Privacy Policy

Last updated: June 2026

1. Data controller

• Controller: Blooming Dunes Marketing FZCO
• License: No. 64254
• Address: IFZA Business Park, Dubai Silicon Oasis, UAE
• Email: [email protected]

2. Data we collect

We collect the following data when you use our services:

• Email address: when you voluntarily subscribe to receive your reading by email.
• Reading data: the selected cards and the type of spread are stored to generate your result and allow you to access it later.
• Life Reading data: if you use the "Life Reading" section, we collect your date of birth and the information you provide in the form (life stage, occupation, relationship status, challenges and the free text you choose to write). That free text may contain personal or sensitive data that you choose to share; you provide it voluntarily. It is stored to generate your reading and allow you to access it.
• Palm Reading data: if you use the "Palm Reading" feature (palmistry), we collect the photograph of your palm that you upload and the data you indicate (hand, age range and gender). The image of a palm may be considered a special category of data, so we only process it with your express consent (the box you check before uploading the photo). Upon receiving it, we remove its metadata (EXIF). The image and its analysis are stored privately —they are never public— to generate your reading, allow you to return to it and improve the service. You may request its deletion at any time by writing to us at [email protected]. We do not carry out biometric identification of persons.
• Payment data: when you purchase the full "Life Reading", the payment is processed through Stripe. Your card details are collected and held directly by Stripe; we do not see or store them. We only keep information associated with the transaction (a payment identifier, the amount, the date and the email address you provide to receive the reading).
• Technical data: IP address, browser type, device and operating system, collected automatically for analytical and security purposes.

3. Purpose of processing

Your data is used to:

• Generate and store the tarot readings you request.
• Generate and store your "Life Reading" from the form data.
• Process the payment and give you access to the full "Life Reading" when you decide to purchase it.
• Send you your reading by email if you request it.
• Improve the operation and user experience of the site.
• Anonymous statistical analysis of the use of the service.

4. Legal basis

The processing of your data is based on:

• Consent: by voluntarily providing your email to receive communications, and by checking the acceptance box before generating a "Life Reading".
• Performance of a contract: to process the payment and deliver the full "Life Reading" that you purchase.
• Legitimate interest: for technical analysis and improvement of the service.

5. Data retention

Reading data is retained indefinitely to allow future access. The data from the "Life Reading" form, including the free text, is retained to allow you to access your reading and, where applicable, complete it; you may request its deletion at any time. Emails are retained until you request their deletion.

6. Disclosure of data to third parties

We do not sell or share your personal data with third parties, except:

• Web hosting providers necessary for the operation of the service.
• Artificial intelligence services to generate the interpretations: Google Gemini for the tarot spreads (without transmitting identifiable personal data) and OpenRouter and its model providers (such as Anthropic) for the "Life Reading". In the "Life Reading", the content of the form —including the free text you write— is transmitted to these providers in order to generate your reading; for this reason, we recommend that you not include data you do not wish to be processed. In the "Palm Reading", the photograph of your palm is transmitted to Google Gemini to analyze the lines and generate the reading.
• Payment gateway: Stripe processes the payments for the full "Life Reading". Stripe handles your card and transaction data in accordance with its own privacy policy.
• Email delivery service: Resend, to send you by email the reading you request.
• When required by law or a competent authority.

7. Your rights

You may exercise the following rights by contacting us at [email protected]:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure of your data.
• Objection to processing.
• Portability of your data.

8. Security

We apply technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encryption of communications via HTTPS.