Privacy Policy

Who we are

Cosmic Coach is operated by SomosUno Digital, a company incorporated in Puerto Rico, founded by Jossi Fresco. We offer personalized integrated readings combining Numerology, Astrology, Tarot, and Kabbalah.

Data controller: SomosUno Digital. Contact: jossi@cosmicoach.com

What data we collect and why

When you request or order a reading, we collect the following personal data:

• ✦ Full name — Required to address your reading and our correspondence
• ✦ Date, time, and place of birth — Required to calculate your astrological and numerological charts — without this, the reading cannot be prepared
• ✦ Email address — To deliver your reading and communicate about your order
• ✦ Phone number — For order coordination when needed
• ✦ Optional information — Any specific question or focus area you choose to share, used to personalise the reading
• ✦ The other person's details (Bond Reading) — Their name and birth data, needed to produce the relationship reading. We only process these if you confirm that person consents
• ✦ A record of that consent — When you confirm the other person consents, we store that confirmation together with the date and the IP address it was made from, as evidence of when and from where it was declared

We do not collect payment card details. All payments are processed directly and securely by Stripe.

We store your IP address in one case only: as part of the consent record for a Bond Reading. The session booking page also keeps it in memory for up to an hour, never on disk, to limit repeated booking attempts. We never use it to build a profile of you. If you accept the cookie notice, Google Analytics also receives your IP address as part of measuring the visit — see Cookies and analytics below.

Legal basis for processing

We process your personal data on the basis of contract (Article 6(1)(b) GDPR) — your data is necessary to perform the service you have requested. Optional information you provide (such as a specific focus area) is processed on the basis of your consent.

How long we keep your data

We retain your reading details and associated personal data for up to 3 years after your order, for our business records. You may request deletion at any time — see Your Rights below.

Who we share your data with

We do not sell or share your personal data with third parties for their own purposes. We use the following service providers to operate the site:

• ✦ Netlify (netlify.com) — Hosts this website and stores form submissions on our behalf. Netlify is a US-based company operating under Standard Contractual Clauses for EU data transfers.
• ✦ Stripe (stripe.com) — Processes payments. Payment data submitted to Stripe is governed by Stripe's own privacy policy.
• ✦ Google Fonts (fonts.googleapis.com) — Delivers the typefaces used on this site. Your IP address may be transmitted to Google when fonts are loaded. You can disable web fonts in your browser settings if you prefer.
• ✦ Google Analytics (google.com) — Measures which pages are read and where visitors arrive from — but only if you accept the cookie notice. Google is a US-based company operating under Standard Contractual Clauses for EU data transfers.
• ✦ Google Calendar (calendar.google.com) — If you book a session through our booking page, we send your name, email address, and any message you write to Google Calendar so it can create the invitation and send it to you — we keep no copy of it.

Cookies and analytics

The site keeps two small values in your browser: the currency you picked, and your answer to the cookie notice. Neither leaves your device, and both are needed for the site to behave the way you asked it to.

Beyond that we use Google Analytics 4 to see which pages people read and where visitors come from. It loads only if you accept the cookie notice. Decline it, or close it without choosing, and nothing at all is requested from Google. Once accepted, Google sets cookies (_ga, _ga_*) that last up to two years and let it recognise a returning visitor. We run no advertising or remarketing tags, and Google's advertising signals stay switched off.

The legal basis here is your consent (Article 6(1)(a) GDPR). You can change your answer whenever you like from the Cookie settings link in the footer — declining also deletes the Google cookies already stored.

Automated processing

We use analytical tools to help synthesise the connections between the five traditions in your reading. All readings are reviewed and curated by a human practitioner before delivery. No decisions are made about you in a purely automated way.

Your rights

Under the GDPR, you have the right to:

• ✦ Access the personal data we hold about you
• ✦ Correct any inaccurate data
• ✦ Request deletion of your data
• ✦ Restrict or object to our processing
• ✦ Receive your data in a portable format
• ✦ Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email jossi@cosmicoach.com. We will respond within 30 days.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at aepd.es.

Changes to this policy

We may update this policy from time to time. The current version is always available at cosmicoach.com/en/privacy/. Material changes will be communicated by email to recent clients.