Privacy Policy

1. Who is responsible

Andrew Nethercott, a sole trader trading as Occultum and based in the United Kingdom, is the data controller for occultum.co.uk. Contact: support@occultum.co.uk.

2. What we collect and why

• Your account. Your email address, and the times you sign in. We need these to create and secure your account and to email you sign-in links (legal basis: performing our contract with you).
• Membership and payments. Stripe handles payment. We store only the reference Stripe gives your customer record, whether your subscription is active and when it renews. Stripe holds your card details and billing information under its own privacy policy (legal basis: contract, and our legal duty to keep tax records).
• What you keep on the site. Journal entries, lesson progress, and your preferences: a name if you give one, the town you choose for sun and moon times, birth date, time and place if you add them for the astrology tools, your interests and each tool's settings. Signed out, these stay only in your browser. Signed in, they are saved to your account so they follow you between devices (legal basis: contract).
• Reminders. If you turn on push reminders, your browser gives us a delivery address and keys for that device and we store your reminder choices. We use them only to send the reminders you asked for; turn them off in Settings or in your browser at any time (legal basis: consent).
• The Oracle and the tutor. What you send to these features, such as a reading and your question, a short summary of your birth chart if you have one, or a conversation about a lesson, is sent to Anthropic, the company whose Claude model writes the answer. We do not store the questions or answers; we keep only a count of requests per day to apply the member allowance (legal basis: contract).
• Technical information. Our hosting provider records the usual server logs (IP address, browser type, pages requested, errors) for security and performance, and deletes them after a short time. We do not run advertising or third-party analytics (legal basis: legitimate interests in keeping the site running and secure).

3. Cookies and browser storage

We use only strictly necessary cookies: the ones that keep you signed in. There are no tracking or advertising cookies, which is why the site shows no cookie banner. The tools also remember their settings in your browser's local storage on your own device; clearing your browser data removes them.

4. Who else processes your information

These companies process data on our behalf, only to provide the service:

• Supabase hosts our database and sign-in system in London (United Kingdom).
• Vercel hosts the website, serving it from London, and keeps the server logs described above.
• Resend sends our emails, such as sign-in links, from servers in the European Union.
• Stripe takes payments and runs the billing portal. Stripe may transfer data outside the UK under its standard contractual safeguards.
• Anthropic generates the Oracle and tutor responses. Anthropic is based in the United States; transfers are covered by its data-processing terms, which do not permit it to use your requests to train its models.

We never sell personal information, and we do not share it with anyone else unless the law requires us to.

5. How long we keep it

• Account data, journal, progress and preferences: while you have an account, and up to 30 days after you ask us to delete it.
• Payment records: six years, as UK tax law requires, held by Stripe and in our accounts.
• Server logs: a short rolling period, typically under 30 days.
• Reminder subscriptions: until you turn reminders off, your browser withdraws them, or your account is deleted.

6. Your rights

You can ask us for a copy of your personal information, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable form, and withdraw any consent you have given. Email support@occultum.co.uk and we will respond within one month. To delete your account, send the request from the email address on the account. You also have the right to complain to the Information Commissioner's Office (ico.org.uk); we would welcome the chance to help first.

7. Children

Occultum is written for adults. You must be at least 16 to create an account. We do not knowingly collect information from younger children; if you believe a child has made an account, email us and we will remove it.

8. Changes

If we change this policy in a way that matters, we will email account holders before it takes effect. The date at the top shows when it was last updated. Our Terms and Conditions and Refund Policy sit alongside this policy.