Privacy Policy

Introduction

Welcome to Soul Arcana ("we", "us", or "our"). We are a wellness brand based in Australia, offering personalised Tarot and Lenormand readings, spiritual journaling tools, printables, and educational programs online.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, purchase from our Etsy shop, or engage with our content on any platform. It applies to all users globally, including those in Australia, the European Union, the United Kingdom, the United States, and beyond.

By using our services, you agree to the practices described in this policy.

Information We Collect

We may collect the following types of personal information:

Information You Provide Directly

Your name and email address when you contact us or sign up for our mailing list
Purchase information (name, shipping address, payment details) when you buy from our Etsy shop — note that Etsy processes payments and we do not store your card details
Details you share when requesting a personalised reading (e.g. questions, birth date, or other context you choose to provide)
Messages or enquiries submitted through our website or social media

Information Collected Automatically

Website usage data such as pages visited, time spent, and browser type (collected via Wix analytics and cookies)
IP address and general location data
Device and operating system information

Information from Third Parties

Etsy may share order details with us to fulfil your purchase
Social media platforms (e.g. Instagram) may provide data based on your interactions with our profile

How We Use Your Information

We use your personal information for the following purposes:

To fulfil and deliver your orders and personalised readings
To respond to your enquiries and provide customer support
To send you updates, newsletters, or promotional content (only with your consent)
To improve our website, products, and services
To comply with our legal obligations under Australian and applicable international law
To detect and prevent fraud or misuse of our services

Legal Basis for Processing (International Users)

For users in the European Union or United Kingdom, we process your personal data under the following legal bases as required by the GDPR / UK GDPR:

Contract performance: to fulfil your orders and deliver services you have purchased
Legitimate interests: to improve our services, respond to enquiries, and prevent fraud
Consent: to send you marketing emails or newsletters — you may withdraw consent at any time
Legal obligation: where required by applicable law

Sharing Your Information

We do not sell your personal information. We may share your data with the following third parties only to the extent necessary:

Etsy: for order processing and fulfilment
Wix: our website platform, which may collect analytics data
Email marketing platforms (e.g. Mailchimp, if used) to send newsletters with your consent
Payment processors: Etsy and any other platforms handle payments securely — we do not access your card details
Legal authorities: if required to comply with a court order, law enforcement request, or legal obligation

All third-party services we use are required to handle your data in accordance with applicable privacy laws.

International Data Transfers

As an Australian business serving customers worldwide, your data may be transferred to and processed in countries outside your own. Where we transfer data internationally, we take reasonable steps to ensure it is protected in accordance with this policy and applicable law, including the Australian Privacy Act 1988, the GDPR (EU/UK), and the California Consumer Privacy Act (CCPA) where relevant.

Your Privacy Rights

Australian Users (Privacy Act 1988)

Access the personal information we hold about you
Request correction of inaccurate or outdated information
Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Australian Privacy Principles

EU / UK Users (GDPR / UK GDPR)

Right to access, rectification, and erasure of your data
Right to restrict or object to processing
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with your local data protection authority

California Users (CCPA)

Right to know what personal information is collected and how it is used
Right to delete your personal information
Right to opt out of the sale of personal information (note: we do not sell your data)
Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, please contact us at [your contact email]. We will respond within 30 days.

Cookies & Tracking Technologies

Our website (hosted on Wix) uses cookies and similar tracking technologies to improve your browsing experience, analyse traffic, and understand how visitors interact with our content.

You may control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of our website. For full details on cookies used by Wix, please refer to the Wix Privacy Policy.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Children's Privacy

Our services are not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Data Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and relevant authorities in accordance with Australian law and applicable international requirements.

Third-Party Links

Our website and social media may contain links to third-party websites (such as Etsy, Instagram, or other platforms). We are not responsible for the privacy practices of these third parties and encourage you to review their own privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on our website with the revised effective date. We encourage you to review this page periodically.

For significant changes, we will make reasonable efforts to notify you via email or a notice on our website.