Privacy Policy

1. General Provisions

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with their use of the Archeya platform (hereinafter: the "Service").

We value your trust, which is why we ensure that all your data, including sensitive information such as your date of birth (necessary to calculate your Tarot Portrait), is treated with the utmost confidentiality, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Data Controller

The controller of your personal data is Katarzyna Gierałt, conducting unregistered business activity at: ul. Okęcka 7/14, 02-658 Warsaw, Poland, operating within the Archeya platform. Any questions regarding data processing can be directed to the e-mail address: hello@getarcheya.com.

3. What data do we collect and why?

When using the Service, we collect and process the following data:

• Data necessary to provide the service: Name, date of birth (yours and possibly the second person's), e-mail address. The legal basis is Art. 6(1)(b) GDPR (necessity for the performance of a contract).
• Billing and payment data: Processed through secure external payment operators (e.g., Stripe). The legal basis is Art. 6(1)(c) GDPR (legal obligation).
• Communication data: If you contact us via e-mail, we process your e-mail address and the content of the message. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest).
• Marketing (Newsletter): With your explicit consent, we may send you inspiration and educational materials (Art. 6(1)(a) GDPR).

4. Who do we share data with?

Your personal data may be transferred only to trusted third-party entities (so-called processors) to the minimum extent necessary for the functioning of the Service. These include:

• Hosting and database service providers.
• Payment system operators (e.g., Stripe) to process transactions.
• Mailing service providers (for automated delivery of ordered PDF files).
• Accounting offices for accounting purposes.

All collaborating entities guarantee the application of appropriate personal data protection and security measures required by law.

5. Cookies

Our Service uses cookies (small text files stored on your device). They are used for:

• Essential cookies: Ensuring the proper functioning of the site (e.g., remembering your dark/light theme choice, maintaining payment sessions).
• Analytical cookies: (Google Analytics, Vercel Analytics) for analyzing site traffic without identifying specific individuals, which allows us to improve the site.

You can change your browser settings regarding cookies at any time.

6. How long do we keep your data?

We store your data only for the period necessary to achieve the purposes for which it was collected:

• Generated PDF reports and their input data (name, date of birth) are kept for the time needed to process the order and potential complaints (usually up to 30 days).
• Accounting and billing data are stored for 5 years from the end of the calendar year (legal obligation).
• In the case of subscribing to a newsletter, until you withdraw your consent.

7. Your rights

In accordance with GDPR regulations, you have full right to:

• Access your data and request a copy of it,
• Rectify your data if it is incorrect or incomplete,
• Delete your data (the "right to be forgotten"), unless we have a legal obligation to store it longer,
• Restrict processing,
• Portability of data,
• Withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal),
• Lodge a complaint with the supervisory authority if you believe that the processing violates the regulations.

8. Changes to the Privacy Policy

We reserve the right to make changes to the Privacy Policy in connection with the development of Internet technology, changes in the law, or the development of our Service. We will inform about any significant changes in a visible and understandable way on our website.