Data Usage Policy

1. Purpose of This Data Usage Policy

This Policy provides additional information about the way data is used within Cosmicoracle.

It applies to information processed when users:

• browse the Cosmicoracle website;
• create or use an account where available;
• purchase a digital service;
• submit information for a personalised service;
• provide astrology or numerology information;
• use compatibility features;
• submit tarot-related questions;
• request gemstone-related information;
• contact our support team; or
• otherwise interact with website functionality.

Our objective is to use information only where reasonably necessary for providing, protecting, administering, and improving Cosmicoracle.

2. Our Approach to Responsible Data Use

Cosmicoracle aims to process personal information responsibly and proportionately.

Where UK data protection law applies, our approach reflects principles contained in the UK General Data Protection Regulation, the Data Protection Act 2018, and related applicable requirements.

These principles include using information:

• lawfully, fairly, and transparently;
• for identified and legitimate purposes;
• only to the extent reasonably necessary;
• with appropriate attention to accuracy;
• for no longer than reasonably required;
• with appropriate security measures; and
• with accountability for how personal information is handled.

We do not intentionally collect additional personal information simply because it may be technically possible to do so.

3. Categories of Data We May Use

The information used by Cosmicoracle depends on the service or website function selected by the user.

Data may include:

• name;
• email address;
• account information;
• login and authentication details;
• birth-related information;
• service selections;
• compatibility details;
• numerology information;
• tarot questions;
• gemstone-related preferences or information;
• user-entered text;
• transaction references;
• website activity;
• device information;
• IP address;
• browser information;
• customer support correspondence; and
• information voluntarily supplied by users.

Not every category is collected from every user.

We aim to collect only information relevant to the particular purpose for which it is required.

4. Astrology and Birth Information

Some Cosmicoracle services may require information traditionally used for astrological interpretation.

Depending on the selected service, this may include:

• date of birth;
• time of birth;
• place of birth;
• name;
• zodiac-related details; and
• other information directly relevant to the requested interpretation.

Such information may be used to prepare a horoscope or other astrology-related digital output.

We do not intend to use birth information for unrelated purposes merely because it has been provided for an astrology service.

Users should ensure that the information submitted is accurate because incorrect information may affect the relevance of the resulting output.

5. Compatibility Data

Love Compatibility and Business Compatibility services may involve information concerning more than one individual.

Depending on the service, users may provide:

• names;
• birth dates;
• birth times where relevant;
• birth locations; and
• information required to compare relevant astrological or numerological factors.

This information is used only to the extent reasonably required to prepare the requested compatibility output and for legitimate operational purposes such as security, recordkeeping, or resolving related support issues.

When providing information concerning another person, users should ensure they have an appropriate basis for doing so.

Users should not submit unnecessary private or sensitive information concerning another individual.

6. Tarot, Numerology and Gemstone-Related Inputs

Different Cosmicoracle services may require different forms of information.

For Tarot, users may be asked to provide a question, topic, or area of interest.

For Numerology, information such as a name, date of birth, or other relevant information may be used to perform the requested interpretation.

For Gemstone Suggestions, relevant personal or astrology-related information may be processed to prepare the applicable output.

We use such information for the purpose for which it was submitted and for directly related operational purposes.

Providing additional unrelated personal information does not necessarily improve the service, so users are encouraged to submit only information reasonably relevant to their request.

7. User Questions and Free-Text Inputs

Certain Cosmicoracle features may allow users to enter questions, descriptions, preferences, or other written information.

Free-text information may be used to:

• understand the user's request;
• identify the subject of the selected service;
• personalise an output;
• support relevant automated processing;
• troubleshoot technical errors;
• investigate misuse; and
• respond to customer support requests.

Users should avoid entering unnecessary confidential or highly sensitive information.

In particular, users should not enter:

• account passwords;
• online banking passwords;
• complete payment card numbers;
• CVV security codes;
• confidential authentication credentials; or
• unrelated identity documentation

into ordinary Cosmicoracle text fields.

8. How We Use Data to Provide Services

Information supplied to Cosmicoracle may be processed to provide the service requested by the user.

For example, information may be used to:

• prepare personalised horoscope information;
• produce compatibility results;
• process numerology-related inputs;
• respond to a tarot-related request;
• determine relevant information for gemstone suggestions;
• personalise a digital report;
• associate a purchase with the correct user;
• make completed outputs available where applicable; and
• respond to questions about a purchased service.

We aim to ensure that information used for personalisation has a direct relationship with the service requested.

Information should not be repurposed for materially unrelated activities without an appropriate legal basis.

9. AI and Automated Processing

Cosmicoracle may use software, algorithms, automation, or AI-supported technologies to assist with certain digital functions.

Where these technologies are used, they may help with:

• organising user-submitted information;
• analysing relevant inputs;
• identifying applicable patterns;
• supporting the preparation of personalised digital outputs;
• structuring written information;
• improving clarity and presentation;
• detecting technical problems;
• preventing misuse; and
• improving website functionality.

The use of AI-supported technology does not mean that every Cosmicoracle service is produced entirely by automated technology.

Where personal information is processed through AI-supported systems, Cosmicoracle aims to apply principles of fairness, transparency, purpose limitation, and appropriate data minimisation.

Current ICO guidance emphasises transparency and fairness when personal data is processed through AI systems.

10. Use of User Data for AI Improvement

Private personal information submitted for a Cosmicoracle service is not intended to be used automatically to train an unrestricted public AI model.

Where technology is assessed or improved, Cosmicoracle may use:

• aggregated information;
• anonymised information;
• technical performance information;
• error information;
• non-identifying usage patterns; or
• other information where an appropriate legal basis exists.

