Privacy Policy

Welcome to https://onlinetarot.net/ ("we," "us," or "our"). We value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website https://onlinetarot.net/, use our services, or interact with our content. Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

Who We Are

GROWTHFACTORY MARKETING – FZCO is a company registered in Dubai, UAE, offering AI-powered Tarot reading services. Our mission is to provide personalized Tarot readings, guidance, and insights based on advanced artificial intelligence, designed to help you on your spiritual journey.

We respect your privacy and are committed to ensuring that your personal information is handled securely and in compliance with applicable privacy laws. These include the General Data Protection Regulation (GDPR) in the European Union, the UK General Data Protection Regulation (UK GDPR) as retained in UK law, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, the California Consumer Privacy Act (CCPA), and other U.S. state-specific privacy laws such as the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and similar regulations.

We continuously monitor relevant legislation across jurisdictions to ensure that our privacy practices remain aligned with current legal standards and best practices globally.

1. INFORMATION WE COLLECT

To provide you with the best possible experience, we gather different types of personal information. Below is an overview of the categories of data we collect, why we collect them, and how we obtain them:

Category	Examples	Purpose	Source
User Account Details	Full name, birthdate, zodiac sign, place of birth, if provided as part of specific readings or features	Account creation and delivering tailored services	Provided directly by users
User Content	Photos (such as Tarot spreads), messages sent by users	Enabling Tarot reading services	Uploaded by users or captured via device
Contact Details	Name, email address	Customer support and sending newsletters	Provided directly by users
Usage Information	IP address, browsing activity, timestamps, site interactions	Understanding how users engage to improve services	Collected automatically during site visits
Transaction Details	Purchase records	Processing orders and verifying payments	Supplied by payment service providers (e.g., Stripe, PayPal)
Device Information	Device type, OS, browser	Ensuring proper site functionality and security	Collected automatically
Location Data*	Approximate geographic location, user region	Personalizing services (including language) and complying with legal obligations	Obtained only if location sharing is enabled by the user

*Please note that location data is collected only if you have allowed location access on your device.

Sensitive Data

We do not collect sensitive personal information such as social security numbers, financial details, or biometric data, except where legally required or necessary for operational purposes. However, we may request certain personal information, such as your date and place of birth, as part of select features or readings offered on the Website. This information is used solely to enhance the accuracy of our services and is handled in accordance with applicable privacy laws.

2. HOW WE USE YOUR INFORMATION

We use the personal and non-personal information we collect to deliver and improve our services, provide personalized experiences, and maintain effective communication with our users. Specifically, we use your information for the following purposes:

• To Provide and Manage Services: We use your data to create and manage your account, deliver Tarot readings, personalize your experience based on your preferences, and respond to your requests or inquiries.
• To Improve Our Platform: Information about your usage helps us analyze how users interact with our website and services, enabling us to enhance functionality, fix issues, and develop new features.
• To Communicate with You: We may use your contact information to send important updates, respond to your questions, provide customer support, and, if you consent, send newsletters or promotional materials.
• To Process Transactions: Your transactional data is used to handle purchases, verify payments, and fulfill orders securely.
• To Comply with Legal Obligations: We may use or disclose your information as required by law, regulation, or legal process.
• To Protect Our Rights and Users: We may use data to detect, prevent, and address fraud, security breaches, or other harmful activities.
• To Send Marketing Communications: Subject to your explicit consent, we may use your contact information to send you relevant updates, promotional offers, and product information tailored to your interests. You may withdraw your consent and opt out of receiving marketing messages at any time by contacting us at contact@onlinetarot.net.

3. TRACKING TECHNOLOGY CHOICE

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze usage, and personalize content. Most browsers accept cookies by default, but you can modify your browser settings to decline or delete them. Please note that these settings must be adjusted separately for each browser you use, and the extent of control depends on your browser's capabilities.

Some browsers offer "Do Not Track" signals to request that websites disable tracking. However, since there is no universal industry standard on how to handle these signals, we currently do not change our tracking practices in response to them. For more information on Do Not Track, please visit allaboutdnt.com.

Disabling or removing cookies and tracking technologies may affect certain features of our Website, potentially limiting your user experience.

Additionally, our Website includes social media widgets for sharing readings and other content. These widgets may set their own cookies, which are governed by the respective social media platforms' privacy policies.

4. SHARING OF INFORMATION

We do not sell your personal information. However, we may share it with the following parties under specific circumstances:

• Service Providers: Agents and vendors assisting with analytics, marketing, hosting, and technical support. They use your data only to provide these services, with strict privacy obligations.
• Affiliates: Related companies, including parent and sister companies, for customer support, marketing, and operations.
• Business Partners: Partners offering co-branded services, joint promotions, or product support.
• Third Parties: For facilitating your requests (e.g., social media sharing), improving our services and advertising, and other enhancements.
• Corporate Transactions: In connection with mergers, acquisitions, sales, or transfers of our business or assets.
• Legal and Security: To comply with laws, legal requests, or to protect rights and safety of users, the service, or others.
• Consent: Any other sharing with your explicit consent.

We may also share aggregated or de-identified data that does not identify you.

Our Website includes integrations with third-party services that operate under their own privacy policies. These services may include analytics tools (such as Google Analytics and Google Tag Manager), payment processors (such as Stripe), artificial intelligence providers (such as OpenAI), advertising and tracking tools (such as Meta Pixel), and font services (such as Google Fonts).

Using certain features of the Website may involve the transfer of data to these third parties, in accordance with their respective privacy practices. We encourage you to review the privacy policies of these providers before using relevant features.

