Privacy Policy

Draft template — pending review before launch.

This page is standard template text and must be reviewed and completed by the operator before it is relied upon.

1. Controller

The data controller is Pashur Oy (Business ID / Y-tunnus [PASHUR: FILL Y-TUNNUS]), [PASHUR: FILL ADDRESS]. For any privacy question, contact [PASHUR: FILL CONTACT EMAIL].

2. What we collect, and why

• The free reading: you can draw a free reading without giving us any personal details. We record the draw itself (the drawn number, timestamp and sky data) to operate the Service; this is not linked to your identity.
• Your email address — only when you buy or are gifted a reading — to process the order, deliver your reading, and send the order confirmation.
• Your birth data (birth date, and if you provide them, birth time and birthplace) — only when you buy a reading, and used solely to generate that reading. We do not use it for profiling or advertising.
• Minimal technical logs (such as IP address and request time) needed for security, abuse-prevention and to keep the Service running.

3. What we do not do

We do not sell your personal data. We do not run advertising trackers or third-party ad-profiling on this site, and the free draw sets no tracking cookies.

4. Legal bases

We process order email and birth data to perform our contract with you (delivering the reading you requested). We process minimal technical logs on the basis of our legitimate interest in a secure, functioning service, and where required, to comply with legal obligations (e.g. tax/accounting records for purchases).

5. Who processes data on our behalf

• Hosting/infrastructure provider (to run the Service).
• Payment provider (Stripe) — to take payment when purchases go live; they receive the data needed to process your payment under their own privacy terms.
• Email delivery provider — to send your order confirmation and reading link.

[PASHUR: confirm the exact processors and add their names before launch.]

6. Retention

We keep order records for as long as required by law (e.g. accounting obligations) and birth data only as long as needed to deliver and re-issue your purchased reading, after which it is deleted or anonymised. [PASHUR: set concrete periods.]

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to certain processing. To exercise any of these, contact us at the address above. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu).

8. International transfers & security

Where a processor operates outside the EEA, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses). We take reasonable technical and organisational measures to protect your data.