Privacy policy

Last updated: June 2026

Your privacy matters to us. This Privacy Policy explains what personal information we collect when you visit afinamystic.com or make a purchase, how we use it, and how we keep it safe.

By using the Site or placing an order, you agree to the practices described here.

1. What We Collect

Information you provide

Your name and email address
Order details, including personalisation information submitted with your reading such as your date of birth or questions
Account login details if you create an account
Messages you send us through email or contact forms
SMS consent and preferences if you opt into text messages

Information collected automatically

Pages visited, time on site, and how you navigate the Site
Device type, browser, IP address, and time zone
Referring sites and search terms
Cookie and tracking data — see Section 4

Information from third parties

We receive limited data from our service providers, including Shopify who powers our store, and our payment processor. Payment card details are handled entirely by our payment processor and are never stored by us.

2. How We Use Your Information

We use your information to:

Fulfil your order and deliver your reading or product
Process payments and send order confirmations
Manage your account and Follow-Up Membership, including subscription billing
Send you support messages, reminders, and updates related to your order
Send marketing emails or SMS messages where you have given consent
Show relevant ads on platforms such as Meta, TikTok, Snapchat, and Google
Measure how our advertising and website are performing using analytics tools including Google Analytics
Prevent fraud and keep the Site secure
Comply with legal obligations

We may use proprietary tools and methods to assist with drafting and quality-checking readings and communications. We limit the personal data involved and require all vendors to handle it responsibly.

3. Who We Share It With

We do not sell your personal information. We share it only where necessary to run our business:

Shopify — our store platform. See shopify.com/legal/privacy
Our payment processor — to securely handle your payment
Email and SMS delivery providers — to send transactional and marketing messages
Advertising platforms — Meta, TikTok, Snapchat, and Google Ads, to measure and deliver advertising
Analytics providers — including Google Analytics, to understand how the Site is used
Legal or regulatory authorities — where required by law

All providers who handle your data on our behalf are required to do so responsibly and in accordance with applicable data protection law.

4. Cookies and Advertising

We use cookies and similar tracking technologies to operate the Site, remember your preferences, and measure the performance of our advertising.

Our advertising partners including Meta, TikTok, Snapchat, and Google may place cookies or pixels on the Site to show you relevant ads on their platforms and to measure how our campaigns perform. These technologies may associate your visit with your profile on those platforms.

You can control cookies through your browser settings. You can also manage your ad preferences directly through each platform's privacy settings. Disabling certain cookies may affect how the Site functions.

For details of cookies placed by Shopify, see shopify.com/legal/cookies.

5. SMS Messages

If you opt in to SMS, you agree to receive recurring automated marketing messages from us. Consent is not a condition of purchase. Message and data rates may apply.

To opt out at any time, reply STOP to any message. For help, reply HELP.

6. Data Retention

We keep order and account records for as long as needed to provide our services and meet legal obligations. We keep marketing data until you opt out or it is no longer useful. We delete or anonymise data when it is no longer required.

7. International Transfers

Some of our service providers operate outside the European Economic Area. Where your data is transferred internationally we ensure appropriate safeguards are in place, including Standard Contractual Clauses or transfers to countries with an adequacy decision.

8. Your Rights

Depending on where you are based, you may have rights regarding your personal information — including the right to access, correct, delete, or port your data, and to object to or restrict certain uses. Where we rely on your consent you can withdraw it at any time.

Email marketing: use the unsubscribe link in any email
SMS marketing: reply STOP to any message
Cookies and ads: use your browser settings or the relevant platform's privacy settings

To exercise any of your rights, contact us at afina@afinamystic.com. We may need to verify your identity before proceeding. If you are unhappy with how we handle your data, you have the right to contact your local data protection authority.

9. Children

Our services are for adults aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided us with their information, please contact us at afina@afinamystic.com and we will delete it promptly.

10. Security

We take reasonable technical and organisational steps to protect your personal information. No method of online transmission is completely secure and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page and the date at the top reflects when it was last revised. Continued use of the Site means you accept any updates.