Privacy Policy

1. Who we are

VoxFati is a trading name operated by Zipzappa Ltd, a company registered in England and Wales.

For the purposes of applicable data protection law, Zipzappa Ltd is the controller of the personal information described in this Privacy Policy unless another organisation is expressly identified as the controller.

2. Scope of this policy

This Privacy Policy applies when you:

• visit the VoxFati website;
• create or manage a VoxFati account;
• purchase digital access, a membership or an add-on;
• use tarot, oracle, astrology, numerology, dream or other reflection tools;
• save, view or manage reading history;
• participate in community or messaging features;
• submit comments, questions, reviews or other content;
• contact customer support;
• receive service or marketing communications; or
• otherwise interact with VoxFati.

This policy does not control how an independent third-party website or service processes personal information when you leave VoxFati or use a service governed by that organisation’s own privacy notice.

3. Personal information we may collect

The information collected depends on how you use VoxFati and which features you choose.

3.1 Account and identity information

This may include:

• your name;
• email address;
• account identifier;
• password in encrypted or securely hashed form;
• profile image;
• profile description;
• age or confirmation that you meet the minimum age requirement;
• account role and access permissions;
• registration date;
• account status; and
• communication preferences.

3.2 Purchase and billing information

This may include:

• the plan, membership or add-on purchased;
• transaction date and amount;
• currency;
• payment status;
• subscription status;
• renewal or expiry date;
• cancellation status;
• payment provider customer or transaction references;
• billing country or postal information where required;
• VAT and tax information; and
• refund, payment dispute or fraud-prevention records.

Payments are processed by specialised payment service providers. We do not normally receive or store your complete payment card number or card security code.

3.3 Tool and reading information

When you use a VoxFati tool, we may process:

• questions or prompts you enter;
• cards, symbols or results selected during a session;
• generated interpretations and reading text;
• tool name and category;
• session date and time;
• reading summaries;
• themes, moods, life areas or reflection labels associated with a session;
• usage counts and tool activity;
• saved history preferences; and
• information you choose to share with the community.

3.4 Birth and profile information

Where you choose to use astrology, numerology or related features, we may process:

• date of birth;
• time of birth;
• place of birth;
• location or time-zone information; and
• profile preferences associated with those services.

You should only provide this information where you are comfortable doing so. Certain features may not function fully without the requested details.

3.5 Community and communication information

Where community, commenting, messaging or sharing features are available, we may process:

• posts;
• comments;
• likes and reactions;
• uploaded images;
• messages;
• reports or moderation requests;
• blocked-user information;
• moderation decisions; and
• records needed to investigate misuse or safety concerns.

Content published through a public or community feature may be visible to other users. Do not publish information you wish to keep private.

3.6 Customer support information

When you contact us, we may collect:

• your name and email address;
• account information;
• the subject and content of your enquiry;
• screenshots or files you provide;
• payment or transaction references;
• complaint information;
• cancellation or refund requests; and
• our responses and internal resolution notes.

3.7 Technical and usage information

When you access VoxFati, we may automatically collect:

• internet protocol address;
• browser type and version;
• device type;
• operating system;
• approximate location derived from an IP address;
• language and time-zone settings;
• referring website or page;
• pages and tools accessed;
• dates, times and duration of visits;
• login activity;
• error and performance information;
• security events;
• cookie identifiers; and
• session or device identifiers.

3.8 Information from third parties

We may receive information from:

• payment processors;
• authentication providers;
• email and communication providers;
• hosting and security providers;
• analytics providers, where enabled;
• fraud-prevention services;
• another user reporting content or activity; or
• public or lawful sources where reasonably necessary to protect VoxFati or comply with a legal obligation.

4. How we collect information

We may collect information:

• directly from you when you create an account or complete a form;
• when you purchase or cancel a service;
• when you use a tool or save a reading;
• when you publish or send content;
• when you contact support;
• automatically through server logs, cookies and similar technologies;
• from service providers involved in delivering your purchase or account functionality; and
• from another person where they lawfully report a safety, security or policy issue.

5. Why we use personal information

We may use personal information to:

• create, authenticate and manage user accounts;
• provide requested tools, readings and digital services;
• activate and manage paid access;
• process purchases, renewals, cancellations and refunds;
• display account, membership and billing status;
• save and display reading history where enabled;
• provide personal insight summaries and usage patterns;
• operate community, sharing and messaging features;
• answer enquiries and resolve complaints;
• send important service and account communications;
• send marketing communications where permitted;
• improve website performance and user experience;
• understand how tools and features are used;
• prevent fraud, abuse and unauthorised access;
• moderate content and enforce our Terms;
• maintain business, tax and accounting records;
• establish, exercise or defend legal claims;
• comply with legal and regulatory obligations; and
• protect the rights, safety and security of VoxFati, our users and others.

6. Lawful bases for processing

We rely on one or more lawful bases depending on the information and purpose involved.

6.1 Contract

We may process information where it is necessary to enter into or perform a contract with you.

