Cosmic Connection — Privacy Policy

Last updated: 1 January 2026

Cosmic Connection ("we", "us", "our") is operated by Andreia Hamer, of Unit 170705, PO Box 7169, Poole, BH15 9EL. You can contact us about this policy at [email protected]

This policy explains how we collect, use, store, and protect your personal data when you visit cosmic-connection.com, book or attend a Soul Session, Astrology, or Moonology reading, purchase a digital sacred journal or other product, subscribe to our emails, or otherwise interact with us — including through our social media platforms.

We are the "data controller" of your personal data for the purposes of UK GDPR and the Data Protection Act 2018, and, where applicable, EU GDPR.

1. What Personal Data We Collect

Depending on how you interact with us, we may collect:

Contact details — name, email address, phone number.

Booking & session information — date/time of birth, place of birth, and other details you choose to share for the purpose of an astrology, Moonology, or energy-work reading; notes or context you provide before or during a Session.

Payment information — processed by our third-party payment provider Stripe; we do not store full card details ourselves.

Account & communication data — messages you send us, enquiries, testimonials you choose to share.

Technical & usage data — IP address, browser type, device information, and pages visited, collected via cookies and similar technologies (see Section 6).

Marketing preferences — whether you've opted in to receive emails, and your engagement with those emails.

Session content (what is discussed during a reading) is treated as confidential, in line with our Terms & Conditions, and is not shared outside our business except where legally required.

2. How We Use Your Data (and Our Lawful Basis)

We use your personal data for the following purposes, on the following lawful bases:

Booking and delivering a Session or Digital Product — on the basis of performance of a contract with you.

Processing payment — on the basis of performance of a contract with you.

Responding to enquiries — on the basis of performance of a contract, or our legitimate interests in providing good customer service.

Sending marketing emails (newsletters, offers) — on the basis of your consent.

Improving our website and services — on the basis of our legitimate interests in running and developing our business.

Complying with legal and tax obligations — on the basis of legal obligation.

Safeguarding disclosures, as described in our Terms & Conditions — on the basis of legal obligation or the vital interests of you or another person.

Where we rely on consent (e.g. email marketing), you may withdraw it at any time — see Section 7.

3. Sharing Your Data

We do not sell your personal data. We share it only with:

Service providers who help us run our business, such as our booking/CRM and email-automation platform, our website host, and our payment processor (GoHighLevel). These providers only process data on our instructions and under a data processing agreement.

Our productivity/workspace tools (Notion), used internally to organise business operations—not for external marketing.

Legal or safeguarding authorities, where required by law or necessary to protect someone's safety.

A future buyer or successor, if Cosmic Connection is ever sold or restructured, subject to the same protections in this policy.

4. International Data Transfers

Some of our service providers (for example, aspects of GoHighLevel or our payment processor) may store or process data outside the UK/EEA. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfer to a country with an adequacy decision.

5. Data Retention

We keep personal data only as long as necessary for the purposes described above — typically:

Session and booking records: 6 years retention period, to meet UK tax/accounting requirements.

Marketing email data: until you unsubscribe or withdraw consent

Enquiry correspondence: 1 year

6. Cookies

Our website uses cookies and similar technologies to operate correctly, understand site usage, and (where you consent) support marketing. You can control or disable non-essential cookies through the cookie banner on our site or your browser settings.

7. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you

Rectify inaccurate or incomplete data

Erase your data ("right to be forgotten"), subject to legal exceptions

Restrict or object to certain processing

Data portability, where technically feasible

Withdraw consent at any time, for processing based on consent (e.g. unsubscribe from marketing emails via the link in any email, or by contacting us)

To exercise any of these rights, contact us at [email protected]. We will respond within one month, as required by law.

8. Children

Our Services are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on the security measures of our reputable third-party providers.

10. Complaints

If you're unhappy with how we've handled your data, please contact us first at [email protected] so we can try to resolve it. You also have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113

If you are based outside the UK, you may also have the right to complain to your local data protection authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The version published on our website is the one currently in effect.

By using cosmic-connection.com or engaging our Services, you acknowledge that you have read and understood this Privacy Policy.