GDPR & Data Protection Notice

Introduction

This notice explains your rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, and how mySoulAtlas complies with these regulations.

Data Controller

mySoulAtlas is the data controller for your personal information.

Contact: contact@mysoulatlas.com

What Data We Collect

We collect and process the following categories of personal data:

Identity Data: Full name
Contact Data: Email address
Birth Data: Date of birth, time of birth, place of birth
Transaction Data: Order details, payment confirmation (not card numbers)
Consent Records: Policy acceptance timestamps, marketing preferences

Special Category Data

Birth data used for astrological calculations may be considered sensitive. We process this data based on your explicit consent given at checkout.

Lawful Basis for Processing

We rely on the following lawful bases:

Contract: Processing necessary to fulfil your order
Consent: For marketing communications and special category data
Legitimate Interest: For fraud prevention and service improvement
Legal Obligation: For tax records and dispute resolution

Your Rights Under GDPR

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data (subject to legal retention requirements).

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing based on legitimate interests or for marketing.

Right to Restrict

Request limited processing while disputes are resolved.

Data Retention Periods

Order records: 7 years (legal requirement)
Birth data: Deleted upon request (or 7 years if linked to an order)
Marketing consent: Until withdrawn
Policy acceptance logs: 7 years (for dispute resolution)

International Transfers

Some of our service providers may process data outside the UK/EU. Where this occurs, we ensure:

Standard Contractual Clauses are in place
Adequate protection measures exist
Data is transferred to countries with adequacy decisions where possible

Automated Decision-Making

Our astrological calculations are automated but do not result in decisions with legal or significant effects. The content is for personal insight only.

How to Exercise Your Rights

To exercise any of your data protection rights, contact us at:

📧 contact@mysoulatlas.com

We will respond to your request within 30 days.

Right to Complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:

UK: Information Commissioner's Office (ICO) - ico.org.uk
EU: Your local Data Protection Authority

International Customers

For customers outside the UK/EU (including the US), we apply the same data protection standards to ensure fairness and transparency.

Updates to This Notice

We may update this notice periodically. The current version will always be available on our website.

← Back to Home