Cosmic Roadmaps – Privacy Policy
Last updated: 2 November 2026
1. Who we are
This Privacy Policy explains how Cosmic Roadmaps (“we”, “us”, “our”) collects and uses personal data through cosmicroadmaps.com (the “Site”). We are the controller of your personal data under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Cosmic Roadmaps is operated by Deaglán MacCanna, based in Ireland. Contact.
This policy should be read with our Terms of Service.
2. What we collect and why
a) Your profile and astrology data. When you register and use our Services, we keep the information you give us, including your name, email address, birth date, time and place, any questions you ask us (including horary and Tarot questions), the readings and reports you have purchased, and your order history. We use this to provide the Services you ask for, to keep your readings in your profile, and to let the astrologer behind Cosmic Roadmaps draw further insights from your record, such as continuity between readings, follow-ups and forecasts, across the Services you use on the Site.
Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
b) Sensitive information you choose to share. Please do not include health, sexual life, religious or other special-category information in your questions unless you want it considered. If you do, you give us your explicit consent to use it to prepare your reading and for the further insights described above (Article 9(2)(a) GDPR). You can withdraw consent at any time.
c) Orders and payments. When you place an order, we receive confirmation of payment from Stripe, along with details such as your name, email address, the amount paid and the items bought. We do not see or store your full card details.
Legal basis: performance of our contract with you, and compliance with legal obligations, such as keeping tax and accounting records (Article 6(1)(b) and (c)).
d) Messages and enquiries. If you email us or contact us through the Site, we keep your message and our reply so we can respond and keep a record.
Legal basis: our legitimate interest in answering enquiries and running our business, or steps taken at your request before a contract (Article 6(1)(f) and (b)).
e) Anonymised site usage statistics. We collect anonymised statistics about how the Site is used, such as visitors’ country, operating system, browser and traffic source. This data does not identify you and is used only to understand and improve the Site.
Legal basis: our legitimate interest in improving the Site (Article 6(1)(f)), to the extent any of this data is personal data.
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you. We do not sell your personal data.
3. Cookies
We use only the cookies the Site needs to work. We do not use advertising, marketing or tracking cookies, and we do not set any cookies for our site usage statistics.
| Cookie | Purpose | When it is set | Duration |
|---|---|---|---|
| evcc_consent | Remembers your cookie choice so we do not ask again | When you respond to the cookie notice | About 6 months |
| wordpress_logged_in_[random characters] | Keeps you signed in to your profile | When you log in | Until you close your browser, or up to 14 days if you choose “Remember me” |
| wp-settings-[number] and wp-settings-time-[number] | Remember your dashboard display preferences, such as which editor you use | When a signed-in user uses the WordPress dashboard | About 6 months |
All of these are needed to provide something you have asked for (remembering your cookie choice, signing you in, or keeping your dashboard preferences), so they do not require consent under the ePrivacy Regulations 2011. You can block or delete cookies in your browser settings, but you may then be unable to log in and your saved preferences will be lost.
4. Who we share your data with
We share personal data only with service providers who help us run the Site and the Services, and only as needed:
- Stripe, our payment processor (see section 5);
- professional advisers, such as accountants or lawyers, where necessary;
- public authorities or others where the law requires, or to protect our legal rights.
These providers may act on our instructions as processors, or as controllers in their own right. We do not allow processors to use your data for their own purposes beyond what the law permits.
5. Payments and Stripe
We use Stripe to process payments. When you submit an order, you are taken to Stripe’s payment service, which collects and processes your payment details. Stripe has its own privacy policy and terms, which apply to your use of its service. You can read them at stripe.com/privacy. We are not responsible for Stripe’s handling of your data.
If you do not wish to use Stripe’s service, please do not submit an order. You can still browse the Site and contact us to ask whether another way to pay is available.
6. Transfers outside the EEA
Stripe may process data outside the EEA, including in the United States. Stripe’s privacy policy explains the safeguards it uses.
7. How long we keep your data
- Profile and astrology data (birth details, questions, purchased readings): kept for as long as you hold a profile with us, until you ask us to delete it, or until [period, e.g. 3 years] after you last used the Services, whichever comes first.
- Payment and invoicing records: kept for six years, as Irish tax law requires.
- Enquiries and emails: kept for up to 2 years after the matter closes.
- Anonymised usage statistics: kept as long as they remain useful, because they do not identify you.
When the retention period ends, we delete or irreversibly anonymise the data.
8. Your rights
You have the right to:
- access the personal data we hold about you and receive a copy. Your profile also shows your astrology data, past readings and questions directly;
- correct inaccurate or incomplete data;
- erase your data. You can ask us to destroy your data, including your whole profile, and we will do so unless the law requires us to keep something, such as payment records;
- restrict our use of your data in certain situations;
- object to processing based on our legitimate interests;
- data portability: receive the data you gave us in a common, machine-readable format;
- withdraw consent at any time, where we rely on it. This does not affect processing already carried out.
To use any of these rights, contact us here. We will respond within one month, and may ask you to confirm your identity first. Deleting your data means we will no longer be able to offer continuity with your earlier readings, and a deletion cannot be undone.
You also have the right to complain to the Data Protection Commission, Ireland’s data protection authority, at dataprotection.ie, or to the supervisory authority in the EU country where you live or work. We would appreciate the chance to put things right first.
9. Security
We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No online system is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to put you at risk, we will tell you and the Data Protection Commission as the law requires.
10. Children
The Services are for people aged 18 and over, and we do not knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we will delete it. A parent or guardian who provides a child’s birth details for a reading does so on the terms set out in our Terms of Service.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always on the Site with its date at the top. If a change significantly affects how we use your data, we will tell you in advance.