Privacy Policy

1. Who We Are

Data Controller: Arise Numero
Contact: privacy@arisenumero.com
Address: Mumbai, Maharashtra, India

If you are located in the European Union, Arise Numero acts as the data controller responsible for your personal data as defined under GDPR Article 4(7).

2. Data We Collect

We collect the following categories of personal data:

2.1 Data You Provide Directly

• Purchase data: Name, email, shipping address, phone number, order details
• Payment data: Payment is processed via third-party PCI-DSS gateways (Stripe, PayPal, Razorpay). We do not store raw card details
• Numerology data: Full birth name and date of birth, collected strictly to calculate your numeric blueprint
• Communication data: Messages sent via our contact form
• Account data: Email and password if you create an account (passwords are hashed)
• Marketing preferences: Whether you opt in to receive promotional emails

2.2 Data Collected Automatically

• Usage data: Pages visited, time on site, referring URLs (via analytics cookies, only if you consent)
• Technical data: IP address, browser type, device type, operating system
• Cookie data: See Section 6 below

3. How We Use Your Data

4. Legal Basis for Processing (GDPR)

For users in the EEA or UK, we rely on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to fulfil your order or service
• Consent (Art. 6(1)(a)): Marketing emails and non-essential analytics cookies — you may withdraw consent at any time
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, site security, and improving our services
• Legal obligation (Art. 6(1)(c)): Where required by applicable law

5. Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors: Stripe, PayPal, Razorpay (PCI-DSS compliant)
• Shipping carriers: To fulfil and track your delivery
• Email service provider: To send order confirmations and communications
• Analytics provider: Only if you consent to analytics cookies
• Legal authorities: Where required by law or court order

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

6. Cookies

We use the following types of cookies:

You can manage cookie preferences via the banner shown on your first visit, or by adjusting your browser settings. Withdrawing consent does not affect the lawfulness of prior processing.

7. Data Retention

• Order data: Retained for 7 years for legal and tax compliance
• Numerology data: Retained only as long as needed to deliver your reading, then deleted
• Marketing data: Until you unsubscribe or withdraw consent
• Contact form data: 12 months after resolution of your enquiry
• Analytics data: Aggregated and anonymised; individual sessions not retained beyond 26 months

8. Your Rights (GDPR & UK GDPR)

If you are in the EEA or UK, you have the following rights:

• Right of access: Request a copy of the data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Request that we restrict processing of your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: At any time, where processing is based on consent

To exercise any of these rights, contact us at privacy@arisenumero.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

9. California Residents — CCPA Rights

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — Note: we do not sell personal information
• Non-discrimination for exercising your CCPA rights

To submit a CCPA request, email privacy@arisenumero.com with the subject line "CCPA Request".

10. Security

We implement appropriate technical and organisational security measures including:

• HTTPS / SSL/TLS encryption for all data in transit
• PCI-DSS compliant payment gateways — card data never stored on our servers
• Hashed passwords — stored passwords are never stored in plain text
• Access controls — data is accessible only to personnel who need it
• Regular security reviews

No system is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities as required by applicable law.

11. Children's Privacy

Our website and services are not directed at children under the age of 16 (or 13 in the US). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us at privacy@arisenumero.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email (if you have an account) or by placing a prominent notice on our website. Your continued use of the site after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: