1. Who is responsible for your data?
The data controller and service provider is Justas Korsakas, sole trader (individual activity no. 1120240), Ažuolyno g. 1–11, Kaunas, Lithuania. For anything to do with privacy or your order, e-mail hello@tarotlumira.com or call +370 679 85231.
2. What data do we process?
- your first name, date of birth, the cards you chose and the reading you selected;
- your e-mail address, if you give it to us, and any messages you send us;
- your order number, price, currency, payment method and payment status;
- your IP address, technical information about your browser and device, and security logs;
- with your consent only — analytics and advertising identifiers and events showing how the site is used.
We never receive or store your online banking login details or your payment card details.
3. Why do we use your data, and on what legal basis?
- To perform our contract with you: to take your payment, create and deliver your personal digital entertainment content, and help you if you need support.
- To meet our legal obligations: to keep payment and accounting records and to respond to lawful requests from authorities.
- For our legitimate interests: to prevent fraud, keep the service secure, investigate faults and defend against legal claims.
- With your consent: to use optional analytics tools, the Meta Pixel and personalized ad measurement. You can withdraw your consent at any time.
4. Who do we share your data with?
Only where strictly necessary, your data may be shared with our hosting, technical support and e-mail providers, our accountants and our payment provider, Stripe.
Payments are handled by Stripe Payments Europe, Limited (Ireland). Stripe processes payment and transaction data (such as your e-mail address, the amount and your card details) as an independent controller in order to process the payment, prevent fraud and meet legal requirements. You can read more in Stripe’s privacy policy.
If you accept advertising or analytics cookies, technical event data may be shared with Meta Platforms Ireland Limited and, if the tool is enabled, Google Ireland Limited. Where data is transferred outside the EEA or the UK, the safeguards required by law are applied.
5. How long do we keep your data?
- order and accounting data — up to 10 years, where the law requires it;
- data needed to give you access to your personal reading — for as long as it is needed to provide the service, let you open your reading again and handle any complaints;
- messages and complaints — up to 3 years after the matter is resolved;
- security records — for a reasonable period, only as long as necessary;
- consents and advertising identifiers — until you withdraw your consent or the period set for the tool in question ends.
6. Your rights
You can ask to access, correct or delete your data, or to restrict how it is processed. You can object to processing based on our legitimate interests, withdraw your consent and, where applicable, receive a copy of your data. To protect your data, we may ask you to confirm your identity or your order first.
If you have a concern, please contact us first — we will do our best to put things right. You also have the right to complain to a data protection supervisory authority, for example the authority in the country where you live (in the UK, the Information Commissioner’s Office).
7. Automated processing and the nature of the service
This site provides personalized entertainment content based on the choices you make. It has no legal effect or similarly significant consequences for you, and it is not a substitute for professional medical, legal, financial or psychological advice.