Examples include:

• creating and managing your account;
• providing a requested digital service;
• activating paid access;
• processing a purchase;
• managing a subscription or cancellation; and
• responding to a request connected with your purchase.

6.2 Legal obligation

We may process information where necessary to comply with a legal obligation.

Examples include:

• tax and accounting records;
• consumer rights requests;
• fraud and financial compliance;
• responding to lawful requests from public authorities; and
• complying with data protection obligations.

6.3 Legitimate interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• operating and improving VoxFati;
• securing accounts and systems;
• preventing fraud and abuse;
• understanding service performance;
• maintaining appropriate business records;
• moderating community content;
• enforcing our Terms and policies;
• protecting legal rights;
• communicating with existing users about related services where permitted; and
• protecting the safety of users and the public.

Where we rely on legitimate interests, we consider the purpose, necessity and potential impact on individuals.

6.4 Consent

We may rely on consent where required, including for:

• certain marketing communications;
• optional cookies or similar technologies;
• optional profile information;
• optional public sharing; and
• another purpose where we specifically ask for consent.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6.5 Establishing or defending legal rights

Where permitted by law, we may process relevant information to establish, exercise or defend legal claims, investigate serious misuse or respond to a dispute.

7. Sensitive and special category information

VoxFati does not require you to provide medical records, information about religious beliefs, sexual orientation, political opinions or other sensitive information in order to use ordinary tarot and reflection tools.

However, a user may voluntarily include sensitive information in a question, message, profile or community post.

You should avoid submitting sensitive information unless it is genuinely necessary and you are comfortable with it being processed for the relevant purpose.

Where sensitive information is submitted, we may:

• process it only to provide the feature or respond to the communication;
• restrict who can access it;
• remove it from public content;
• delete it where it is unnecessary or inappropriate; or
• rely on an applicable legal condition where required.

Do not submit sensitive personal information about another person without a lawful reason and their appropriate permission.

8. Processing of questions and readings

Questions and session information may be processed by VoxFati systems and trusted service providers in order to produce, display, store or deliver a reading.

Information submitted to a tool may be used to:

• select and display the relevant reading structure;
• create an interpretation;
• generate a session summary;
• calculate reflection labels or insight patterns;
• save history where enabled;
• prepare community sharing content at your request;
• detect errors or misuse; and
• maintain service reliability and security.

Avoid including names, addresses, identification numbers, confidential documents or detailed private information where they are not needed for the reading.

9. Automated processing

Some VoxFati features use automated systems to select cards, organise information, generate interpretations, identify broad themes or prepare personal insight summaries.

These features are provided for entertainment and personal reflection. They do not make legally binding decisions about you and are not used to determine eligibility for employment, credit, insurance, medical treatment or public services.

You remain responsible for deciding how much importance to give a reading or reflection result.

10. Who we may share information with

We do not sell personal information to advertisers.

We may share information with carefully selected recipients where reasonably necessary for the purposes described in this policy.

10.1 Payment providers

Payment providers may process payment details, billing information, transaction identifiers, fraud signals, refunds and payment disputes.

10.2 Hosting and infrastructure providers

Hosting, database, storage, security, backup and content-delivery providers may process information necessary to host and protect VoxFati.

10.3 Content-processing providers

Trusted technology providers may process questions, cards, session context or other submitted information where necessary to create or deliver a requested interpretation or related feature.

10.4 Email and communication providers

These providers may process names, email addresses and message information to deliver account notices, receipts, support responses or permitted marketing.

10.5 Analytics and performance providers

Where enabled, analytics or performance providers may process technical and usage information to help us understand website operation and improve performance.

10.6 Security and fraud-prevention providers

These providers may process account, technical and transaction information to identify fraud, malicious activity or unauthorised access.

10.7 Professional advisers

We may share relevant information with accountants, auditors, insurers, lawyers and other professional advisers where reasonably necessary.

10.8 Authorities and legal recipients

We may disclose information where reasonably necessary to:

• comply with law or a binding legal process;
• respond to a lawful request from a regulator, court or public authority;
• investigate suspected fraud or unlawful conduct;
• protect a person from serious harm;
• enforce our legal rights; or
• defend a legal claim.

10.9 Business transfers

Information may be shared with a prospective buyer, investor, group company or successor where VoxFati or part of its business is reorganised, sold, transferred or merged.

Any recipient must use the information consistently with applicable law and the purposes communicated to you.

11. Public and community content

Information you deliberately publish through a public profile, comment, post or community feature may be visible to:

• registered users;
• website visitors;
• search engines, where indexing is permitted; and
• people who receive a shared link or screenshot.

We cannot guarantee that another person will not copy, save or redistribute information you make public.

Review content carefully before publishing it and avoid sharing private information about yourself or another person.

12. International transfers

Some service providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take steps required by applicable data protection law. Depending on the destination and provider, these steps may include:

• relying on UK adequacy regulations;
• using approved contractual safeguards;
• completing an appropriate transfer risk assessment;
• applying supplementary technical or organisational measures; or
• relying on another lawful transfer mechanism.

