Privacy Policy

1. Who We Are

SophieSkyStudio (the "Studio", "we", "us") operates the website at sophieskystudio.com and provides hand-written psychic readings and witchcraft ritual reports delivered as private PDFs.

For the purposes of the California Consumer Privacy Act (CCPA / CPRA), the EU and UK General Data Protection Regulation (GDPR / UK GDPR), and Türkiye's Law on the Protection of Personal Data No. 6698 (KVKK), the Studio is the data controller of the personal information described in this Policy.

Contact: sophieskystudio@gmail.com

2. Information We Collect

We collect only what is necessary to deliver your reading or ritual report. We do not sell your personal information.

2.1 Information you provide

• Order details: first name, date of birth, the email address where the PDF will be sent, and the optional context or "situation" text you write into the personalisation fields.
• If applicable: the first name and (optionally) the date of birth of the person of interest for the reading.
• Communications: messages, support requests, or follow-up replies that you send to sophieskystudio@gmail.com.

2.2 Information collected by our payment processor

Payments are processed by Lemon Squeezy, Inc., which acts as Merchant of Record and as an independent data controller for billing data. We do not see or store your full card number. Lemon Squeezy collects billing name, billing address, last four card digits, country (for tax purposes), and IP address as part of the checkout, governed by Lemon Squeezy's own privacy notice.

2.3 Information collected automatically

The Site is served by Vercel and may log technical information such as IP address, browser type, referring URL, and timestamps for security and abuse prevention. We do not use third-party advertising trackers. We do not set analytics or marketing cookies on this Site.

3. How We Use Your Information

• To prepare, personalise, and deliver the reading or ritual report you ordered.
• To respond to your questions and provide customer support.
• To process refunds or correct delivery errors.
• To detect, prevent, and address fraud, technical issues, or terms-of-service violations.
• To comply with legal obligations (for example, tax record-keeping).

4. Legal Bases for Processing (GDPR / UK GDPR)

• Performance of a contract — to deliver the Service you purchased.
• Legitimate interests — to operate, secure, and improve the Site.
• Legal obligation — to comply with applicable tax and consumer-protection rules.
• Consent — where required, you may withdraw it at any time.

5. Who We Share With

We share personal information only with the limited third parties needed to operate the Studio:

• Lemon Squeezy, Inc. (Merchant of Record / payment processor).
• Vercel Inc. (website and serverless hosting).
• Google LLC (Gmail, used to send your reading PDF and any correspondence).
• Squarespace Domains LLC (domain registrar and DNS).

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

6. International Transfers

Because our processors are located in the United States and the European Economic Area, your personal information may be transferred outside your country of residence. Where required, transfers rely on appropriate safeguards such as the Standard Contractual Clauses or equivalent mechanisms.

7. Data Retention

We keep order-related personal data only for as long as needed to deliver the Service, handle disputes, and meet tax and accounting obligations. Specifically:

• Reading personalisation data (name, DOB, situation) — kept for up to thirty (30) days after PDF delivery, then deleted from our active systems.
• Order and tax records — retained for up to ten (10) years as required by applicable tax laws.
• Email correspondence — retained while needed for support continuity.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information ("right to be forgotten").
• Restrict or object to certain processing.
• Receive a copy of your personal information in a portable format.
• Withdraw your consent where consent was the basis for processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, please write to sophieskystudio@gmail.com. We will respond within thirty (30) days.

9. California Residents (CCPA / CPRA)

California residents have additional rights including the right to know what categories of personal information we have collected, the right to request deletion, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

10. Children

The Site and the Services are not directed to children under sixteen (16) years of age, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will delete the data promptly.

11. Security

We apply reasonable administrative and technical safeguards including encrypted transport (HTTPS / TLS) for all data in transit, scoped access tokens for our serverless functions, and password-protected administrative access. No method of transmission or storage is one hundred percent secure, and we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page indicates when the most recent revision was published. Material changes will be highlighted on the Site.

13. Contact

For any privacy-related question, request, or complaint, please write to sophieskystudio@gmail.com.