1. Introduction

Welcome to Astral Moon Magic (“Company”, “we”, “us”, or “our”).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our websites, read our content, purchase digital products, subscribe to our emails, join our courses, or interact with our services.

This Privacy Policy applies to:

• https://astralmoonmagic.com
• https://blog.astralmoonmagic.com
• our WordPress website and blog
• our WooCommerce shop and checkout pages
• our digital products, courses, downloads, reports, and services
• our landing pages, funnels, forms, and course pages hosted through Systeme.io, where applicable
• our email communications, newsletters, automations, and marketing emails managed through Klaviyo, where applicable

We comply with applicable privacy laws, including:

• the General Data Protection Regulation (GDPR) for EU residents
• applicable ePrivacy and cookie consent rules
• the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), where applicable
• other applicable U.S. and international privacy laws, where applicable

If you do not agree with this Privacy Policy, please do not use our websites, products, or services.

2. Data Controller Information

• Business Name: Astral Moon Magic
• Email: wimma@astralmoonmagic.com
• Postal Address: PL 89, 00131 Helsinki, Finland
• Website: https://astralmoonmagic.com

For GDPR purposes, Astral Moon Magic acts as the Data Controller for the personal data we collect and decide how to use.

Some third-party providers may act as independent controllers or processors depending on the service they provide. For example, payment providers such as Stripe may process certain payment-related data under their own legal obligations.

3. Personal Data We Collect

We may collect the following categories of personal data, depending on how you interact with us.

A. Information You Provide Directly

• name
• email address
• billing address
• shipping address, if a physical item is ever purchased
• account login details, where accounts are enabled
• order details and purchase history
• birth data or other information you submit for personalized astrology reports or similar services, where applicable
• messages, support requests, reviews, testimonials, or other content you send to us

B. WooCommerce Shop and Order Data

When you purchase through our WordPress / WooCommerce shop, we may collect data needed to process and manage your order.

• products viewed, added to cart, or purchased
• checkout details, including name, email address, billing details, and order notes
• payment status and transaction reference information
• download permissions for digital products
• customer account information, where customer accounts are enabled

C. Payment Information

Payments are processed securely by third-party payment providers such as Stripe and, where applicable, other payment processors. We do not store full credit card numbers on our own website.

Payment providers may collect and process information such as card details, billing details, transaction data, fraud-prevention signals, and other payment-related information according to their own privacy policies and legal requirements.

D. Email Marketing and Klaviyo Data

If you subscribe to our newsletter, download a free resource, join a waitlist, or purchase from us, we may use Klaviyo to manage email communications, where applicable.

• email address and subscription status
• name, where provided
• email opens and link clicks
• email preferences and unsubscribe activity
• purchase history and product interests, where connected to WooCommerce
• website or funnel activity, where Klaviyo tracking is enabled and permitted
• segments, tags, profiles, and automation activity

E. Automatically Collected Information

• IP address
• browser type and version
• device type and operating system
• referring website or campaign source
• pages visited and time spent on the site
• cart, checkout, purchase, and conversion events, where applicable
• cookies, pixels, tags, and similar tracking technologies, where enabled

F. Analytics and Performance Data

We may use analytics tools, where enabled, to understand how visitors use our website, shop, funnels, emails, and content. This may include tools such as Google Analytics, Google Search Console, Meta Pixel, Klaviyo analytics, WooCommerce analytics, Systeme.io analytics, or similar tools.

4. How We Collect Data

We collect personal data when you:

• visit our WordPress website or blog
• browse products or content
• add a product to cart or complete a WooCommerce checkout
• purchase a digital product, course, report, or service
• submit a form through WordPress, WooCommerce, Systeme.io, Klaviyo, or another connected tool
• subscribe to our newsletter or email list
• join a waitlist, funnel, course, or free resource
• open or click our emails
• contact us directly
• accept cookies or interact with tracking technologies

Some data is collected directly from you. Some data is collected automatically through our website, shop, email platform, analytics tools, cookies, pixels, and integrations.

5. Legal Basis for Processing

If you are located in the European Union or another region with similar privacy laws, we process your data based on one or more legal bases:

• Consent — for newsletter subscriptions, marketing emails, non-essential cookies, and certain tracking technologies.
• Contractual necessity — to process purchases, deliver digital products, provide courses, manage accounts, and respond to service requests.
• Legal obligation — to keep records required for tax, accounting, fraud prevention, and legal compliance.
• Legitimate interest — to maintain website security, improve services, understand general performance, prevent abuse, and manage customer relationships.

You may withdraw consent at any time where processing is based on consent.

6. How We Use Your Information

We use personal data to:

• operate and maintain our WordPress website and blog
• run our WooCommerce shop
• process payments and manage orders
• deliver digital products, downloads, courses, reports, and services
• send transactional emails, such as order confirmations and access details
• send newsletters, educational emails, offers, and automated email sequences if you have subscribed or where otherwise permitted by law
• personalize email content and customer journeys through Klaviyo, where applicable
• provide customer support
• analyze website, shop, funnel, email, and product performance
• improve our content, products, and user experience
• detect fraud, abuse, spam, or security issues
• comply with legal, tax, accounting, and regulatory obligations

We do not sell your personal data in the traditional sense.

Where advertising or analytics cookies are used, some privacy laws may define certain cookie-based data sharing as “sharing” or “targeted advertising.” You can manage this through cookie choices, browser settings, unsubscribe links, and any opt-out tools made available on the site.

7. Cookies, Pixels & Tracking Technologies

We use cookies and similar technologies to support website functionality, ecommerce, analytics, marketing, and security.

