1. Who We Are

The Silver Mystic is a sole trader providing spiritual guidance services including tarot readings, rune readings, palmistry, spirit guidance, aromatherapy, alchemical spells, and life coaching, as well as an online shop selling related products.

Data Controller: The Silver Mystic
Email: privacy@thesilvermystic.com
Website: thesilvermystic.com

2. Information We Collect

We may collect and process the following personal information:

Information you provide directly

• Contact enquiries — your name, email address, and the content of your message when you use our contact form
• Booking requests — your name, email address, preferred session type, and any details you share to prepare for a reading or coaching session
• Shop orders — your name, billing and delivery address, email address, and phone number when you place an order
• Payment information — processed securely by our payment provider; we do not store card details

Information collected automatically

• Usage data — pages visited, time spent on site, referral source, browser type, and device information, collected via Google Analytics (with your consent)
• Cookies — see our Cookie Policy for full details

3. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and booking requests
• To deliver the services or products you have requested
• To process and fulfil shop orders, including sending order confirmations and dispatch notifications
• To handle returns, refunds, and complaints
• To send you information about your booking or order
• To improve the website and our services using anonymised analytics data
• To comply with our legal obligations

We will only contact you with promotional or marketing messages if you have given us explicit consent to do so.

4. Our Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Contract — processing your order or booking and delivering the service you have requested
• Legitimate interests — responding to enquiries, improving the website, and operating a secure service
• Legal obligation — retaining transaction records as required by law (e.g. HMRC)
• Consent — analytics cookies and any marketing communications

5. Sharing Your Information

We do not sell or rent your personal information. We may share it with the following third parties only where necessary:

• Payment processors — to securely handle card transactions
• Delivery and postal services — to fulfil physical product orders
• Email service providers — to send transactional emails such as booking confirmations and order updates
• Analytics providers — Google Analytics (anonymised, with your consent)

All third parties are required to handle your data securely and in accordance with applicable data protection law.

6. How Long We Keep Your Data

• Enquiries and bookings — retained for up to 2 years, then securely deleted
• Order records — retained for 7 years in line with HMRC requirements
• Analytics data — retained in accordance with Google Analytics' data retention settings (default 26 months)

7. Your Rights

Under UK data protection law, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data where there is no legitimate reason to continue holding it
• Restriction — ask us to restrict processing of your data in certain circumstances
• Portability — receive your data in a structured, commonly used format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@thesilvermystic.com. We will respond within one month.

8. Keeping Your Data Secure

We take reasonable technical and organisational steps to protect your personal information from unauthorised access, loss, or misuse. Our website uses HTTPS encryption. Payment information is handled entirely by our payment provider and is never stored on our systems.

9. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "last updated" date. We encourage you to review this page periodically.

11. Contact & Complaints

If you have any questions about this policy or how we handle your data, please contact us:

The Silver Mystic
Email: privacy@thesilvermystic.com

You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).