Privacy Policy
This privacy policy explains how Spells4Me collects, uses, stores and protects personal information when you visit this website, contact me or purchase a service.
I only collect and use personal information where it is needed to respond to enquiries, provide requested services, process orders, meet legal obligations and operate the website securely.
Who is responsible for your information
Spells4Me is responsible for the personal information collected through this website and in connection with the services provided.
If you have a question, concern or request relating to your personal information, please contact hello@spells4me.com
Information collected
The information collected depends on how you use the website and which service you request. You are only asked to provide information that is relevant to your enquiry, order or chosen service.
Contact information
When you contact Spells4Me, I may collect your name, email address and the contents of your message, together with any further information you choose to provide during our correspondence.
Information for your service
When you place an order, I may collect your questions, intentions, circumstances, preferences and any other details needed to prepare your chosen service. This may include personal or sensitive information that you choose to share. Please only provide information that is relevant to the service you have requested.
Orders, payments and delivery
I may collect details of the service purchased, the amount paid, payment status, order correspondence and, where a physical item is included, your delivery address. Payments are processed by Stripe. I do not receive or store your full card number or card security code.
Website usage and analytics
If you accept analytics cookies, Google Analytics may collect information about how the website is used, including pages visited, session information, approximate location, browser and device information and a cookie-based identifier. This information is used to understand website traffic and improve the site. Google Analytics will not be activated before analytics-cookie consent is given.
How and why information is used
Personal information is only used for the purposes described below. The lawful basis depends on why the information is needed.
Enquiries and communication
Information submitted through the Contact page or by email is used to respond to your enquiry, provide requested information and maintain necessary correspondence. This is based on my legitimate interest in communicating with people who contact Spells4Me and operating the business responsibly.
Preparing and delivering services
Information you provide when ordering is used to review your request, prepare and deliver your chosen service, provide order updates and respond to questions about your purchase. This processing is necessary to take steps at your request before entering into a contract and to fulfil the contract once an order is placed.
Payments and legal records
Order and payment information is used to process your purchase, administer cancellations or refunds and maintain records required for tax, accounting, fraud prevention and other legal obligations. Payments are processed securely through Stripe.
Analytics
Google Analytics will only be used if you actively consent to analytics cookies. Analytics information is used to understand how visitors use the website, identify technical or usability problems and improve the site. You can refuse or withdraw analytics-cookie consent without affecting your ability to use the website or purchase a service.
Sensitive information you choose to share
Some information you choose to provide may be classed as special category data, such as information about your health, religious or philosophical beliefs, sexual orientation or sex life. This information will only be used where it is relevant to the service you requested and you have given explicit consent.
You can withdraw that consent before the information is no longer needed, although I may be unable to prepare or complete the service if the relevant information is necessary for your request.
Who information may be shared with
Personal information is not sold. It is only shared where necessary to operate the website, process payments, provide your service or meet a legal obligation.
Website and email providers
Information may be processed by the companies that provide website hosting, website security, form processing and email delivery. These providers process information only as needed to supply their services and maintain the website.
Stripe
Payment and transaction information is processed by Stripe. Stripe may receive information such as your name, contact details, billing or delivery information, payment-method details, purchase amount and payment status. Spells4Me does not receive or store your full card number or card security code.
Google Analytics
If you accept analytics cookies, website-usage information is processed through Google Analytics. Google Analytics may use a first-party cookie identifier together with session, browser, device and approximate-location information. Personally identifiable information such as names and email addresses will not intentionally be sent to Google Analytics.
Legal and essential disclosures
Information may also be disclosed where reasonably necessary to comply with a legal obligation, respond to a lawful request, prevent fraud, protect the security of the website or establish, exercise or defend a legal claim.
How long information is kept
Personal information is kept only for as long as it is needed for the purpose for which it was collected, unless a longer period is required for legal, accounting or dispute-resolution purposes.
Enquiries and correspondence
Contact-form submissions, emails and related correspondence will normally be deleted within six months of the final response, unless the information is still needed to resolve an ongoing enquiry, complaint or legal issue.
