Privacy policy
PRIVACY POLICY — THE NATAL SCRIBE
Last updated: September 23, 2026
1. WHO WE ARE
The Natal Scribe (the "Services") is operated by Eliza Dierzawina, an individual established in France, acting as the data controller for the personal information described in this Privacy Policy ("we", "us", "our").
Our store is hosted by Shopify, which processes personal information on our behalf.
Contact for all privacy matters, including data subject requests: hello@thenatalscribe.com
This Privacy Policy describes how we collect, use, disclose and retain your personal information when you visit or use the Services, purchase from us, or otherwise communicate with us. Please read it carefully. By using the Services you acknowledge that you have read it.
2. PERSONAL INFORMATION WE COLLECT
"Personal information" means information that identifies or can reasonably be linked to you.
| Category | What it includes | Where it comes from |
|---|---|---|
| Birth data | Date of birth, time of birth (optional), place of birth (country, state or region, city), and the name you ask us to place on the record | You, through our intake or sample forms |
| Derived astrological data | Geographic coordinates of your birth place, the historical timezone of your birth moment, computed planetary positions, house cusps and aspects, and the text of the document generated from them | Computed by us and our processors from your birth data |
| Identifiers and contact details | First name, surname where provided, email address, billing address, order number | You, and Shopify at checkout |
| Commercial information | Products purchased, order value, currency, discount or referral codes used, refund and support history | Shopify, and our own records |
| Financial information | Payment method type, last four digits, transaction result. We never receive or store your full card number | Our payment processors |
| Quiz and lead data | Email address, first name, quiz answers, and any birth data you choose to provide before purchasing | You |
| Marketing preferences | Whether you consented to email correspondence, and when | You, via Shopify checkout, our forms, or Klaviyo |
| Usage, device and cookie data | IP address, browser and device type, pages viewed, referral source, advertising identifiers | Cookies and similar technologies, described in Section 10 |
We do not collect physical shipping addresses. All products are digital.
3. HOW YOUR BIRTH DATA IS PROCESSED
Your document is produced by an automated workflow. Your data passes through the following processors, each performing one narrow task:
| Processor | Function | Location |
|---|---|---|
| Shopify | Store hosting, checkout, order records | Canada / United States |
| Make (Celonis) | Orchestrates the automated workflow | European Union |
| OpenStreetMap Nominatim | Converts your birth place into geographic coordinates | European Union |
| TimeZoneDB | Determines the historical timezone of your birth moment | United States |
| FreeAstrologyAPI | Computes planetary positions, house cusps and aspects | India |
| OpenAI | Generates the text of your document from the computed chart, through its API | United States |
| Google Workspace (Drive, Slides, Gmail, Sheets) | Assembles the final document and delivers it to you; stores the record of how our chart page was used | United States |
| Klaviyo | Stores your email address, first name and related properties for delivery and correspondence | United States |
| Meta Platforms | Advertising measurement, where you have consented to advertising cookies. Birth data is never sent to Meta | United States |
Data sent to our AI provider is used solely to generate your document. We use API services under terms that do not permit your data to be used to train publicly available models. Some processors retain data briefly for abuse monitoring under their own policies, after which it is deleted on their side.
We may add or replace processors. Where we do, we apply equivalent contractual protections and update this list.
4. HOW WE USE PERSONAL INFORMATION
- To calculate your chart and generate, assemble and deliver the document you purchased or requested
- To process payments, issue receipts and handle refunds
- To provide customer support and respond to your messages
- To keep your birth data on file so that future records can be computed without asking you again, where you have asked us to do so
- To send you email correspondence, where you have consented or where permitted for our existing customers, always with an unsubscribe link
- To measure and improve our advertising, using usage and device data only
- To detect, prevent and investigate fraud, abuse and security incidents
- To comply with legal, tax and accounting obligations
We do not use your birth data or the content of your document for advertising, and we do not disclose either to advertising platforms.
