Template for review — complete the [bracketed] details and have it checked before launch.
Privacy Policy
Last updated: 22 July 2026
This policy explains what personal data Star & Stone (“we”) collects, why, and your rights under the EU General Data Protection Regulation (GDPR). The data controller is [Company legal name], [registered address], [country], contact [privacy@yourdomain.com].
What we collect
- Birth data you enter — date, and optionally time and place — used to compute your chart and write your reading.
- Your email and billing country, collected at checkout to deliver your order and meet tax obligations.
- Order records — what you bought, and the resulting reading and any prints.
- Basic technical data needed to operate and secure the site.
Why we use it (legal bases)
- To provide the reading and prints you purchased — performance of a contract.
- To take payment and issue invoices/VAT — legal obligation.
- To secure the service and prevent abuse — legitimate interests.
- Any analytics or marketing tags run only with your consent, which you can withdraw at any time.
Who processes it
We use a small number of processors, each under a data-processing agreement:
- Stripe — payments, tax, and invoicing.
- Anthropic — text processing used to prepare your reading from your computed chart.
- [Resend/your email provider] — transactional email.
- [Your hosting provider] — where the application and data are hosted ([region]).
We do not sell your personal data. Your reading lives at a private, unguessable link that is not indexed by search engines.
How long we keep it
Order and invoice records are kept as long as tax law requires ([e.g. 10 years in Lithuania]). Your reading and birth data are kept so you can return to your permanent link; you may ask us to delete them at any time (subject to the records we must retain for accounting).
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing, and you may lodge a complaint with your supervisory authority (in Lithuania, the State Data Protection Inspectorate / Valstybinė duomenų apsaugos inspekcija). To exercise any right, email [privacy@yourdomain.com].
Cookies & tracking
Essential cookies keep the site working. Any analytics or advertising technologies are loaded only after you consent through our cookie banner, and are described there. [Complete this section to match your deployed tags.]