Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to:

• All websites owned or operated by Tina Aldea, including osegredo.website and any related domains;
• All products and services offered through these websites;
• All communications with us, including email and social media;
• Any mobile applications or digital platforms we may operate.

2. Information We Collect

2.1 Information You Provide Directly

When you use our Website or purchase our Services, we may collect:

• Contact Information: Name, email address;
• Personal Details: Date of birth, gender preference, ethnic background preference (for personalization of services);
• Account Information: Username, password (if applicable);
• Order Information: Products purchased, order history, preferences;
• Communications: Messages, feedback, support requests you send us;
• Marketing Preferences: Your consent choices for promotional communications.

2.2 Information Collected Automatically

When you visit our Website, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers;
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs;
• Location Data: General geographic location based on IP address;
• Tracking Data: Advertising identifiers (such as Facebook Pixel, Google Analytics, etc.).

2.3 Information from Third Parties

We may receive information about you from third parties, including payment processors (Stripe), advertising partners, and analytics providers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To create and deliver your personalized Soulmate Sketch and readings;
• Order Processing: To process payments, fulfill orders, and send order confirmations;
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications;
• Marketing: To send promotional emails and offers (only with your consent);
• Personalization: To customize your experience and provide relevant content;
• Analytics: To understand how our Website is used and improve our services;
• Advertising: To deliver targeted advertisements and measure their effectiveness;
• Legal Compliance: To comply with legal obligations and protect our rights;
• Fraud Prevention: To detect and prevent fraudulent activity and abuse.

3.1 AI Technology Disclosure

Our services utilize artificial intelligence technology in several ways:

• AI-Generated Content: Sketches, readings, timelines, and rituals are created using AI-powered generative technology combined with the personal information you provide.

3.2 Automated Profiling

We use the answers you give in our quiz (such as your date of birth and your preferences) to personalize your readings automatically. This automated processing does not produce legal effects or similarly significant decisions about you.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. Under the EU ePrivacy Directive and GDPR, we are required to obtain your consent before placing non-essential cookies on your device.

4.1 Types of Cookies We Use

4.2 Your Cookie Choices

You can choose which cookies to allow:

• Browser settings: You can block or delete cookies at any time in your browser (see Browser Controls below);

4.3 Browser Controls

You can also control cookies through your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Note: Disabling certain cookies may affect the functionality of our Website. If you reject all cookies, you will still be able to use our Website, but some features may not work as intended.

5. How We Share Your Information

We may share your information with:

• Service Providers: Third parties that help us operate our business (payment processors, email services, hosting providers);
• Payment Processors: Stripe processes all payments and has access to necessary transaction data;
• Advertising Partners: For targeted advertising (Facebook, Google, TikTok, etc.);
• Analytics Providers: To analyze Website usage and improve our services;
• Legal Requirements: When required by law, court order, or governmental authority;
• Business Transfers: In connection with any merger, sale, or transfer of our business;
• With Your Consent: For any other purpose with your explicit consent.

We do NOT sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for data transmission;
• Secure servers and database protection;
• Access controls and authentication;
• Regular security assessments and updates;
• Employee training on data protection.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Order Data: Retained for 7 years for tax and legal compliance;
• Account Data: Retained while your account is active and for a reasonable period thereafter;
• Marketing Data: Retained until you unsubscribe or request deletion;
• Analytics Data: Typically retained for 26 months;

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, please contact us at contato@osegredo.website. We will respond to your request within 30 days.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect;
• Right to Delete: Request deletion of your personal information;
• Right to Opt-Out: Opt-out of the sale of your personal information (we do not sell personal information);
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at contato@osegredo.website.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

10.1 Legal Bases for Processing

We process your personal data under the following legal bases as defined in GDPR Article 6:

• Consent (Article 6(1)(a)): For marketing communications, non-essential cookies, and personalization features;
• Contract Performance (Article 6(1)(b)): To deliver the services you purchased (Soulmate Sketch);
• Legitimate Interests (Article 6(1)(f)): For fraud prevention, security, and improving our services;
• Legal Obligation (Article 6(1)(c)): To comply with tax, accounting, and other legal requirements.

10.2 Your GDPR Rights

All rights listed in Section 8 apply to you, including:

• Right of Access: Obtain confirmation of whether we process your data and receive a copy;
• Right to Rectification: Correct inaccurate or incomplete data;
• Right to Erasure: Request deletion of your data under certain circumstances;
• Right to Restrict Processing: Limit how we use your data;
• Right to Data Portability: Receive your data in a structured, machine-readable format;
• Right to Object: Object to processing based on legitimate interests or for direct marketing;
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.

10.3 Data Transfers Outside the EEA

Some of our service providers are located outside the EEA (primarily in the United States). When we transfer your data outside the EEA, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Adequacy decisions where applicable;
• Other appropriate safeguards as required by GDPR.

10.4 Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority. A list of EU Data Protection Authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

11. Children's Privacy

Our Website and Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information immediately. If you believe we have collected information from a child under 18, please contact us at contato@osegredo.website.

12. Third-Party Links and Services

Our Website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Website or Services, you consent to the transfer of your information to countries outside your country of residence, including the United States. We will take appropriate measures to ensure your information is protected in accordance with this Privacy Policy.

14. Marketing Communications

With your consent, we may send you marketing communications about our products and services. You can opt-out at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Contacting us at contato@osegredo.website;
• Updating your communication preferences in your account (if applicable).

Please note that even if you opt-out of marketing communications, we may still send you transactional or service-related messages about your orders.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our Website or Services after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.