5. LEGAL BASES (EU/EEA AND UK)
Where the GDPR or UK GDPR applies:
| Processing | Legal basis |
|---|---|
| Computing and delivering the document you purchased | Performance of a contract, Art. 6(1)(b) |
| Collecting birth data before any purchase (quiz, free sample pages) | Your consent, Art. 6(1)(a) |
| Email marketing to prospects | Your consent, Art. 6(1)(a) |
| Email correspondence with existing customers about similar products | Legitimate interests, Art. 6(1)(f), and applicable electronic marketing rules |
| Security, fraud prevention, basic analytics | Legitimate interests, Art. 6(1)(f) |
| Recording how our chart page is used: the steps reached, the answers chosen and the birth details entered, under a random visit number, so that we can understand and improve the page | Legitimate interests, Art. 6(1)(f). You may object at any time by emailing us |
| Retaining transaction records | Legal obligation, Art. 6(1)(c) |
| Advertising and analytics cookies | Your consent, given through our cookie banner |
You may withdraw consent at any time, with effect for the future, by emailing us or using the unsubscribe link. Withdrawal does not affect processing carried out before withdrawal.
6. SENSITIVE INFORMATION
Your birth data is not, by itself, health data, sexual orientation data, or any other special category of personal information.
However, parts of the document we generate discuss subjects including the body, the nervous system, intimacy and relationships. Those passages are interpretive writing produced from astrological calculation. They are not, and must not be treated as, statements of fact about your health, your sexual orientation, or your sex life, and they are not medical, psychological, legal or financial advice.
We do not use these passages to profile you, we do not derive marketing segments from them, and we do not disclose them to anyone other than you.
Where the California Consumer Privacy Act applies, we do not use or disclose sensitive personal information for purposes beyond those permitted under Cal. Civ. Code 1798.121(a).
7. AUTOMATED PROCESSING AND ARTIFICIAL INTELLIGENCE
Your document is generated automatically. A computed chart is passed to a generative language model through a commercial API, and the resulting text is assembled into the final document.
This automated processing does not produce any decision that has legal effects concerning you or that similarly significantly affects you within the meaning of Art. 22 GDPR. The output is an interpretive document supplied for personal reflection and entertainment.
You may contact us at any time to ask how your document was produced, to challenge its content, or to request that it be regenerated or erased.
8. HOW WE DISCLOSE PERSONAL INFORMATION
We disclose personal information only as follows:
Service providers. To the processors listed in Section 3, so that they can perform services on our behalf, under contracts that restrict them to our instructions.
Payment providers. To process your transaction and to prevent fraud.
Professional advisers. To our accountants, auditors and lawyers, where necessary and under a duty of confidentiality.
Legal requirements. Where required by law, court order or lawful request, or where necessary to establish, exercise or defend legal claims, or to protect the rights and safety of The Natal Scribe, our customers, or others.
Business transfers. If the Services or the business operating them are involved in a merger, acquisition, investment, financing, reorganisation, incorporation into a new legal entity, sale of all or part of the assets, insolvency or a similar transaction, personal information we hold may be reviewed under confidentiality obligations as part of due diligence and may be transferred to the counterparty or successor entity as part of that transaction. Any successor will be bound by this Privacy Policy in respect of the information it receives, unless and until you are notified of a material change and, where required by law, your consent is obtained.
We do not sell your personal information, and we do not disclose your birth data or your document to advertisers or data brokers.
9. "SALE" AND "SHARING" UNDER US STATE LAW
We do not sell personal information for money.
Certain US state privacy laws define "sale" and "sharing" broadly enough to include the use of advertising cookies that transmit browsing data to advertising partners such as Meta and Google. To the extent our use of advertising cookies constitutes "sharing" for cross-context behavioural advertising under those laws, you may opt out at any time by:
- rejecting advertising cookies in our cookie banner
- enabling the Global Privacy Control signal in your browser, which we honour as an opt-out
- emailing hello@thenatalscribe.com
Birth data, derived astrological data and the content of your document are never included in any such transmission.
Where we offer free sample pages in exchange for an email address, this may constitute a financial incentive programme under Californian law. Participation is voluntary, you may withdraw at any time, and the value to us of the personal information provided is reasonably related to the cost to us of producing and delivering the sample.
10. COOKIES AND ADVERTISING
We use cookies and similar technologies that are strictly necessary to operate the store and process orders, and, subject to your consent, cookies for analytics and advertising, including the Meta pixel and Conversions API.