You may contact us for further information about safeguards relevant to your personal information.

13. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Retention periods depend on the information and feature involved.

When information is no longer required, we may delete, anonymise or securely archive it where continued retention is legally permitted or required.

Information may remain temporarily in protected backups until those backups are overwritten through the normal backup cycle.

14. Reading history and deletion

VoxFati may use a limited default retention period for saved readings and tool sessions.

The applicable period may depend on:

• whether you are logged in;
• the tool used;
• your membership or add-on;
• an account retention preference;
• an administrative preservation requirement; or
• a legal or security need.

Where a reading is automatically deleted, associated content may no longer be available through your account.

Certain minimal technical, billing or audit records may remain where required for security, fraud prevention, legal compliance or dispute resolution.

15. Information security

We use reasonable technical and organisational measures intended to protect personal information against:

• unauthorised access;
• accidental loss;
• unlawful disclosure;
• inappropriate alteration;
• misuse; and
• destruction.

Measures may include:

• access controls;
• password hashing;
• encrypted network connections;
• restricted administrative access;
• logging and monitoring;
• secure hosting;
• software updates;
• backups; and
• procedures for responding to suspected incidents.

No website or transmission method can be guaranteed completely secure. You should use a strong, unique password and protect access to your email account and device.

Contact us promptly if you believe your account has been compromised.

16. Cookies and similar technologies

VoxFati may use cookies, local storage and similar technologies to:

• keep you signed in;
• maintain security;
• remember preferences;
• maintain sessions and shopping or billing state;
• understand website performance;
• detect errors and abuse; and
• support optional analytics or marketing where permitted.

Essential technologies may be used where necessary to provide the website or protect it.

Where consent is legally required for an optional technology, we will request consent before using it.

More information is available in our Cookie Policy .

17. Marketing communications

We may send marketing communications where:

• you have provided consent;
• applicable law permits communication with an existing customer about related services; or
• another lawful basis applies.

You may opt out by:

• using the unsubscribe link in a marketing email;
• updating available account preferences; or
• contacting info@voxfati.com .

We may continue to send non-marketing service messages that are necessary for your account, purchase, security or legal notices.

18. Age restriction

VoxFati is intended only for users aged 18 or over.

We do not knowingly offer accounts or paid services to children.

If you believe that a person under 18 has created an account or provided personal information, contact us so that we can investigate and take appropriate action.

19. Your data protection rights

Depending on the circumstances and the lawful basis used, you may have the following rights.

19.1 Right to be informed

You have the right to receive clear information about how your personal information is collected and used.

19.2 Right of access

You may request confirmation of whether we process your personal information and request a copy of information we hold about you.

19.3 Right to rectification

You may ask us to correct information that is inaccurate or complete information that is incomplete.

19.4 Right to erasure

You may ask us to delete personal information in certain circumstances.

This right is not absolute. We may retain information where required for tax, legal, fraud-prevention, security, freedom of expression or legal-claims purposes.

19.5 Right to restrict processing

You may ask us to restrict use of personal information in certain circumstances, including while accuracy or an objection is being considered.

19.6 Right to data portability

Where applicable, you may request certain information you provided to us in a structured, commonly used and machine-readable format.

19.7 Right to object

You may object to processing based on legitimate interests in certain circumstances.

You may object at any time to personal information being used for direct marketing.

19.8 Rights relating to automated decisions

You may have rights where a decision based solely on automated processing produces legal or similarly significant effects.

VoxFati reflection results are not intended to make legally binding or similarly significant decisions about users.

19.9 Right to withdraw consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal does not affect processing already carried out lawfully before withdrawal.

20. How to exercise your rights

Send a request to:

Include:

• your full name;
• the email address associated with your account;
• the right you wish to exercise;
• enough detail for us to identify the relevant information; and
• any relevant date range or service.

We may request reasonable proof of identity where necessary to protect personal information from unauthorised disclosure.

We may also ask for clarification where a request is broad or unclear.

We will respond within the period required by applicable law. In complex cases or where multiple requests are made, the response period may be extended where permitted, and we will explain the extension.

Data protection requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, where permitted by law because it is manifestly unfounded or excessive.

21. Complaints

Contact us first where possible so that we have an opportunity to investigate and resolve your concern.

You also have the right to complain to the United Kingdom’s data protection regulator:

You may also have the right to contact a data protection authority in another country where applicable.

22. External websites

VoxFati may contain links to external websites.

We are not responsible for the privacy practices of websites we do not control. Review the privacy notice of an external website before providing personal information.

23. Changes to this Privacy Policy

We may update this policy to reflect:

• changes to VoxFati services;
• new features or processing activities;
• changes to service providers;
• changes in law or regulatory guidance;
• security or operational improvements; or
• improvements in clarity.

The current version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal information is used, we may provide an additional notice through the website, your account or email where appropriate.

24. Contact us