Privacy Policy
Last updated: 2 October 2026
Mystic Girl respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who it may be shared with, how long we retain it and the rights available to you under applicable UK data protection law.
By using our website or providing personal information to us, you acknowledge that your information will be handled as described in this Privacy Policy.
1. WHO WE ARE
Mystic Girl provides astrology, tarot, oracle and related personalised services and may also offer physical or digital products.
For the purposes of UK data protection law, the person or business operating Mystic Girl is the controller of personal information collected through this website and our services.
Business: Mystic Girl
Location: United Kingdom
Email: hello@mysticgirl.co.uk
For privacy-related questions or requests, please contact us using the email address above.
2. INFORMATION WE MAY COLLECT
Depending on how you interact with Mystic Girl and which service you purchase, we may collect:
Identity and contact information
Name
Email address
Telephone number, where provided
Billing or delivery information where required
Birth and astrology information
Date of birth
Time of birth
Place of birth
Birth information relating to family members or other individuals where required for a service
Reading and service information
Questions submitted for tarot readings
Information you choose to provide about relationships, family, career or personal circumstances
Information necessary to prepare an astrology or other personalised reading
Additional information voluntarily submitted through our forms
Order and transaction information
Services or products purchased
Order information
Payment status
Transaction records
Payment card information is generally processed directly by the relevant payment provider rather than being stored by Mystic Girl, subject to the payment system used on our website.
Communications
Emails and messages sent to Mystic Girl
Customer-service enquiries
Complaints or feedback
Technical and website information
Depending on your cookie choices and website configuration, this may include:
IP address
Browser and device information
Website activity
Cookie identifiers
Analytics information
Further information is provided in our Cookie Policy.
3. WHY WE USE YOUR INFORMATION
We may use personal information to:
process and manage orders;
provide purchased readings and services;
prepare personalised tarot or astrology material;
calculate and interpret natal charts;
prepare family astrology analysis;
conduct auspicious date analysis;
communicate with you about an order;
deliver completed readings or reports;
provide customer support;
handle complaints, cancellations or refunds;
maintain appropriate business and financial records;
prevent misuse, fraud or security incidents;
operate and improve our website;
comply with legal obligations; and
send marketing communications where we have an appropriate lawful basis to do so.
We will not use personal information for purposes incompatible with those for which it was collected unless permitted or required by law.
4. OUR LAWFUL BASES
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to take steps at your request before entering into a contract or to perform our contract with you.
For example, if you purchase a Natal Chart Analysis, we need your birth information in order to provide the service you ordered.
Legal obligation
Where we need to process information to comply with an obligation imposed by law, including applicable accounting, tax or consumer-law requirements.
Legitimate interests
Where processing is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
This may include maintaining website security, preventing fraud, keeping appropriate business records and dealing with disputes.
Consent
Where we rely on your permission for a particular type of processing, including certain marketing activities or processing that specifically requires consent.
Where consent is our lawful basis, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. SENSITIVE OR SPECIAL CATEGORY INFORMATION
Tarot and astrology questions can sometimes involve highly personal subjects.
You may voluntarily provide information concerning matters such as health, religious or philosophical beliefs, sex life or sexual orientation. Certain information of this kind is classified as special category personal data under UK data protection law.
Please only provide sensitive personal information when it is genuinely relevant to the service you have requested.
Where the law requires an additional condition for processing special category information, Mystic Girl will process such information only where an appropriate condition applies.
Where we rely upon your explicit consent, you may withdraw that consent by contacting us.
We do not require clients to disclose unnecessary sensitive information in order to use Mystic Girl.
6. INFORMATION ABOUT OTHER PEOPLE
Some services, particularly Family Astrology Readings, relationship questions or other personalised readings, may involve information concerning another person.
Please provide only information about another person that is reasonably necessary for the service.
You should avoid providing unnecessary sensitive information about third parties.
Where you provide personal information about another individual, you are responsible for ensuring that you have an appropriate basis for providing that information to us where required.
We will use third-party information only as reasonably necessary to provide the requested service or for another lawful purpose described in this Privacy Policy.
7. CHILDREN’S INFORMATION
Mystic Girl’s paid personalised readings are intended for customers aged 18 or over.
A Family Astrology Reading may nevertheless involve birth information relating to a customer’s child where that information is provided by a parent or person appropriately authorised to request the service.
