Last Updated: 23 September 2025
At Energetic Tarot, we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, store, and use your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).
By using our website https://energetictarot.co.uk or our services, you consent to the practices outlined here.
Data Controller
Energetic Tarot operates as the data controller for the personal data you provide.
If you have any questions regarding your data, you can contact us at:
Email: cat@energetictarot.co.uk
Website: https://energetictarot.co.uk
Personal Data We Collect
We collect personal data in the following situations:
- Course Purchases and Enrollment: When you purchase a course, we collect your name, email address, billing details, and any other information required to process your order and provide access to your course content. Payments are processed securely through our trusted payment provider (via WooCommerce, Stripe or PayPal).
- Email Sign-Ups: When you sign up to receive free resources or newsletters, we collect your email address. This is processed and stored in Flodesk, our email marketing provider.
- Communications: When you contact us directly, we may store your contact details and message history to reply to your query.
- Cookies & Analytics: Our website may use cookies and analytics tools to monitor performance, improve user experience, and understand how our services are used.
Lawful Bases for Processing
Under GDPR, we process your personal data only where we have a lawful basis. The lawful bases we rely on include:
- Contractual necessity – to process your purchase and deliver course access.
- Consent – when you subscribe to our email updates or free resources. You can withdraw consent anytime by using the unsubscribe link or contacting us.
- Legitimate interests – to improve our website, protect against fraud, and manage our services.
- Legal obligations – where we must retain records for tax or accounting purposes.
How We Use Your Information
We use your personal data to:
- Process and manage course purchases.
- Deliver course content and related support.
- Send resources, newsletters, and promotional updates (with your consent).
- Improve our website, content, and user experience.
- Comply with legal obligations such as financial reporting.
Data Sharing and Storage
- We do not sell or trade your personal data to third parties.
- Your data is securely stored within WooCommerce and Stripe (for purchases) and Flodesk (for mailing lists).
- Access to your data is restricted to authorised staff and service providers under confidentiality agreements.
- Data is stored within the UK, EU, or in secure third-party services that comply with GDPR standards.
Data Retention
We only keep personal data for as long as necessary to fulfil the purposes outlined above or as required by law (such as tax record obligations). Once no longer needed, your data is securely deleted.
Your GDPR Rights
Under UK/EU GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections if your information is inaccurate or incomplete.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data where it is no longer necessary or where you withdraw consent.
- Right to Restrict Processing: Ask us to restrict how we use your data in certain circumstances.
- Right to Data Portability: Request a copy of your personal data in a structured, commonly used format for transfer to another service.
- Right to Object: Object to processing where we rely on legitimate interests, including for marketing purposes.
- Right to Withdraw Consent: If you have given consent for data use (e.g., newsletters), you may withdraw it at any time.
You can exercise your rights by contacting us at [your preferred email].
Children’s Privacy
Our website and services are intended for adults aged 16 and over. We do not knowingly collect personal data from children under 16.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in data practices or legal requirements. Updates will be posted on this page, and significant changes will be communicated via email where possible.
Contact and Complaints
If you have questions or requests regarding your data, please contact:
Energetic Tarot
Email: cat@energetictarot.co.uk
If you are based in the UK or the EU and believe your data rights have been infringed, you also have the right to lodge a complaint with your local Supervisory Authority (such as the Information Commissioner’s Office (ICO) in the UK).