Privacy Policy

1. Introduction

Brujula Education Ltd ("we", "us", or "our") operates the website https://fortuna-cookie.app ("Service"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website.

2. Data We Collect

We practice data minimization and only collect data necessary to provide our Service:

• Voluntary Information: The name you optionally provide to personalize your fortune, and the theme you select (e.g., love, career).
• Transaction Data: Payment information processed securely by our payment provider (Stripe). We do not store your full credit card details on our servers.
• Technical Data: Information automatically collected when you access our website, such as your IP address, browser type, device information, and standard server logs.

3. How We Use Your Data

We process your data for the following purposes and legal bases under UK GDPR:

• Service Delivery (Performance of Contract): To generate your personalized fortune and process your payment.
• Security & Improvement (Legitimate Interests): To prevent fraud, debug technical issues, and improve the performance of our website.
• Legal Compliance (Legal Obligation): To comply with financial regulations and tax laws regarding transaction records.

4. Third-Party Processors

We use trusted third-party service providers to help us operate our business. These providers act as data processors:

• Stripe: Our payment processor. When you make a purchase, your payment data is processed directly by Stripe.
• Vercel (or similar hosting provider): Hosts our website and infrastructure.

5. Data Retention

We retain personal data only for as long as necessary:

• Payment Records: Retained for the period required by UK tax and accounting laws (typically 6 years).
• Session Data: Temporary data used to generate your fortune is typically not stored permanently after the session ends, unless required for debugging or security logs which are rotated regularly.

6. Your Rights (UK GDPR)

Under the UK GDPR, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to request rectification of inaccurate data.
• The right to request erasure ("right to be forgotten").
• The right to restrict processing of your data.
• The right to object to processing.
• The right to data portability.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK if you believe your data rights have been violated.

7. Contact Us

To exercise your rights or if you have questions about this Privacy Policy, please contact us at:
contact@fortuna-cookie.app