Privacy Policy

1. Purpose of this Privacy Policy

This Privacy Policy explains how Fate & Stars (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use our website. The policy is written to support transparency and to help users understand what information may be processed, why it is processed, and what choices are available.

We aim to process personal data in a way that is consistent with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to personal data collected through the website, including when you contact us or interact with site features that involve data processing.

2. What personal data we may collect

Depending on how you use the website, we may collect the following categories of personal data:

🌟Contact data: such as your name, email address, and any information you provide when sending a message via the contact form or by email.
🌟Communication data: the content of messages you send to us and related correspondence.
🌟Technical data: such as IP address, browser type and version, device information, operating system, and basic diagnostic data.
🌟Usage data: information about how you navigate and interact with pages, such as page views and session-level engagement signals.
🌟Cookie and similar technology data: as described in our Cookie Policy.

We do not ask for or require sensitive personal information through general site browsing. If you choose to include additional information in a message to us, we will process it only to the extent needed to respond and manage the communication.

3. How we collect personal data

We may collect personal data through:

🌟Direct interactions: when you submit a message via the contact form or email us.
🌟Automated technologies: when you browse the website, certain technical and usage information may be collected through cookies and similar tools (subject to your cookie choices, where applicable).
🌟Service and security logs: limited records used to maintain site performance and protect against misuse.

4. Purposes and lawful bases for processing

We process personal data only when we have a lawful basis under UK GDPR. Depending on the context, lawful bases may include:

🌟Legitimate interests: operating and improving the website, ensuring security, and responding to general enquiries in a way that supports users. We consider and balance these interests against user rights.
🌟Consent: where you have a choice and you provide consent (for example, non-essential cookies where a consent mechanism is presented).
🌟Contract: if you request information or services that require steps prior to entering into an agreement, where applicable.
🌟Legal obligation: where processing is necessary to comply with applicable UK law.

5. How we use personal data

We may use personal data to:

🌟Respond to enquiries and provide customer support.
🌟Maintain website functionality, performance, and security.
🌟Understand general site usage to improve navigation and content clarity.
🌟Manage consent choices related to cookies and similar technologies.
🌟Keep internal records of communications for continuity and quality purposes.

6. Sharing and disclosure of personal data

We may share personal data with:

🌟Service providers: such as website hosting, analytics, or email service providers, acting as processors under our instructions.
🌟Professional advisers: such as legal or technical advisers, where needed for operational reasons.
🌟Authorities: where required by applicable law.
🌟We aim to share only the minimum data necessary for the relevant purpose.

7. International transfers

If personal data is transferred outside the UK, we take steps designed to ensure appropriate safeguards are in place, such as contractual protections and assessments of transfer risk. The safeguards used depend on the destination and the service provider.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

🌟Contact and communication records are kept for a reasonable period to manage follow-ups and maintain continuity, then deleted or anonymised where appropriate.
🌟Technical and usage logs are retained for limited durations aligned with security and operational needs.
🌟Cookie data retention depends on the specific cookie type, as described in the Cookie Policy.

9. Your rights

Under UK GDPR, users may have rights relating to their personal data, including:

🌟The right to request access to personal data we hold about you.
🌟The right to request correction of inaccurate or incomplete data.
🌟The right to request deletion of data in certain circumstances.
🌟The right to restrict or object to certain processing in certain circumstances.
🌟The right to data portability where applicable.
🌟The right to withdraw consent where processing is based on consent.

To exercise rights, contact us using the details at the top of this policy. We may need to confirm your identity before responding, to protect your information.

10. Cookies and similar technologies

We use cookies and similar technologies to support essential site functions and, where enabled, to understand general usage patterns. Please read our Cookie Policy for detailed information about categories of cookies, purposes, and how to manage preferences.

11. Security

We use reasonable technical and organisational measures designed to protect personal data from unauthorised access, loss, misuse, or alteration. No website can guarantee absolute security; however, we aim to maintain safeguards appropriate to the nature of the data processed.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the website or legal requirements. The “Last Updated” date indicates when the policy was most recently revised.

“For further information, please refer to the contact details provided above.”