Last updated 7 November 2026

Privacy notice

This notice explains what personal information I collect when you enquire about or book a reading, why I need it, who else handles it and how long I keep it.

Who I am

This website is run by Layla Aletheia Rose, who offers tarot and divination readings online from the UK. I am the controller of the personal information described here. You can contact me about anything in this notice at laylaaletheiarose@gmail.com.

What I collect

When you enquire: your name, contact number and email address, your WhatsApp number and profile name, and whatever you choose to tell me about your question.
When we arrange and hold a reading: our messages, the agreed question, format, price and time, and my notes from the reading.
When you pay: payments are handled by Stripe or PayPal. I receive your name, email address, the amount and confirmation that you paid. I never see your full card details.
When you visit this website: the site uses no cookies and no analytics. It is hosted on GitHub Pages, and GitHub records visitors’ IP addresses in its server logs for security purposes.

Sensitive information

Your question may reveal information about your health, relationships, sex life or beliefs. UK data protection law treats this as special category information. I only use it with your explicit consent, which you give by ticking the consent box on the enquiry form or by sending me your question. You can withdraw your consent at any time by telling me, and I will delete what you shared unless I need to keep a record of a payment.

Why I use it, and the legal basis

To reply to your enquiry and arrange a reading, because you asked me to before entering into a contract.
To give you the reading you booked, because it is necessary for our contract.
To keep financial records, because the law requires it.
To use any special category information, because you gave explicit consent.

I do not use your information for marketing, I do not sell it, and I do not use it to make automated decisions about you.

Who else handles it

These services process information on my behalf, or as independent providers you also use:

WhatsApp (Meta), for enquiries and messages. Messages are end-to-end encrypted.
Google (Gmail), for messages sent by email.
Stripe or PayPal, for payments.
GitHub, which hosts this website.
Video call provider, if your live reading is held by video call.

Some of these providers may process information outside the UK. Where they do, they rely on safeguards recognised under UK data protection law.

How long I keep it

Enquiries that don’t lead to a reading: deleted within 3 months.
Messages and notes about a reading: deleted 12 months after the reading.
Payment and booking records: kept for as long as HMRC requires, which is at least 5 years after the 31 January submission deadline for the relevant tax year.

Your rights

You can ask me to give you a copy of your information, correct it, delete it, restrict or object to how I use it, or transfer it to you in a usable format. Where I rely on your consent, you can withdraw it at any time. Contact me at laylaaletheiarose@gmail.com and I will reply within one month.

If you are unhappy with how I have handled your information, please tell me first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this notice

If I change how I handle personal information, I will update this page and the date at the top.