5. SECURITY MEASURES

We employ industry-standard security measures to safeguard your personal information and ensure its confidentiality, integrity, and availability. Our protections include:

• Encryption: We use strong encryption protocols (such as TLS) to protect data during transmission and encrypt sensitive information at rest.
• Access Controls: Access to personal data is strictly limited to authorized personnel based on the principle of least privilege, using multi-factor authentication (MFA) where applicable.
• Regular Security Audits and Testing: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and address potential risks.
• Data Minimization and Anonymization: We limit the collection and retention of personal data to what is necessary and apply anonymization or pseudonymization techniques when possible.
• Incident Response: A dedicated security team monitors systems continuously and has established procedures to promptly respond to data breaches or security incidents.
• Secure Development Practices: Our software development follows secure coding standards and undergoes regular code reviews to reduce vulnerabilities.
• Compliance: We adhere to relevant industry standards and regulations, such as GDPR and CCPA, to ensure proper data protection practices.

While no system can be guaranteed 100% secure, we are committed to maintaining the highest level of security to protect your information.

6. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to supporting and respecting these rights, which typically include:

• Right to Access: You can request confirmation whether we process your personal data and obtain a copy of that data.
• Right to Correction: You have the right to request correction or update of inaccurate, incomplete, or outdated personal information we hold about you.
• Right to Deletion ("Right to be Forgotten"): You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent and there is no other legal basis for processing.
• Right to Restrict Processing: You can request us to limit the processing of your data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or on grounds relating to our legitimate interests.
• Right to Data Portability: Where applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and request its transfer to another data controller.
• Right to Withdraw Consent: If our processing is based on your consent, you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: You have the right to file a complaint with a relevant data protection authority if you believe your privacy rights have been violated.
• Right to Opt-Out of Targeted Advertising: You have the right to opt out of the use of your personal data for targeted advertising and other data processing related to marketing.

To exercise any of these rights, please contact us using the details provided in the Contact Us section. We may require you to verify your identity before processing your request to protect your privacy and security.

Please note that some of these rights may be subject to certain exceptions or limitations under applicable law.

7. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

The specific retention period depends on the type of data and the context of its collection. When your data is no longer needed, we securely delete or anonymize it.

In some cases, we may retain certain information for longer periods if required by law or to protect our legitimate interests, such as preventing fraud or ensuring security.

If you have any questions about our data retention practices or wish to request deletion of your data, please contact us using the information provided in the Contact Us section.

8. CHILDREN'S PRIVACY

Our Website and Services are not intended for use by children under the age of 18 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal data from a child under the applicable age, we will take prompt steps to delete such information.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately using the details in the Contact Us section.

9. CALIFORNIA RESIDENT PRIVACY RIGHTS

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• Right to Notice: You have the right to be informed about the categories of personal information we collect and the purposes for which it is used.
• Right to Access: You may request disclosure of our collection, use, sale, and sharing practices regarding your personal information.
• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the purposes for which we use it, and the third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions under the law.
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information for targeted advertising purposes. We do not sell your personal information, but we may share it as described in this policy.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correction: You may request correction of inaccurate personal information we have collected. Upon verification, we will make reasonable efforts to correct your data unless an exception applies.
• Right to Limit Use of Sensitive Personal Information: You may request limits on the use or disclosure of certain sensitive personal information, subject to exceptions.

To exercise these rights, California residents can submit a verifiable consumer request by contacting us through the details provided in the Contact Us section.

10. COOKIES POLICY

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content.

What Are Cookies?

Cookies are small text files stored on your device by your browser. They help websites recognize your device and remember preferences or actions.

Types of Cookies We Use:

• Essential Cookies: Necessary for the website's basic functions and security.
• Performance Cookies: Collect anonymous data on how visitors use the site to help improve its performance.
• Functional Cookies: Remember your preferences and settings for a better experience.
• Advertising Cookies: Used to deliver relevant ads and track ad performance.

Service	Purpose	Data Collected	Cookie Type
GTM (Google Tag Manager)	Manages website tags and integrates third-party services (analytics, marketing, etc.).	Website interactions, user behavior, technical data.	Functional / Analytics
Stripe	Payment processing, fraud prevention, managing transactions and subscriptions.	Payment data, user session, IP address, user ID.	Strictly Necessary
OpenAI	Processing user requests and generating AI-based content.	User requests, chat context, browser technical data.	Functional
Google Fonts	Serving web fonts and improving website performance.	IP address, browser information, device type.	Functional / Strictly Necessary
Meta Pixel	Conversion tracking, retargeting ads, analyzing marketing campaigns.	Page views, clicks, IP address, device data.	Marketing / Targeting

Managing Cookies:

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality and your user experience.

For more information about cookies and how to manage them, visit aboutcookies.org.

11. LEGAL BASES AND LEGITIMATE INTERESTS FOR PROCESSING

We process your personal information based on one or more of the following legal bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose.
• Performance of a Contract: To fulfill our contractual obligations to you, such as providing services you request.
• Legal Compliance: To comply with applicable laws, regulations, or legal obligations.
• Legitimate Interests: To pursue our legitimate business interests, such as improving our services, enhancing security, preventing fraud, and communicating with you, provided that such interests do not override your fundamental rights and freedoms.
• Vital Interests: To protect your life or safety or that of others in urgent situations.

We carefully balance our legitimate interests with your privacy rights and implement safeguards to ensure your data is processed fairly and transparently.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

When we make significant changes, we will notify you by updating the date at the top of this policy and, where appropriate, by providing additional notice through our Website or via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

Your continued use of our Website and Services after any changes indicates your acceptance of the updated Privacy Policy.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@onlinetarot.net

We strive to respond to all inquiries promptly and address your privacy concerns with care.