Privacy Policy

Last updated: 1st October 2025

​

The Tarot Bear (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, and safeguard your information when you use our website thetarotbear.com.

 

1. Who we are

The Tarot Bear is operated by Martin Byrne

For any privacy-related queries, you can contact us at: martin@thetarotbear.com

We are the “data controller” of the personal information collected through this website.

 

2. What information we collect

We may collect the following types of information:

• Contact details – name, email address, billing address, phone number (if provided).
   

• Transaction details – purchase history, receipts, and payment confirmations.
   

• Tarot consultations – any private information you share as part of a reading (held securely and typically deleted within one year).
   

• Marketing sign-ups – email address and any preferences you provide.
   

• Technical data – automatically collected by Wix (such as IP address, browser type, and device information).

 

3. How we use your information

We use your personal information for the following purposes:

• To process and fulfil your purchases.
   

• To send confirmations, receipts, and booking details.
   

• To request reviews via Trustpilot following a purchase.
   

• To deliver email newsletters, insights, and updates (with your consent).
   

• To follow up with occasional service messages.
   

• To comply with legal and financial obligations.
   

 

4. Legal basis for processing

Under UK GDPR, we rely on:

• Contract – to process your order or provide a consultation.
   

• Consent – when you sign up to receive marketing emails (you can withdraw at any time).
   

• Legitimate interests – such as requesting a review after a purchase.
   

• Legal obligation – for tax and record-keeping.
   

 

5. Sharing your data

We do not sell, rent, or trade your data. However, we do share your data with trusted third parties where necessary to provide our services:

• Wix – website hosting and payment platform.
   

• Wix Payments / Stripe – to process transactions securely.
   

• Trustpilot – to invite you to leave a review after making a purchase (your name and email may be shared). Trustpilot acts as an independent data controller – you can read their privacy policy at [link].
   

• Email marketing service (via Wix or other provider) – for managing email sign-ups and sending newsletters.
   

All data is processed securely, and some providers may transfer data outside the UK under standard safeguards.

 

6. Data retention

• Transaction data: kept for the legally required period (6 years in the UK).
   

• Tarot consultation notes: securely stored, deleted within 12 months.
   

• Marketing data: retained while you remain subscribed. Inactive subscribers (no interaction) are removed at least twice per year.
   

• All other data: kept only as long as necessary for the purpose collected.
   

7. Security

We take data security seriously and use the following measures:

• SSL-secured website.
   

• Two-factor authentication on all platforms.
   

• Biometric device protection.
   

• Access restricted to the business owner only.
   

8. Your rights

You have the following rights under UK GDPR:

• The right to access your data.
   

• The right to correct inaccuracies.
   

• The right to request deletion.
   

• The right to restrict or object to processing.
   

• The right to data portability.
   

• The right to withdraw consent at any time.
   

• The right to lodge a complaint with the Information Commissioner’s Office (ICO).
   

To exercise your rights, contact us at martin@thetarotbear.com

 

9. Cookies

Our site uses cookies for essential functionality and to evaluate site performance and improve our content. 

 

10. Updates to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with a new “last updated” date.