We respect your privacy and are committed to protecting it as you use our products and services. The purpose of this policy is to inform you how we may collect and use your information in order to be GDPR compliant. We want you to know we’ve got your back in keeping your personal data safe. This privacy policy applies to tarotaf.com.

This privacy policy also applies to mobile applications and desktop clients and is applicable worldwide.

As used in this Privacy Policy, ”Personal Data“ means any information that can be used to individually identify a person, and may include, but is not limited to, name, email address, phone number, postal or other physical address, title, and other personally identifiable information. This policy and all its aspects may be amended at any time, at our sole discretion. The most current policy is available here.

What Information do we collect?

In general, Tarot AF (Anna Franek) rarely retains anything more than a client’s name and email in most cases. Unless purchasing a physical product, then we collect your shipping address as well. With that said, our servers may collect some or all of the following categories of Personal Data about you when you use or otherwise interact with us and/or purchase our products or services.

• Name
• Email address
• General website traffic statistics that are automated through Google Analytics

How do we collect your personal data?

We collect and/or process your Personal Data in connection with the any of the below activities:

1. You may voluntarily submit it…

• To our website through a contact form
• When purchasing a product or service
• Via email through conversation (Such as when someone wins a free tarot reading giveaway and they provide their Zoom username for the session)
• In person such as via a physical sign up sheet, raffle, etc. at events or workshops
• Placing transactions or orders
• Registering to attend a course, workshop, or event
• Participating in an online survey

2. You may submit your personal data to other third party sources that we use including…

Payments for event tickets, products, and courses/workshops are made through Stripe. Stripe has top notch security. It's known for being one of the most secure payment gateways and is PCI Service Provider Level 1 certified and safe for online transactions for businesses and individuals. By using Stripe on our website, the credit card data entered into the payment during check-out is never sent to our servers. Instead, the data is sent directly to Stripe and stored with them. We don't touch or handle any sensitive credit card data on our servers. This makes things much more secure, because if a breach of our servers ever occurred, it would not result in any stolen credit card data.

We use Calendly as our session booking platform.

3. We may automatically collect the following data about you and/or your device as you browse our website…

We may use Google Analytics for general user activity information on our website, which allows us to provide the best service and products relative to our niche. This helps us know what pages on our website are visited the most and key tag words those using our website are most interested in so we can better provide applicable services and products.

How and for what purpose is the personal data used?

For contact, transaction and delivery of products and services

For marketing, promotional and advertising purposes (only when you've given permission)

To collect and process analytical data that better helps us provide relevant services and products to those who visit our website.

How do we store your data?

Via third parties Google Analytics, Stripe and Calendly.

How long is it stored?

Your personal data is stored until we delete it, no longer have a use for it or at your request to have it removed.

How is my information used with third parties?

Your information is only used with third parties (ie. Stripe payments) when you clearly authorize us to do so.

We do not and will never sell, share nor trade your personal data with third parties outside of the basic functioning of our website and provider of services/products.

Your Rights:

If you want to have your information amended or permanently removed, simply contact us at anna@tarotaf.com with your specific request (using Re: Privacy Policy as the subject line). You can also request that we access and send you the information we have collected about you.

Data Breach:

Legally we have 72 hours to let you know if your data is part of an unforeseen data breach.