Types of cookies and tracking technologies may include:

• Essential cookies — needed for website, cart, checkout, login, security, and digital product access.
• Analytics cookies — used to understand how visitors use the website, shop, funnels, and content.
• Marketing cookies and pixels — used for email performance, campaign measurement, retargeting, or advertising, where enabled.
• Preference cookies — used to remember choices such as cookie settings or form preferences.

Tools that may use cookies or similar technologies include WordPress, WooCommerce, Stripe, Systeme.io, Klaviyo, Google Analytics, Meta Pixel, Google Search Console, or similar tools, where enabled.

EU visitors will be presented with a cookie consent mechanism where required. You can also manage or block cookies through your browser settings. Blocking some cookies may affect site functionality, checkout, login, or digital product access.

8. Third-Party Service Providers

We use trusted third-party service providers to operate our website, shop, payments, email systems, funnels, analytics, and digital products.

These providers may include, where applicable:

• WordPress — website and content management
• WooCommerce — ecommerce, checkout, product, order, and customer management
• Stripe — secure payment processing, fraud prevention, and transaction handling
• Systeme.io — landing pages, funnels, forms, courses, and related automations where used
• Klaviyo — email marketing, newsletter management, automation, segmentation, and email analytics
• Analytics providers — such as Google Analytics, Google Search Console, WooCommerce analytics, Klaviyo analytics, Systeme.io analytics, or similar tools
• Advertising platforms — such as Meta, Google, Pinterest, or similar platforms, where advertising pixels or campaign tracking are enabled
• Hosting, security, backup, and technical service providers — used to keep the website available and secure

These providers process personal data only as needed to provide their services to us, or as otherwise described in their own privacy policies. Some providers may act as processors, while others may act as independent controllers for certain processing activities.

If personal data is transferred outside the EU, we rely on appropriate safeguards where required, such as Standard Contractual Clauses, adequacy decisions, Data Privacy Framework participation where valid, or other lawful transfer mechanisms.

9. Email Marketing & Unsubscribing

If you subscribe to our newsletter, download a free resource, join a waitlist, or otherwise opt in to email marketing, we may send you educational emails, product updates, offers, and automated email sequences.

We may use Klaviyo to manage email lists, segments, automations, and performance data. This may include information about whether an email was opened, whether links were clicked, and which products or pages you interacted with, where tracking is enabled and permitted.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

Even if you unsubscribe from marketing emails, we may still send transactional or service-related messages, such as order confirmations, product access details, account notices, or legally required communications.

10. Payments, Orders & Digital Product Delivery

When you make a purchase, your order may be processed through WooCommerce and paid through Stripe or another available payment provider. We use this information to confirm your purchase, deliver your product, provide access, manage refunds or support requests, and keep records required by law.

Digital products, courses, reports, and downloads may be delivered through WordPress, WooCommerce, Systeme.io, email, or another delivery method depending on the product.

For personalized astrology reports or similar custom services, we may process the information you provide, such as name, birth date, birth time, and birth location, only for the purpose of preparing and delivering the purchased report or service, unless you have separately agreed to another use.

11. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy.

• Order and transaction records may be retained as required for tax, accounting, legal, and fraud-prevention purposes.
• Email marketing data may be retained until you unsubscribe, withdraw consent, or request deletion, subject to legal retention needs.
• Customer support messages may be retained to manage ongoing service, disputes, or quality improvement.
• Analytics data may be retained according to the settings of the relevant analytics provider.
• Custom report data may be retained only as long as needed to deliver the service and handle reasonable follow-up, unless legal obligations require longer retention.

You may request deletion of your personal data at any time, subject to legal, tax, accounting, fraud-prevention, or contractual retention requirements.

12. Your Rights Under GDPR

If you are located in the EU, EEA, UK, or another region with similar privacy rights, you may have the right to:

• access your personal data
• correct inaccurate or incomplete data
• request deletion of your personal data
• restrict or object to processing
• request data portability
• withdraw consent at any time where processing is based on consent
• object to certain forms of direct marketing
• lodge a complaint with your local Data Protection Authority

13. Your Rights Under CCPA/CPRA

If you are a California resident, you may have the right to:

• know what categories of personal data we collect
• know the purposes for which personal data is collected or used
• request access to personal data we hold about you
• request correction of inaccurate personal data
• request deletion of personal data, subject to legal exceptions
• opt out of the sale or sharing of personal data, where applicable
• limit use of sensitive personal information, where applicable
• not be discriminated against for exercising your privacy rights

We do not sell personal data in the traditional sense. However, if advertising cookies or pixels are enabled, certain data sharing for targeted advertising may be considered “sharing” under California law.

14. Data Security

We use reasonable technical and organizational safeguards to protect personal data from unauthorized access, misuse, loss, alteration, or disclosure.

These safeguards may include secure payment processing, limited access to customer data, account protections, website security tools, backups, and trusted third-party providers.

However, no method of online transmission or electronic storage is completely secure. We cannot guarantee absolute security.

15. International Data Transfers

Our website, shop, email platform, payment providers, analytics tools, and other service providers may process data in countries outside your country of residence.

For EU users, where personal data is transferred outside the EU or EEA, we rely on appropriate safeguards where required by law, such as Standard Contractual Clauses, adequacy decisions, Data Privacy Framework participation where valid, or other lawful transfer mechanisms.

16. Children’s Privacy

Our websites, products, services, and email content are not directed to individuals under the age of 18.

We do not knowingly collect personal data from children.

If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

17. Links to Other Websites

Our website, emails, blog posts, funnels, and product pages may contain links to third-party websites, platforms, payment pages, social media sites, marketplaces, or external resources.

We are not responsible for the privacy practices, content, or security of third-party websites. Please review their privacy policies before providing personal data.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, tools, legal obligations, or business practices.

Updates will be posted on this page with a revised “Last Updated” date.

Your continued use of our websites, products, or services after an update means the revised Privacy Policy applies.

19. Contact Information