Privacy Policy

Who I am

I’m Alexandra Macht and I provide educational material with the help of tarot, oracle cards and astrology for the purpose of entertainment and enhancing your self-knowledge. My website address is: https://spiritual-social.com. I use WordPress to host my online shop. Once you book a service through the PayPal Business link provided, any further correspondance regarding your order and the subsequent personal data collected will be handled personally and privately by myself through the use of my shop’s Gmail account.

I require some of your personal data in order to create your birth-chart or transit reports, if you ordered them. To create a birth-chart I would usually require your personal data such as your date of birth, your time of birth and your city of birth. This data will be collected in an email notification from my shop’s password-protected Gmail account and will not be displayed on WordPress at any point or shared with other people, except through the policies generated by Google and my use of their Gmail services. Consent is usually given when you purchase a service from my online shop and through the email in which you sent me the three personal data components required for the creation of the services mentioned above. Once this data has been provided, it will only be used for the creation of the birth-chart and it will be kept in my personal email account until the customer explicitly requests me to delete (if they so wish) or until the closure of my Gmail account.

For any additional questions regarding how you data is stored and collected please contact me at macht.alexandra.georgiana.pfa@gmail.com

Comments

When visitors leave comments on my site, WordPress collects the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment. None of the personal data I collect from you and discussed in the section above, will be visible on WordPress.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you visit the login page, WordPress will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, Worpress will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who I share your data with

In terms of using WordPress, if you request a password reset, your IP address will be included in the reset email.

In terms of the personal data I collect from customers following their booked services from my online shop page, this data is processed through Pay Pal and then through SmartBill to create invoices and receipts. Once collected, your personal data will be kept in my shop’s password-protected Gmail account. However since the email account is hosted by Google it does abide by Google’s data protection and privacy policies, for which I am not accountable. Customers need to be aware and informed that they may need to contact Google if they wish a back-end deletion of their personal data, or if their data continues to be used by Google once I have deleted it from my shop’s Gmail account following the customer’s explicit request.

How long is your data retained

If you leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. For users that register on Worpress (if any), the personal information they provide in their user profile is also stored. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

As mentioned in the ‘Who Am I’ section above, once the personal data in relation to the services above has been provided, it will be used strictly for the creation of the purchased services. However, I may keep your personal data if required by the law (i.e., accounting documents should be held for a period of 5 or 10 years, according to Romanian law) or for our legitimate purposes (such as keeping historical data about the services rendered or in order to defend ourselves in front of relevant authorities, for a period of 3 years). The expiry of such terms will lead to us deleting any personal data we may still hold after you requested the deletion.

What rights you have over your data

According to EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you have the following rights:

– right of access

– right to rectification

– right to erasure of data

– right to restrict processing

– right to data portability

– right to opposition

– right to withdraw consent

– right to lodge a complaint wiht the supervisory authority

You may exercise any of these rights by sending me an e-mail at macht.alexandra.georgiana.pfa@gmail.com, and I will respond to you in maximum 30 days from the receipt of your e-mail. We may request additional data from you if we need to properly identify you.

In terms of the personal I collect for the creation of the purchased services in my online shop, keep in mind that it is optional to send me the data and you can opt out at any time. However, it is essential to know that once the service is booked, I won’t be able to fulfill your order without the forms of personal data I mentioned above. You can write me at macht.alexandra.georgiana.pfa@gmail.com and request that I delete the data I collected for the creation of your service, once your service has been completed. A service is usually complete when you receive a Pay Pal link in your personal email inbox with your ‘shipped’ educational clip or a pdf. with the birth-chart or transit report purchased; this applies to bundle options too.

If you have an account on this site, or have left comments, you can request that WordPress erase any personal data held about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

As mentioned above, I keep your data in the shop’s password-protected Gmail account. I also moderate any comments left on my WordPress pages to make sure comments are respectful and that the site is a safe space for users. If otherwise, comments are deleted. Visitor comments may be checked through an automated spam detection service provided by WordPress.

This policy was last updated on 25/03/2021