We do not knowingly invite children to purchase services or independently submit personal information through the website.
8. PAYMENT INFORMATION
Payments may be processed through third-party payment providers integrated with our website.
Those providers may collect and process payment details under their own privacy policies and security procedures.
Mystic Girl generally does not receive or store complete payment-card details where payments are handled directly by the payment provider.
We may retain transaction information necessary for accounting, customer service, refunds, fraud prevention and legal compliance.
9. WHO WE MAY SHARE INFORMATION WITH
We do not sell your personal information.
We may disclose personal information where reasonably necessary to service providers that help us operate Mystic Girl, such as:
website and hosting providers;
payment processors;
email and communications providers;
cloud storage or IT providers;
analytics providers where enabled;
professional advisers where necessary; and
government, regulatory, law-enforcement or judicial authorities where disclosure is legally required.
These organisations may process information on our behalf or as independent controllers depending upon the circumstances.
We seek to limit information shared with service providers to what is reasonably necessary for the relevant purpose.
10. SQUARESPACE
The Mystic Girl website is currently hosted using Squarespace.
Squarespace may process certain personal and technical information in connection with providing website, commerce, analytics, security and related functionality.
Squarespace’s processing of personal information is also subject to its own applicable privacy documentation and contractual arrangements.
11. INTERNATIONAL DATA TRANSFERS
Some service providers used to operate our website or business may process information outside the United Kingdom.
Where personal information is transferred internationally, we will rely on an appropriate mechanism or safeguard where required by applicable data protection law.
You may contact us if you would like further information about safeguards applicable to relevant international transfers.
12. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, handling enquiries or disputes and satisfying legal, accounting and tax obligations.
Different categories of information may therefore have different retention periods.
For example, transaction and accounting records may need to be retained for longer than information that is only necessary to prepare a reading.
When personal information is no longer reasonably required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
13. SECURITY
We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, email system or electronic storage method can be guaranteed to be completely secure.
Clients should therefore avoid submitting personal information that is unnecessary for their reading or service.
14. MARKETING
We may send promotional emails or other direct marketing where permitted by applicable law.
Where consent is required, we will obtain it before sending such communications.
You may unsubscribe from marketing communications at any time using the unsubscribe option provided in the communication or by contacting us.
Stopping marketing communications will not prevent us from sending necessary communications concerning an existing order or service.
15. COOKIES AND ANALYTICS
Our website may use cookies and similar technologies for functions such as website operation, security, preferences and analytics.
Where consent is legally required for non-essential cookies or similar technologies, they should not be activated until the appropriate consent has been obtained.
Further information is available in our Cookie Policy and through the website’s cookie consent controls.
16. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and applicable law, you may have rights relating to your personal information, including the right to:
request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your information in certain circumstances;
request restriction of processing in certain circumstances;
object to certain processing;
request portability of certain information;
withdraw consent where processing is based on consent; and
complain about how your personal information has been handled.
These rights are not absolute and may be subject to legal exceptions.
To exercise a data protection right, contact:
hello@mysticgirl.co.uk
We may need to verify your identity before responding to a request.
YOUR RIGHT TO OBJECT
Where we process your personal information on the basis of legitimate interests, you may have the right to object to that processing.
You also have the right to object at any time to the use of your personal information for direct marketing.
17. COMPLAINTS TO THE ICO
If you have concerns about how Mystic Girl handles your personal information, please contact us so that we can try to resolve the issue.
You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Information Commissioner's Office
Information about raising a data-protection complaint is available directly from the ICO.
18. AUTOMATED DECISION-MAKING
Mystic Girl does not use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.
Interactive features such as Ask the Oracle are provided as reflective or entertainment experiences and do not make legally significant automated decisions about users.
19. LINKS TO OTHER WEBSITES
Our website may contain links to third-party websites.
Mystic Girl is not responsible for the privacy practices of independent third-party websites.
You should review the privacy information provided by those websites before submitting personal information to them.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes to our services, technology, business practices or legal requirements.
Where appropriate, significant changes will be brought to users’ attention.
The date at the top of this page indicates when this Privacy Policy was last updated.
21. CONTACT US
For questions about this Privacy Policy or the way Mystic Girl handles personal information, please contact:
Mystic Girl
Email: hello@mysticgirl.co.uk
United Kingdom