Privacy Notice

Who we are

Charm and Soul is a brand by Sparkles by Olivia Manila, based in the Philippines. We prepare personalised astrology readings at charmandsoulph.com. We are the personal information controller for the data described here, and we handle it in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, the "DPA").

What we collect, and why

We collect only what we need to prepare your reading and run our service:

• Your name — to address the reading to you and identify your order.
• Your email address — to deliver readings, send order and account messages, and reply to you.
• Your date, time, and place of birth — the chart is calculated from these. Your place of birth is converted into map coordinates so the chart can be cast accurately to your location.
• Your phone number and Instagram handle (optional) — only if you choose to give them, so we can reach you or recognise you on Instagram.
• Payment information — handled by our payment processor (Stripe). We do not see or store your full card number; we keep a record that an order was paid.
• Basic usage data — through analytics, to understand how the site is used and keep it working (see "Cookies and analytics" below).

We ask for your birth details because, without them, a personalised astrology reading cannot exist. Giving them is your choice, and that choice is the basis on which we prepare your reading.

How your birth data and AI are used to write a reading

Your birth details are used to calculate your astrological chart, and that chart is then turned into a written reading. The reading text is generated with the help of an AI service, Google Gemini, working from your chart together with templates and editorial guidance written by Charm and Soul. Every reading is prepared for one reader and reviewed before it reaches you. Charm and Soul does not use your data to train any AI model. The chart details we send to our AI provider to generate your reading are handled under that provider's own terms; if you would like us to use a processing tier that contractually excludes using your inputs to improve their models, contact us and we will accommodate that.

The third parties who help us run the service

To deliver the service we share the minimum necessary data with a small set of trusted processors. Some of them operate outside the Philippines, which means your data may be processed abroad under appropriate safeguards:

• Stripe — processes card payments.
• A geocoding service — converts your place of birth into map coordinates so the chart can be cast correctly.
• Google Gemini — the AI service that helps generate the reading text from your chart.
• ZeptoMail — sends our transactional emails (order updates, delivery notices, account messages).
• Vercel and Neon — host our website and store our database.

We do not sell your personal data, and we do not share it for unrelated advertising.

Our legal basis

For preparing and delivering your reading, our basis is your consent and the performance of our agreement with you. For service messages about your order or account, and for keeping the service secure and working, we also rely on our legitimate interests as a business, balanced against your rights. You can withdraw consent at any time (see "Your rights" below); doing so does not affect processing that already took place.

Cookies and analytics

We use a small number of cookies and similar technologies to keep the site working and to understand how it is used. For analytics we use Google Analytics 4 and Vercel Analytics. These help us see which pages are visited and how the site performs, so we can improve it. We do not use them to build advertising profiles of you.

How long we keep your data

We keep your account and reading data for as long as you have a relationship with us, so your library of readings stays available to you. We keep records of orders and payments for as long as we are required to for tax, accounting, and legal reasons. When data is no longer needed, we delete or anonymise it. You can ask us to erase your data sooner (see below).

Your rights under the Data Privacy Act

As a data subject under the DPA, you have the right to:

• be informed about how your data is collected and used;
• access the personal data we hold about you;
• correct any data that is inaccurate or out of date;
• erase or block your data where it is no longer needed or was unlawfully processed;
• object to certain processing, and to withdraw consent;
• data portability — receive a copy of the data you gave us; and
• lodge a complaint with the National Privacy Commission of the Philippines if you believe your rights have been infringed.

To exercise any of these rights, write to us at hello@charmandsoulph.com and tell us what you would like. We may need to confirm your identity first, and we will respond within a reasonable time.

How we keep your data safe

We use reasonable organisational and technical measures to protect your data — encrypted connections, access controls, and reputable hosting and payment providers. No service can promise perfect security, but we take the care your data deserves, and we will tell you and the authorities if a breach ever seriously affects you, as the DPA requires.

Minors

Our service is for adults. You must be at least 18 to order or hold an account, and we do not knowingly collect data from anyone under 18. If you believe a minor has given us data, please contact us and we will remove it.

How to reach us

For any privacy question, or to exercise your rights, write to Charm and Soul (Sparkles by Olivia Manila) at hello@charmandsoulph.com. We read every message and a real person will reply.