Privacy Policy

Last updated: July 29, 2025 at 9:00 AM GMT+10:00 (Brisbane, Australia Time)

✅ Privacy Acknowledgment

By accessing or using Aurora Flame Tarot services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

This policy explains how we collect, use, store, and protect your personal information.

Your privacy is important to us, and we are committed to protecting your personal data in accordance with applicable privacy laws.

1. Company Information

Aurora Flame Tarot ("we," "us," "our," or "Company") is a business registered in Australia. This Privacy Policy describes how we collect, use, and protect your personal information when you use our services.

2. Information We Collect

📊 Data Collection Overview

We collect information you provide directly to us and information we collect automatically when you use our services.

2.1 Information You Provide Directly

  • Account Information: Name, email address, username, password, and profile information
  • Reading Data: Questions, responses, and personal details shared during readings
  • Payment Information: Billing address, payment method details (processed securely through Stripe)
  • Communication Data: Messages, feedback, and support requests
  • Social Media Data: Information from social media accounts when you connect them (with your permission)
  • Preference Data: Language preferences, reading history, and service customizations

2.2 Information We Collect Automatically

  • Usage Data: Pages visited, features used, time spent on services
  • Device Information: IP address, browser type, operating system, device identifiers
  • Location Data: General geographic location (city/country level) based on IP address
  • Technical Data: Log files, error reports, performance data
  • Cookies and Tracking: Cookies, web beacons, and similar technologies

3. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: Provide readings, process payments, and maintain your account
  • Personalization: Customize content, recommendations, and user experience
  • Communication: Send service updates, support responses, and important notices
  • Security: Protect against fraud, unauthorized access, and security threats
  • Analytics: Understand usage patterns and improve our services
  • Legal Compliance: Meet legal obligations and enforce our terms
  • Marketing: Send promotional content (with your consent)

4. Information Sharing and Disclosure

🔒 Limited Sharing Policy

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information only in the following limited circumstances:

  • Service Providers: Trusted third parties who assist in operating our services (payment processors, hosting providers, analytics services)
  • Legal Requirements: When required by law, court order, or legal process
  • Safety and Security: To protect our rights, property, or safety, or that of our users
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Consent: When you explicitly consent to sharing
  • Anonymized Data: Aggregated, anonymized data that cannot identify you

5. Data Security and Protection

🛡️ Security Measures

We implement industry-standard security measures to protect your personal information.

Our security measures include:

  • Encryption: Data encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Secure Infrastructure: Protected servers and secure data centers
  • Regular Updates: Security patches and system updates
  • Monitoring: Continuous monitoring for security threats and vulnerabilities
  • Staff Training: Regular security training for all team members

⚠️ Important: While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Improve our services

6.1 Specific Retention Periods

  • Account Data: Retained while your account is active and for 3 years after closure
  • Reading Data: Retained for 7 years for service continuity and legal compliance
  • Payment Data: Retained as required by financial regulations (typically 7 years)
  • Communication Data: Retained for 3 years after last contact
  • Usage Data: Retained for 2 years for analytics and service improvement

7. Your Privacy Rights

👤 Your Control Over Your Data

You have certain rights regarding your personal information, subject to applicable laws.

Depending on your location, you may have the following rights:

  • Access: Request access to your personal information we hold
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal requirements)
  • Portability: Request a copy of your data in a portable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing for marketing or other purposes
  • Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@auroraflametarot.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

8.1 Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality
  • Performance Cookies: Help us understand how visitors use our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements (with consent)

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

9. Third-Party Services

Our services may integrate with third-party providers:

  • Payment Processing: Stripe (payment data processing)
  • AI Services: OpenAI (reading generation and analysis)
  • Analytics: Google Analytics (website usage analysis)
  • Social Media: Facebook, Google, Instagram (social login and sharing)
  • Hosting: Cloud providers (data storage and processing)

These third parties have their own privacy policies. We encourage you to review them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses approved by relevant authorities
  • Adequacy decisions by relevant data protection authorities
  • Other appropriate safeguards as required by applicable law

11. Children's Privacy

👶 Children Under 13

Our services are not intended for children under 13 years of age.

We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Updating the "Last updated" date at the top of this policy
  • Sending email notifications for significant changes
  • Displaying prominent notices on our website

Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights, please contact us:

  • Business Name: Aurora Flame Tarot
  • Registered in: Australia
  • Privacy Email: privacy@auroraflametarot.com
  • General Email: legal@auroraflametarot.com
  • Website: https://auroraflametarot.com

13.1 Data Protection Officer

For privacy-related concerns, you can also contact our Data Protection Officer at dpo@auroraflametarot.com

14. Legal Basis for Processing (GDPR)

For users in the European Union, we process your personal data based on:

  • Consent: When you explicitly consent to processing
  • Contract Performance: To provide services you have requested
  • Legitimate Interests: To improve our services and ensure security
  • Legal Obligation: To comply with applicable laws and regulations

15. Privacy Complaints

If you have concerns about how we handle your personal information, you have the right to lodge a complaint with:

  • Our Privacy Team: privacy@auroraflametarot.com
  • Relevant Data Protection Authority: In your country of residence
  • Australian Privacy Commissioner: If you are in Australia