Privacy Policy
Last updated: 19 October 2026
1. Who is responsible
The data controller is Zhang Yang, contactable at support@bazidesk.com. This policy covers this website and the readings generated through it.
2. What we collect
- Birth data — date, time, and place of birth. Required to compute a chart.
- Email address — to deliver a report and to respond to you.
- Order data — what you bought, when, and an order reference. Received from our merchant of record; it does not include your card number.
- Technical data — IP address, browser type, and pages visited, in aggregated form for keeping the site working.
- Local browser storage — the last birth details you entered, stored on your own device so the form is pre-filled next time. It never leaves your browser unless you submit the form.
3. Why we use it, and on what legal basis
- To generate and deliver your reading — performance of a contract (Art. 6(1)(b) GDPR).
- To answer your messages and handle refunds — performance of a contract and our legitimate interest in supporting customers (Art. 6(1)(b) and (f)).
- To keep the service secure and working — legitimate interest (Art. 6(1)(f)).
- To send you anything promotional — only with your consent (Art. 6(1)(a)), which you can withdraw at any time. We do not add you to a list because you bought a reading.
4. Who we share it with
- Our merchant of record — processes payment, issues invoices, calculates and remits sales tax and VAT, and is the legal seller on the transaction. It receives your email and order details, not your full card number.
- Our email provider — sends your report and transactional messages.
- Our hosting provider — serves the site and stores the generated report.
We do not sell personal data, and we do not share it with advertising networks or data brokers.
5. International transfers
Our providers may process data outside your country, including in the United States and the European Union. Where data leaves the EEA or the UK, transfers rely on Standard Contractual Clauses or an equivalent lawful mechanism.
6. How long we keep it
- Birth data and generated reports: up to 24 months from your last interaction, so you can return to your report.
- Order and tax records: as long as tax law requires, typically 7 years.
- Support correspondence: 24 months.
You can ask for earlier deletion at any time, subject to records we are legally required to keep.
7. Your rights
Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive it in a portable format; and withdraw consent. To exercise any of these, email support@bazidesk.com with the subject "Privacy request". We respond within 30 days.
If you are in the EEA or the UK, you also have the right to complain to your national data protection authority. If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" of personal information — we do not sell personal information, so there is nothing to opt out of.
8. Cookies
We do not use advertising or cross-site tracking cookies. The site uses your browser's local storage to remember the birth details you entered, which is a functional feature, not tracking. If we add analytics that set cookies, we will ask for consent first and update this policy.
9. Children
The service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact us and we will delete it.
10. Security
Data is transmitted over encrypted connections and stored with access limited to what is needed to operate the service. No system is perfectly secure, but we do not store payment card data at all, which removes the largest category of risk.
11. Changes
If this policy changes materially, the "last updated" date above changes and, where appropriate, we will notify buyers by email.
12. Contact
support@bazidesk.com