You can accept or reject non-essential cookies through our cookie banner and change your choice at any time. Rejecting them does not affect your ability to purchase or to receive your document.
We honour the Global Privacy Control signal where your browser sends one.
11. RETENTION
| Data | Retention period |
|---|---|
| Birth data and derived astrological data | Retained for 24 months after delivery, so that we can reissue your record and support you, and then erased. Erased earlier on request. |
| Birth data and derived astrological data, where you did ask us to keep them on file | Retained until you ask us to erase them |
| Generated documents | Same period as the birth data they were produced from |
| Birth data submitted through free forms or our chart page without a purchase, and the record of how the chart page was used | Erased 12 months after collection, or earlier on request |
| Order and transaction records | Retained as required by applicable tax and accounting law |
| Email marketing records and consent records | Until you unsubscribe, plus a minimal suppression record retained indefinitely so that we can continue to honour your opt-out |
| Customer support correspondence | 24 months |
| Automation and server logs containing personal information | 7 days |
| Cookie and analytics data | As set out in our cookie banner, and no longer than 24 months |
Where you request erasure, we erase your birth data and your generated documents from our active systems within 30 days. We may retain the minimum records required to comply with legal obligations, to establish or defend legal claims, and to continue honouring your marketing opt-out.
12. SECURITY
We apply access controls, encryption in transit, limited retention and least-privilege access to protect your personal information. Access to birth data and generated documents is restricted to the accounts required to operate the Services.
No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, and will notify you without undue delay where the law requires it.
13. INTERNATIONAL TRANSFERS
We are established in France. Some of our processors are located outside the European Economic Area, including in the United States and India, as set out in Section 3.
Where personal information is transferred outside the EEA or the UK, we rely on recognised safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where applicable, the EU-US Data Privacy Framework and its UK extension. You may request a copy of the relevant safeguards by emailing us.
14. YOUR RIGHTS (EU/EEA AND UK)
You have the right to:
- access the personal information we hold about you and receive a copy
- rectify inaccurate or incomplete information
- erase your personal information, including your birth data and your generated documents
- restrict or object to processing, including processing based on legitimate interests, and to object to direct marketing at any time
- portability: receive your data in a structured, commonly used, machine-readable format
- withdraw consent at any time, with effect for the future
- lodge a complaint with a supervisory authority. Where we are established, this is the Commission Nationale de l'Informatique et des Libertes (CNIL) in France. You may also complain to the supervisory authority of the country in which you live or work. In the United Kingdom this is the Information Commissioner's Office
To exercise any right, email hello@thenatalscribe.com. We respond to verified requests within 30 days and we do not charge for this. We may ask you to confirm the email address associated with your order in order to verify your identity.
15. YOUR RIGHTS (UNITED STATES)
Depending on your state of residence, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware and other states with comprehensive privacy laws in force, you may have the right to:
- know what personal information we collect, use, disclose and share, and the categories of sources and recipients
- access and obtain a copy of your personal information
- delete your personal information
- correct inaccurate personal information
- opt out of "sale", "sharing", or targeted advertising
- limit the use of sensitive personal information
- appeal a refusal of any of the above, where your state provides an appeal right
We do not discriminate against you for exercising any of these rights.
To exercise them, email hello@thenatalscribe.com with the subject line "Privacy Request". You may use an authorised agent where your state permits, in which case we will require written proof of authorisation. If we decline a request, you may appeal by replying to our decision, and we will respond to the appeal within the period your state law requires.
16. CHILDREN
The Services are intended for individuals aged 18 or over. Our intake form calculates your exact age from the date of birth you submit and will not accept a submission from a person under 18. We do not knowingly collect personal information from anyone under 18.
If you believe a person under 18 has provided us with personal information, contact us and we will erase it promptly.
17. CHANGES TO THIS POLICY
We may update this Privacy Policy. The "Last updated" date reflects the current version. Where a change is material, we will post a notice on this page and, where required, notify you directly and obtain your consent.
18. CONTACT
The Natal Scribe Operated by Eliza Dierzawina, France Email: hello@thenatalscribe.com
As a digital-first archive, all support, inquiries and data requests are handled by email.