PRIVACY POLICY

Last updated July 29, 2026

This Privacy Policy describes how KODARA LLC, doing business as The Zodiac Spot ("The Zodiac Spot," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit or use https://thezodiacspot.com, create a personalized birth chart, place an order, download a digital product, create an account, join our mailing list, or contact us (collectively, the "Services").

1. Information we collect

Information you provide

Contact and account information: name, email address, telephone number, username, password credentials stored in hashed form, and account preferences.
Order information: billing and shipping addresses, products and options selected, order total, taxes, shipping method, order status, transaction identifiers, and fulfillment or download records.
Birth-chart personalization: the display name, birth date, birth time, birth city or location, coordinates derived from the selected birth location, time-zone information, design choices, and generated chart or artwork.
Communications: support messages, claim details, photographs submitted for damaged-product claims, reviews, survey responses, and other information you choose to send us.
Marketing preferences: email address, subscription status, consent records, and newsletter preferences.

The location requested by our chart tool is the subject's birth location. It is not your current device location. We do not request precise GPS location from your device unless a separate feature clearly asks for permission.

Payment information

Payments are processed by Stripe and the payment methods offered at checkout. We do not store complete payment-card numbers or card security codes on our Website. We may receive limited payment information such as the card brand, last four digits, payment status, billing details, and Stripe transaction or customer identifiers. Stripe processes payment information under its own privacy policy at https://stripe.com/privacy.

Information collected automatically

When you use the Services, we and our providers may automatically receive IP address, browser and device type, operating system, referring URL, pages viewed, dates and times, error and security logs, cookie or session identifiers, cart activity, and an approximate location inferred from an IP address. We do not treat an IP-derived city or region as precise GPS location.

2. How we use information

Generate previews, astrology calculations, personalized artwork, physical print files, and digital-download bundles.
Process payments, orders, taxes, shipping, production, downloads, refunds, replacements, and customer claims.
Create and administer customer accounts and preserve access to eligible downloads and order history.
Respond to questions, provide support, send transactional messages, and communicate about an order.
Operate, secure, troubleshoot, test, and improve the Website and chart-generation systems.
Measure Website performance and usage when analytics is enabled and permitted by your consent settings.
Send newsletters or promotional messages when you subscribe; you may unsubscribe at any time.
Prevent fraud, abuse, unauthorized access, and violations of our terms.
Comply with tax, accounting, legal, regulatory, and recordkeeping obligations.

3. Legal grounds for processing

Where a law requires a legal basis, we process information as necessary to perform a contract with you, comply with legal obligations, protect our legitimate interests in operating and securing the Services, establish or defend legal claims, protect vital interests, or based on your consent. You may withdraw consent for future processing where consent is the basis, but withdrawal does not affect processing already completed.

4. When we disclose information

We do not sell personal information for money, and we do not currently use personal information for targeted advertising across unrelated websites. We disclose information only as reasonably necessary to operate the Services, fulfill orders, comply with law, or complete a business transaction.

Recipient category	Why information is disclosed
Hosting, website, security, and storage providers	Host WordPress/WooCommerce, store order and chart data, provide backups, protect the Website, and deliver files.
Payment processors, including Stripe	Authorize payments, prevent fraud, handle refunds and disputes, and maintain transaction records.
Print-on-demand and fulfillment providers, currently Printful, and shipping carriers	Manufacture, package, ship, track, replace, or investigate physical orders. This can include name, shipping address, contact details, order selections, and the production artwork needed to fulfill the order.
Chart, map, time-zone, and rendering services	Search for a birth location, resolve coordinates and the historical time zone, calculate astrology data, generate artwork, and prepare downloadable or printable files. Depending on the feature used, this may include OpenStreetMap/Nominatim, TimeAPI.io, astrology calculation services, OpenAI for AI-assisted validation, and our private rendering and file-storage infrastructure. The minimum information needed for the requested function may include birth date, birth time, location text, coordinates, time-zone data, display name, and design choices.
Email and marketing providers, including Brevo where enabled	Send transactional messages, download-ready notices, support replies, and newsletters; maintain consent and unsubscribe records.
Analytics and security providers, including Google where enabled	Measure Website use, prevent automated abuse, provide reCAPTCHA, and improve reliability subject to consent and applicable law.
Professional advisers, authorities, and transaction participants	Obtain legal, accounting, insurance, or technical advice; comply with lawful requests; protect rights and safety; or evaluate a merger, financing, sale, or transfer of all or part of the business.

5. Cookies, analytics, and consent

We use cookies and similar technologies for essential store functions and may use optional functional or analytics technologies. Google Analytics may be used when enabled and permitted by your consent settings. Google Analytics retention is controlled through our Google Analytics configuration and may retain user-level and event-level data for up to 14 months. Aggregated reports may be retained longer.

See our Cookie Policy and Cookie Preference Center for more information and controls.

6. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer support, fraud prevention, backups, legal claims, and tax or accounting obligations. Retention depends on the type of record and applicable law. In general:

Order, payment, tax, refund, and fulfillment records may be retained for up to seven years or longer when legally required.
Account information is generally retained while the account remains active and afterward as needed for orders, downloads, security, or legal obligations.
Personalization data and generated files are retained as needed to produce, deliver, re-download, support, replace, or document the order, then deleted or de-identified according to our operational and backup schedules.
Newsletter records are retained until you unsubscribe, plus a limited suppression record so we can honor the unsubscribe request.
Support and claim records are retained as reasonably necessary to resolve the matter and protect legal rights.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted connections, limited payment-data handling, security monitoring, and protected download processes. No website, transmission, or storage system can be guaranteed completely secure. You are responsible for protecting your account credentials and notifying us promptly of suspected unauthorized access.

8. International processing

We are based in the United States. Some providers may process information in the United States or other countries. Those countries may have different data-protection laws. Where required, we and our providers use appropriate legal mechanisms for cross-border transfers.

9. Your privacy choices and rights

Depending on where you live and subject to legal exceptions, you may have the right to request access, correction, deletion, or a copy of personal information; withdraw consent; object to or restrict certain processing; and appeal a denied privacy request. Because we do not currently sell personal information or use it for targeted advertising, there is no current sale or targeted-advertising program to opt out of.

Account: update available details through your account or contact us.
Marketing: use the unsubscribe link in an email or contact us. Transactional order messages will still be sent when necessary.
Cookies: use the Cookie Preference Center.
Privacy request: email legal@thezodiacspot.com or use our contact page.

We may ask for information reasonably necessary to verify your identity and authority. We will not discriminate against you for exercising a legally protected privacy right.

10. Children

The Services are not directed to children under 18, and we do not knowingly collect personal information from them. A parent or guardian who believes a child submitted personal information may contact us to request review and deletion.

11. Third-party links and services

The Website may link to or interact with third-party services. Their privacy practices are governed by their own policies. We are not responsible for a third party's independent privacy practices.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our Services, providers, or legal obligations. The date at the top shows when it was last updated. Material changes may also be communicated through the Website or by email when appropriate.

13. Contact us

Questions, privacy requests, or appeals may be sent to:
KODARA LLC, doing business as The Zodiac Spot
Email: legal@thezodiacspot.com
Phone: +1 (561) 806-1027