Service and delivery information
Questions, intentions, personal details, recordings, written guidance and delivery information will normally be deleted within six months after the service has been completed and any physical items have been delivered.
Financial records
Only the minimum information needed for tax, accounting, refunds and transaction records will be retained for longer where required. Self-employed business records generally need to be kept for at least five years after the relevant 31 January tax-return deadline.
Google Analytics
Google Analytics user-level and event-level data will be set to the shortest available retention period of two months. This setting does not remove information from standard aggregated reports in the same way, so anonymous or aggregated statistics may remain available for longer.
Information held by Stripe
Stripe controls how long it retains information within its own payment systems. Stripe may retain transaction information after a payment has been completed where needed for legal, regulatory, tax, fraud-prevention and financial-reporting purposes. Further information is available in Stripe’s own privacy policy.
Your data protection rights
Depending on the circumstances and the reason your information is being used, you may have the following rights in relation to your personal information.
Access and correction
You may ask for a copy of the personal information held about you. You may also ask for inaccurate information to be corrected or incomplete information to be completed.
Deletion and restriction
In some circumstances, you may ask for your personal information to be deleted or for the way it is used to be restricted. These rights do not always apply where information must be retained for legal, accounting or dispute-resolution purposes.
Portability and consent
Where information is processed electronically on the basis of your consent or a contract, you may have the right to receive information you provided in a portable format. Where processing relies on consent, you may withdraw that consent at any time.
Your right to object
You may object to the use of your personal information where it is processed on the basis of legitimate interests. Your objection will be considered carefully, and the processing will stop unless there is a compelling lawful reason for it to continue.
Making a request
To exercise any of these rights, email hello@spells4me.com and explain what you are requesting. You may be asked for enough information to confirm your identity before personal information is disclosed or changed.
Cookies and similar technologies
This website may use cookies and similar technologies to provide essential functions, remember your choices, process payments securely and, with your consent, understand how the website is used.
Essential cookies
Essential cookies may be used for website security, form operation, remembering cookie preferences and other functions needed for the website to work correctly. These cookies cannot be switched off through the website’s cookie controls.
Analytics cookies
Google Analytics cookies will only be activated if you actively accept analytics cookies. They are used to understand visitor numbers, pages viewed, how visitors reach the website and how the site performs. Refusing analytics cookies will not prevent you from using the website or purchasing a service.
Payment-related cookies
Stripe may use cookies and similar technologies when you visit or interact with its payment pages. These may be used to process payments, prevent fraud, maintain security, authenticate users and support features such as Link.
Managing your choices
When you first visit the website, you will be able to accept or reject optional analytics cookies. You can change your selection later through the website’s cookie settings. You can also delete or block cookies through your browser, although blocking essential cookies may affect how some parts of the website work.
International transfers and security
Some companies used to operate this website, process payments and provide analytics may store or access personal information outside the United Kingdom.
International processing
Where personal information is transferred outside the United Kingdom, the relevant provider is expected to use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, together with appropriate protections for the information.
Keeping information secure
Reasonable technical and organisational measures are used to protect personal information from unauthorised access, alteration, disclosure or loss. These measures include secure website connections, protected accounts, limited access and reputable payment, hosting and email providers.
No method of transmitting or storing information can be guaranteed to be completely secure. If a security incident affects your personal information and notification is required, you will be contacted using the details available.
Contact, complaints and policy updates
Privacy questions and requests
If you have a question about this policy, want to exercise a data protection right or have a concern about how your information has been handled, email hello@spells4me.com
Data protection complaints
You can make a data protection complaint by email. Please explain what has happened and what you would like me to do. Your complaint will be acknowledged within 30 days, considered appropriately and answered as clearly as possible.
Complaining to the ICO
If you remain dissatisfied after raising your concern with Spells4Me, you have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.
Changes to this policy
This policy may be updated if the website, services, legal requirements or organisations used to process information change. The latest version will always be published on this page with the date it was last updated.
Last updated: 19 August 2026