Privacy Policy

1. Information we collect

We collect only information reasonably necessary to operate the website, respond to enquiries, provide services and process payments. This may include:

• your name, email address, telephone number and country;
• your organisation, professional position or role;
• the nature and content of your enquiry;
• your date, time and place of birth and current location where relevant to an astrological consultation;
• information you voluntarily provide in correspondence or during an engagement;
• payment information such as your name, email address, service purchased, transaction amount, payment status, receipt information and Stripe transaction references; and
• technical information generated through use of the website, which may include IP address, browser or device information, referring page, pages visited, session identifiers, timestamps and session duration.

Please do not provide personal information about another person, including birth details, unless you have that person's authority or another lawful basis to do so.

2. How information is collected

Personal information is collected directly from you when you complete a form, purchase or book a service, correspond with us or provide information during an engagement. Limited technical information is generated when you use the website. Payment and technology providers may also provide transaction or security information necessary to operate the service.

We do not purchase personal information and we do not sell personal information collected through this website.

3. How we use information

We may use personal information to:

• assess and respond to enquiries;
• prepare for and provide astrological, strategic or private consultations;
• communicate about bookings, services and appointments;
• process, verify and administer payments and receipts;
• maintain appropriate client and transaction records;
• operate, maintain and secure the website;
• diagnose technical problems and understand general website usage;
• prevent fraud, misuse or unauthorised transactions;
• meet accounting, taxation, regulatory or legal obligations; and
• establish, exercise or defend legal rights.

We do not use personal information for an unrelated purpose unless you consent or the use is permitted or required by law. We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

4. Payments

Payments are processed by Stripe. Payment card numbers, security codes and full card credentials are entered into systems controlled by Stripe and are not stored by The Karmic Soul.

Stripe may independently collect transaction, device, IP address and fraud-prevention information in accordance with its own privacy practices. The Karmic Soul receives only the transaction information reasonably necessary to identify and administer the payment.

5. Disclosure of personal information

We do not sell, rent or trade personal information. Information may be disclosed only where reasonably necessary to:

• Base44, which provides website, application, database and related technology services;
• Stripe, which processes payments and associated transaction information;
• email, communications, hosting or other technology providers used to operate the business;
• accountants, lawyers, insurers or other professional advisers where reasonably necessary;
• governmental, regulatory, law-enforcement or judicial authorities where disclosure is required or authorised by law; or
• another party with your express consent.

6. Method of disclosure

Where information is transferred to a service provider, it is generally transmitted electronically through encrypted website connections, authenticated application programming interfaces, secure service integrations, payment systems or provider platforms. Certain administrative communications may be transmitted by email. Ordinary email cannot be guaranteed to be completely secure.

7. International processing

The Karmic Soul serves clients internationally and uses technology and payment providers that may process or store information outside your country of residence, including in jurisdictions in which Base44, Stripe and their authorised service providers operate. Privacy laws in those jurisdictions may differ from those applying where you live.

Where applicable, we take reasonable steps to use reputable providers and appropriate contractual, technical and organisational safeguards for international processing.

8. Security

We take reasonable technical, administrative and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration or destruction. Measures used on this website include, where applicable:

• HTTPS/TLS encrypted transmission;
• access-controlled website and database systems;
• restricted administrative access and authentication;
• secure credential and secret management;
• separation of payment-card processing from our website systems;
• Stripe-hosted payment processing and authenticated payment notifications; and
• limited access to enquiry and payment records.

No method of internet transmission or electronic storage can be guaranteed to be completely secure.

9. Cookies, local storage and analytics

The website may use limited cookies, local browser storage and similar technologies required for functionality, security and session management. The Base44 platform also collects limited usage information, such as page visits, referring pages, session identifiers and session duration, to operate and improve the website.

We do not currently use information collected through this website for third-party behavioural advertising.

10. Sensitive information

You may choose to disclose information of a private or sensitive nature when describing a personal situation. Please provide only information relevant to the service requested. Where such information is voluntarily provided, it will be used only as reasonably necessary to assess your enquiry, provide the requested service, protect legitimate interests or comply with law.

In corporate and advisory engagements, information concerning an organisation, its principals, its personnel and its commercial affairs is treated as confidential business information, and is used only to provide the engagement, protect legitimate interests or comply with law.

11. Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to maintain legitimate business and client records, or to satisfy applicable legal, accounting, taxation, dispute-resolution or regulatory requirements. When information is no longer reasonably required, it may be deleted, destroyed or de-identified, subject to legal and technical limitations.

12. Your rights

Depending on the law applicable to you, you may have rights to request access to, correction of, deletion of, restriction of or objection to processing of your personal information, and to withdraw consent where processing is based on consent.

Requests should be sent to hello@thekarmicsoul.com. We may need to verify your identity before acting on a request. A request may be refused or limited where permitted or required by law.

13. Marketing communications

We will not add you to a marketing mailing list merely because you make an enquiry or purchase a service. Where you expressly subscribe to communications, you may unsubscribe at any time using the unsubscribe facility provided or by contacting us.

14. Children

The website and services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from a child through the website without appropriate authority or consent.

15. Complaints

If you believe your personal information has been handled improperly, please contact us at hello@thekarmicsoul.com. We will review privacy complaints reasonably and in good faith. Depending on your location and applicable law, you may also have the right to complain to the privacy or data-protection regulator with jurisdiction over you.

16. Changes to this policy

We may amend this Privacy Policy when our practices, technology, service providers or legal obligations change. The current version will be published on this website with its effective date.