Where identifiable user information would be used for a materially different AI-development purpose, appropriate transparency and other legal requirements would need to be considered before such processing takes place.

We aim to separate the provision of a requested personal service from unrelated model-development activities.

11. Data Minimisation

Cosmicoracle seeks to collect and use only information that is adequate, relevant, and reasonably necessary for the intended purpose.

For example, if a service requires only a date of birth and name, users should not be asked to provide unrelated financial or identification information simply to obtain the service.

Our approach to data minimisation may include:

• limiting form fields;
• avoiding unnecessary mandatory information;
• restricting access to user data;
• reviewing information requirements;
• deleting information that is no longer required; and
• using anonymised or aggregated information where personal identification is unnecessary.

The ICO describes data minimisation as identifying and retaining only the minimum personal information needed for the intended purpose.

12. Account, Support and Communication Data

Where Cosmicoracle provides account functionality, account data may be used to:

• create and administer the account;
• authenticate the user;
• protect account access;
• associate relevant purchases with the account;
• maintain account preferences;
• investigate suspicious activity; and
• respond to account-related requests.

When users contact us, we may also use correspondence to:

• answer questions;
• address payment issues;
• resolve technical problems;
• respond to privacy requests;
• investigate service-related concerns; and
• maintain appropriate support records.

Support communications will not normally be used for unrelated purposes.

13. Payment and Transaction Data

Cosmicoracle provides paid digital services through one-time payments.

Payment processing may be carried out by authorised payment gateways, banks, card networks, or other financial service providers.

Cosmicoracle may receive limited transaction information, including:

• transaction reference;
• payment status;
• amount paid;
• currency;
• payment date;
• selected service; and
• limited billing information made available by the payment processor.

Cosmicoracle does not require or intend to store complete debit or credit card numbers or CVV security codes on its own servers.

Sensitive payment credentials should be entered directly into the secure environment supplied by the relevant payment provider.

Transaction information may be used for:

• verifying payment;
• providing the purchased service;
• resolving payment problems;
• identifying duplicate transactions;
• preventing fraud;
• maintaining accounting records; and
• meeting applicable legal requirements.

14. Website Usage and Technical Data

Cosmicoracle may process technical and usage information when users interact with the website.

This may include:

• IP address;
• device type;
• browser type;
• operating system;
• pages accessed;
• referral information;
• date and time information;
• website interaction patterns;
• technical errors; and
• security logs.

We may use this information to:

• operate the website;
• diagnose errors;
• maintain security;
• identify suspicious activity;
• understand general website performance;
• protect forms and accounts;
• improve navigation; and
• maintain system stability.

Where individual identification is unnecessary, we may use aggregated or anonymised technical information instead.

15. Sharing Data With Service Providers

Cosmicoracle may rely on third-party providers to support its digital infrastructure.

Depending on the website configuration, these providers may assist with:

• website hosting;
• cloud infrastructure;
• data storage;
• payment processing;
• security;
• fraud prevention;
• analytics;
• email delivery;
• database management; and
• AI or software functionality where applicable.

We aim to provide service providers only with information reasonably necessary for their specific role.

Where a provider processes personal information on our behalf, appropriate contractual, organisational, and security safeguards may be used where required by law.

We do not sell users' personal information simply so unrelated businesses can independently market products or services to them.

16. Sensitive Information

Users may occasionally include information within free-text fields that falls into a more sensitive category of personal information.

Examples may include information concerning:

• health;
• religious or philosophical beliefs;
• political opinions;
• sexual orientation;
• sex life;
• racial or ethnic origin; or
• other protected categories of personal data.

Cosmicoracle does not generally require these categories of information merely to operate ordinary website functionality.

Users should avoid providing sensitive information unless it is genuinely relevant and appropriate for the particular service.

If such data is processed, we will consider the additional safeguards and lawful conditions required under applicable data protection legislation.

17. Retention, Deletion and Anonymisation

Cosmicoracle does not intend to keep personal information indefinitely.

Retention depends on factors such as:

• the reason the information was collected;
• whether a service is still being provided;
• account status;
• payment and accounting obligations;
• fraud-prevention requirements;
• dispute resolution;
• security requirements; and
• applicable legal obligations.

Where information is no longer reasonably required, we may:

• securely delete it;
• anonymise it;
• remove unnecessary identifiers; or
• restrict its use where continued retention is legally necessary.

Information processed through AI-supported functionality should likewise not be retained longer than reasonably necessary for the applicable purpose.

Specific retention periods may differ according to the type of data and the system involved.

18. User Control, Rights and Changes to Data Use

Depending on applicable UK data protection law, users may have rights relating to their personal information.

These can include rights to:

• request access to personal data;
• correct inaccurate information;
• request deletion where applicable;
• restrict certain processing;
• object to certain uses of personal data;
• receive eligible information in a portable format;
• withdraw consent where processing relies on consent; and
• raise concerns about the way personal information is handled.

Where a user informs us that relevant personal information is inaccurate, we will take reasonable steps to review and correct it where appropriate.

Cosmicoracle may update its data practices as services, technologies, or legal requirements develop. Where a material new use of personal information is incompatible with the original purpose, we will consider whether additional notice, consent, or another appropriate legal basis is required.

The ICO's current guidance confirms that purpose limitation requires organisations to collect information for specified purposes and carefully assess materially different later uses.

Users may refer to our Privacy Policy and Account & Data Deletion Policy for additional information concerning their rights and deletion requests.

19. Contact Us

If you have questions about this Data Usage Policy, how Cosmicoracle uses information, AI-supported processing, retention, deletion, payment data, or your data protection rights, please contact us: