two of these yourself, right now, without emailing us:

For anything else, email support@example.com from the address you registered with. We will verify your identity and respond within 30 days.

Emails We Send & How To Stop Them

We send only a small number of emails, and every one of them includes a one-click unsubscribe link:

  • Your reading — sent when you unlock a full report, because you asked for it.
  • Gift notifications — sent to a recipient when someone sends them a gift.
  • Account emails — password resets and essential security notices.
  • Waitlist notices — sent only if you asked to be told when checkout opens.

Unsubscribing stops all non-essential email immediately and permanently; we keep your address on a suppression list solely to make sure we don't email you again. It does not delete your account or your saved readings — use the account deletion tool above for that. We do not sell or share your email address with anyone.

6. Cookies

We use a single essential cookie to keep you logged in to your account. When you visit, a small banner lets you choose your cookie level:

  • Essential only — just the login cookie; no tracking.
  • Allow analytics — we use Google Analytics and Microsoft Clarity to understand how visitors use the site (which pages are helpful, where people get stuck). These use cookies and are loaded only after you choose to allow analytics. Data is anonymized where possible and used only to improve the site.
  • Accept all — the same as analytics. If we ever introduce marketing or advertising cookies (for example, to promote the future store), they will be described here and only loaded under your explicit consent.

Withdrawing your consent is as easy as giving it. The Cookie Settings link in the footer of every page reopens the choice panel at any time — no need to clear cookies manually. Choosing "Essential only" stops analytics immediately and prevents those scripts loading on your next visit. We do not use third-party advertising or cross-site tracking cookies.

Analytics providers: Google Analytics 4 (Google Ireland/USA) and Microsoft Clarity. Both are configured with IP anonymisation where available and are blocked entirely until you consent.

7. Children's Privacy

Our services are for adults aged 18 and older. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it immediately.

8. Data Security

We apply industry-standard measures: HTTPS encryption for all traffic, hashed account passwords, access-restricted storage. No system is perfectly secure, but we design ours so that a breach would expose the minimum possible data (we hold no card numbers and no government identifiers).

9. International Transfers

Our servers and service providers may be located outside your country (including the United States). Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

10. Changes to This Policy

If we change this policy materially, we will update this page and the "Last updated" date. Significant changes affecting existing users will be announced directly.

11. Who We Are & How To Contact Us

Privacy questions and requests: support@example.com