Privacy policy

Data controller

Reading Planets — contact@readingplanets.com

You can contact us any time with questions about your data.

Data collected

When you place an order, we collect:

• Identification information: first name, last name, email, phone (optional)

• Shipping and billing address

• Astrological information: date, time and place of birth (used only to compute your birth chart)

• Payment information: processed directly by Stripe, our PCI-DSS certified payment provider. We do not store your card details.

Purposes of processing

Your data is used to:

• Fulfil your order (production, delivery, customer service)

• Send transactional communications (confirmation, tracking)

• Send newsletters and offers (only if you have given explicit consent)

• Improve our products and services via statistical analysis

• Comply with legal obligations (accounting, tax)

Legal basis

Processing of your data is based on:

• Performance of the sales contract (Article 6.1.b GDPR) for order processing

• Your consent (Article 6.1.a) for marketing communications and non-essential cookies

• Our legitimate interest (Article 6.1.f) for analytics and continuous improvement

• Our legal obligations (Article 6.1.c) for invoice retention

Retention period

Order data is kept for 10 years to meet accounting obligations. Marketing data is kept for 3 years after the last interaction. You can request deletion of your data at any time.

Recipients and processors

Your data is only shared with processors strictly necessary to deliver the service:

• Stripe (Ireland, USA) — payment processing

• Shopify (EU, Canada) — order and inventory management

• Supabase (EU) — database hosting

• Omnisend (EU) — transactional emails

• Internal first-party usage analytics — run on our own infrastructure (Supabase, above), with no third-party analytics processor

• Meta, TikTok, Pinterest, Snap — only if you accepted marketing cookies

Cookies

Our site uses essential cookies (cart functionality), internal first-party audience measurement (via an anonymous identifier stored locally in your browser — no third-party analytics tool) and advertising cookies (Meta, TikTok, Pinterest, Snap pixels). Non-essential trackers are only activated after your explicit consent via the cookie banner.

Your GDPR rights

You have the following rights:

• Right of access to your data

• Right of rectification

• Right to erasure ("right to be forgotten")

• Right to data portability

• Right to object to processing

• Right to restriction of processing

To exercise these rights, contact contact@readingplanets.com with proof of identity. We respond within 30 days.

Complaints

If you believe your rights are not being respected, you may lodge a complaint with the relevant data-protection authority (e.g. CNIL in France, ICO in the UK).