Privacy & Cookie Policy

Effective date: 4 May 2026

Data Controller: Diane Fay Hampton/The Cosy Nook for Card & Mediumship Readings

Website: https://the cosynookmoray.com

Contact email: thecosynookmoray@outlook.com

This policy explains how we collect, use, store and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also sets out your rights regarding your personal information and how you can exercise them.

1. What data we collect

We collect and process the following types of personal data when you use our website or purchase our services:

Information you provide directly

Name and email address: We require these details to communicate with you, deliver your requested service (such as a card reading or mediumship reading), answer your questions, and keep you informed about your booking or order.

Information collected during payment

When you make a purchase, you will be asked to provide billing information including:Your home addressPayment details (such as bank card information)This information is collected directly by our payment processors – Squarespace Payments and PayPal. We do not store full payment card details ourselves. PayPal processes payments securely and transfers funds to us in line with their own privacy standards.

Information collected via third‑party features

Facebook Like button: Our website includes a Facebook Like button. If you interact with this button or visit our site while logged into your Facebook account, Facebook may receive information such as your IP address and details of the pages you view. This is governed by Facebook’s own privacy policy, which we recommend you review.

Information collected for analytics

We collect personal information to power Squarespace analytics, which helps us understand how visitors use our site. This includes: Details about your browser, network and device Web pages you visited before arriving at our website Your IP address How you interact with the site – such as clicks, internal links followed, pages viewed, scrolling activity, searches you make, and timestamps of your visits This information is shared with Squarespace as our analytics provider, and is used only to analyse site traffic and improve our service.

Cookies and similar technologies

We and our service providers (including Squarespace) use cookies to make our website work effectively, analyse usage patterns, and improve your experience. Full details are set out in Section 6 below.

2. How we use your data

We only use your personal data when we have a valid legal basis under UK data protection law. The main purposes are: To perform the contract we have with you: using your name and email to arrange and deliver your reading, and using payment details to process your transaction or issue refunds if needed. To comply with legal obligations: for example, keeping records required by tax or consumer protection laws. For our legitimate interests: analysing site usage to improve our services, ensuring the security of our website, and managing customer enquiries – in each case only where these interests do not override your rights and freedoms. We will never use your data for marketing purposes unless you have explicitly agreed to it, and we will never sell your personal information to third parties.

3. Who we share your data with

We only share your personal information with trusted third parties who need it to help us provide our services, and always in line with data protection laws. These include: Squarespace: as our website host, payment processor and analytics provider – see their privacy policy at https://www.squarespace.com/privacyPayPal: to process payments securely – see their privacy policy at https://www.paypal.com/uk/webapps/mpp/ua/privacy-fullFacebook: if you interact with the Like button – see their privacy policy at https://www.facebook.com/policy.phpAll our third‑party providers are required to take appropriate security measures to protect your data, and may only use it in accordance with our instructions.

4. How long we keep your data

We only keep your personal data for as long as is necessary for the purposes we collected it for, including: Name and email address: retained for as long as needed to provide your service, plus any period required by law (for example, tax or contract retention rules), after which it is securely deleted or anonymised. Payment information: held by our payment processors in line with their own retention policies and legal requirements; we do not store this data ourselves. Analytics data: stored in a form that does not directly identify you where possible, and retained only as long as needed to analyse trends and improve the website.

5. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data: Right to access: You can ask for a copy of the information we hold about you. Right to rectification: You can ask us to correct any inaccurate or incomplete data. Right to erasure: You can ask us to delete your data where there is no good reason for us to continue using it. Right to restrict processing: You can ask us to suspend how we use your data in certain circumstances. Right to data portability: You can ask for your data to be transferred to you or another organisation in a commonly used format. Right to object: You can object to our use of your data where we rely on legitimate interests as the legal basis. Rights related to automated decision‑making: We do not use any automated decision‑making or profiling that has legal or significant effects on you. If you wish to exercise any of these rights, please contact us at [Your Contact Email]. We will respond within one month, and will not charge a fee unless your request is clearly unfounded or excessive. You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your data – see https://ico.org.uk/ for more information.

6. Cookie Policy

What are cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to website owners.

How we use cookies

We use cookies for the following purposes: Essential cookies: These are necessary for the website to function properly – for example, to enable you to make payments or access secure areas. They cannot be switched off in our systems, and do not store personal information that could be used for marketing or tracking your activity across other sites. Analytics cookies: These collect information about how visitors use our site, such as which pages are most popular and how users move around the site. This helps us improve the way our website works. As outlined earlier, this data is processed by Squarespace. Third‑party cookies: When you interact with the Facebook Like button, Facebook may set cookies on your device to track your activity across different websites and services. These are controlled by Facebook, and you can manage your preferences via your Facebook account settings or your browser settings.

Managing cookies

You can control and manage cookies in several ways: Most browsers allow you to refuse or delete cookies, or to be notified when a cookie is being set. You can usually find these settings in the ‘Options’, ‘Preferences’ or ‘Settings’ menu of your browser. Disabling essential cookies may affect the functionality of the website and prevent you from being able to purchase services or use certain features. For more information about managing cookies, you can visit https://www.aboutcookies.org/.

7. Changes to this policy

We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised effective date, so we encourage you to review it periodically.