Privacy Policy

Last Updated: July 2, 2026

1. Introduction

I Ching Master Li ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and password when you create an account
Payment Information: Billing details (processed securely through third-party payment processors — we do not store full payment card numbers)
Profile Information: Date of birth, birth place, birth time (when you request BaZi readings), and preferences you choose to share
Communications: Messages you send us, including support inquiries and feedback
Reading History: Your past readings, queries, and saved journal entries

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the Service, clickstream data
Device Information: IP address, browser type, operating system, device type
Cookies & Tracking Technologies: See our Cookie Policy for details

3. How We Use Your Information

We use your information to:

Provide, personalize, and improve your I Ching readings, BaZi charts, and Feng Shui insights
Process subscriptions and one-time payments
Send service-related communications (e.g., confirmation emails, renewal reminders)
Respond to your inquiries and support requests
Analyze usage patterns to improve user experience
Detect, prevent, and address technical issues or fraudulent activity
Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contractual Necessity: To fulfill our service agreement with you
Legitimate Interests: To improve our Service and ensure security
Consent: For cookies and marketing communications (where required)
Legal Obligation: To comply with applicable laws

5. Data Sharing & Third Parties

We do not sell your personal information to third parties.

We may share your data with trusted third-party service providers who assist us in operating the Service, including:

Payment Processors: Stripe, PayPal (or equivalent) — for subscription and payment processing
Hosting & Infrastructure: Cloud service providers for website hosting and data storage
Analytics: Tools to help us understand how the Service is used (e.g., Google Analytics — anonymized where possible)
Email Services: For transactional and support communications

All third-party providers are contractually bound to protect your data and use it only for the purposes we specify.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion or subscription cancellation, we retain data only as necessary for legal obligations (e.g., tax records for payment history) and then securely delete it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data ("Right to be Forgotten")
Restriction: Limit how we process your data
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain processing activities (e.g., marketing)
Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@example.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures, including:

SSL/TLS encryption for data transmission
Encrypted storage of sensitive data
Regular security audits
Access controls and authentication protocols

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in countries other than your own. When transferring data from the EEA, we use Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure adequate protection.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website. Continued use after changes constitutes acceptance of the revised policy.

12. Contact

Data Controller: I Ching Master Li

Email: privacy@example.com

For California Residents (CCPA/CPRA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal information.

For EEA Residents (GDPR): You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.