The short version: we ask only for what we need to give your reading, we keep it locked up, and we delete it after 30 days. Here's the detail.
Minnie Mystical Readings is a small, one-person service. In the formal language of data law, that person is the "data controller" — the one responsible for your information. If you have any question about your data, write to hello@minniemysticalreadings.com.
When you book a reading, we ask for:
That's all of it. We never see or store your card details — payment is handled entirely by Stripe, a separate company.
Your question and focus are what the reading is made from — without them there's nothing to deliver, so that's the contract between us. Your name and email are how the reading reaches you and how we confirm your booking. The voice note, where you choose to give one, lets Minnie hear your question in your own words; it is heard only by Minnie and never shared further.
We also keep your IP address briefly, to protect the site from abuse and to spot anyone buying readings in bulk to resell. That falls under what the law calls "legitimate interest" — keeping the service safe.
We don't sell, rent or trade your data, and we don't send marketing emails.
Two outside services touch your data, and each sees only the smallest slice it needs:
Your reading itself is prepared by Minnie — a person, not an algorithm — and is never passed to a third-party AI or model.
Everything is encrypted twice over: in transit (HTTPS), and before it's written to disk. The encryption key is kept separate from the data. If someone broke into the server, they'd find scrambled files — not your question or voice note.
Your order — your name, email, question, focus, any voice note, and the finished reading — is deleted 30 days after you order. This happens automatically, every day, with no exceptions. Nothing sits around "just in case."
If you'd like it gone sooner, just ask and we'll delete it (within 30 days of your request).
Under UK and EU data law, you can ask us at any time to:
Email hello@minniemysticalreadings.com and we'll sort it, and confirm in writing. You can also complain to the UK's data regulator, the ICO, at ico.org.uk.
We use Google Analytics to understand which pages are useful. It sets a small cookie to count visits; we don't use it to follow you around the web, and we run no advertising trackers. Two other outside services may set the cookies they need: Stripe, to take your payment, and Google Fonts, to serve the typeface.
Last updated: September 2026