This policy explains how gissecrets.com (“gissecrets”, “we”, “us”) handles personal data when you browse the library or order a personal reading.
Who is responsible for your data. gissecrets is run by Naoufal Chobah, an individual (not a registered business). For any privacy question or request, write to contact@gissecrets.com.
What we collect
When you browse
- Usage and device data: pages viewed, how you arrived (search, link, ad), approximate location from your IP address (city level), browser, device type, screen size, and interactions such as clicks and scrolls.
- This is collected through Google Analytics, the Google tag, and Microsoft Clarity, only after you accept analytics cookies where the law requires consent. See the Cookie Policy.
When you order a personal reading
To write and deliver your reading we ask for:
- Full name
- Email address (to send the reading and your order confirmation)
- Phone number (to reach you if there is a problem with your order)
- Birth date, birth time (optional) and birth place (to calculate your chart)
- Your intention or question (the focus of the reading)
Your intention may include personal details you choose to share. Please share only what you are comfortable with; it is read by one person and used only for your reading.
When you pay
Payments are processed by Stripe. Your card details go directly to Stripe and are never seen or stored by us. We receive from Stripe your name, email, billing country, the amount, and whether the payment succeeded, so we can match the payment to your order.
When you write to us
If you email us, we keep the email and our reply so we can help you.
Why we use it (and our legal basis)
| Purpose | Data | Legal basis |
|---|---|---|
| Write and deliver your reading | name, email, phone, birth data, intention | performance of a contract |
| Take payment and keep accounting records | payment details via Stripe, order data | contract; legal obligation |
| Send your order confirmation and reading | contract | |
| Understand which pages help people, fix problems | analytics and Clarity data | your consent |
| Measure search performance | Google Search Console data | legitimate interest |
| Prevent fraud and abuse | IP address, payment signals | legitimate interest |
We do not sell your personal data, and we do not use your reading details for advertising.
Who processes your data for us
| Service | What it does | Where data may be processed |
|---|---|---|
| Google Analytics and Google tag (Google) | site usage statistics | worldwide, including the United States |
| Google Search Console (Google) | search performance reports (aggregated, no visitor cookies) | worldwide |
| Microsoft Clarity (Microsoft) | heatmaps and session recordings to improve pages | worldwide, including the United States |
| Stripe | payment processing and fraud prevention | worldwide, including the United States |
| Cloudflare | hosting, security and content delivery | worldwide |
| Email delivery provider | sends order confirmations and readings from noreply@gissecrets.com | may be outside your country |
When data leaves your country, these providers rely on approved safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
If we use Clarity, it is set up to mask text you type into forms, so your reading details are not recorded in session replays.
How long we keep it
- Reading orders (name, email, phone, birth data, intention): 5 years after delivery, so we can resend your reading and answer questions about your order, then deleted. You can ask us to delete them sooner at any time.
- Payment and invoice records: 5 years, or longer if tax law requires it.
- Analytics data: 14 months in Google Analytics; Clarity recordings are kept by Microsoft for up to 30 days and aggregated data for up to 13 months.
Your rights
You can ask us to:
- access the personal data we hold about you,
- correct it,
- delete it,
- restrict or object to how we use it,
- receive it in a portable format,
- withdraw consent at any time (for analytics, use the “Cookie settings” link at the bottom of every page once analytics is switched on).
Write to contact@gissecrets.com. We answer within 30 days. You may also complain to your local data protection authority.
Children
gissecrets is not intended for anyone under 16, and we do not knowingly collect their data.
Security
The site is served only over HTTPS. Payments are handled by Stripe (PCI DSS Level 1). Access to reading orders is limited to the person writing your reading.
Changes
If we change this policy, we update the date at the top. Significant changes are announced on the site.