Your birth details and what we do with them
Last updated
What we collect
To prepare a personal report we ask for:
- your name, as you want it printed on the cover;
- your date of birth;
- your time of birth, if you know it (optional; without it the report is shorter and has no houses or Rising sign);
- your place of birth, chosen from a list so that we get the right coordinates and time zone;
- your email address, so we can send the report.
For the Destiny Matrix report we only need your name, your date of birth and your email. Time and place of birth are not part of that calculation and we do not ask for them.
We do not ask for your gender, your address, your phone number, or any ID or age verification. We do not ask for health, religious or political information, and please do not send us any.
Why we collect it
- To calculate and write your report. This is the whole purpose; without these details there is no product.
- To deliver it to you and to re-send it if the email goes missing or the download link has expired.
- To rebuild your report if you tell us the details were wrong, or if you send us your birth time later.
- To send you emails about astrology, but only if you separately asked for that. Buying a report does not subscribe you to anything.
Legal basis: performing the contract you entered into when you ordered the report. For the newsletter, your consent, which you can withdraw at any time.
Where it is stored
- Shopify processes the order and the payment and stores the order record, including the birth details you entered.
- Cloudflare runs the software that calculates the chart and builds the PDF, and stores the finished file so you can download it.
- Our email provider stores your email address and the message with your report.
- Etsy, if you ordered through Etsy: in that case your details reach us through Etsy's own messaging, under Etsy's privacy policy.
All of these are processors acting on our instructions. We do not sell your data, we do not share it with advertisers, and we do not use your birth details to target ads.
How long we keep it
- Birth details and the finished report: 12 months from the date of your order, so that we can re-send your report or correct it during the first year. After that we delete both: the PDF is removed from our storage, and the internal record that points to it is deleted.
- A bookkeeping record survives, anonymised. After the 12 months we keep only the order number, the order date, which report was bought, whether it was delivered, and a one-way hash of your email address, not the address itself, for accounting only. This record never held your name, birth date, time or place, and it cannot be used to rebuild your report or identify you.
- Order and payment records: as long as Polish tax law requires us to keep them. These records include your name and email, not your time and place of birth.
- Newsletter subscription: until you unsubscribe.
Cookies and analytics
On esotorium.com we use cookies for two things only: to remember your cookie choice, and, if analytics is allowed, for Google Analytics. We don't use advertising cookies, and nothing on this site is used to show you ads.
eso_consent(necessary): remembers the choice you made on the cookie banner, so we don't ask on every page. Kept for 6 months; after that we ask again._ga(analytics, Google Analytics): a random identifier that lets Google Analytics recognise repeat visits from the same browser. Kept for 2 years._ga_EPBX5533K6(analytics, Google Analytics): keeps track of the current visit. Kept for 2 years.
What analytics tells us: which pages are visited, how visitors reach us (for example from a search engine or a link with campaign tags), which free tools are used, and whether a visit ends in an order. We never send your name, email address or birth details to Google Analytics.
Orders. When analytics is allowed, the order form passes the identifier from the _ga cookie and the number of the current visit along with your order. After payment our server reports the purchase to Google Analytics (order number, products, amount and currency) with that identifier, so that we can see which page led to the order. If you refused analytics cookies, nothing about your order is sent to Google Analytics.
Your choice. In the European Economic Area, the UK and Switzerland (and whenever we cannot tell where you are), Google Analytics is not loaded at all until you allow it: before that, your browser sends nothing to Google. Elsewhere analytics cookies are on unless you refuse; if you refuse, Google Analytics can still receive a basic signal that a page was viewed, without cookies or a lasting identifier (Google calls this consent mode). We work out the country from your connection when the page is served and do not store it. You can change your choice at any time with Cookie settings, also at the bottom of every page. If you withdraw your consent, we delete the Google Analytics cookies from your browser. Legal basis for analytics cookies: your consent.
Fonts are served from our own server: opening a page does not contact Google Fonts or any other font service.
Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google may process this data in the United States.
Browser storage that is not a cookie. If you arrive through a link with campaign tags (utm_…, gclid, fbclid), we keep those tags in this tab's session storage (eso_utm) and add them to links to our checkout, so the order is credited to the right campaign. If you move from one of our calculators to an order form, the details you entered are kept in session storage (eso_order_prefill) until the order form reads them, so you don't have to type them again. Session storage is deleted at the latest when you close the tab.
The checkout at shop.esotorium.com runs on Shopify, which uses its own cookies; this section covers esotorium.com only.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it. You can ask us to delete your birth details before the 12 months are up: write to hello@esotorium.com. We reply within 24 hours, and we delete the birth details and the report within one month of your request, usually within a few days. Deleting your birth details means we can no longer rebuild your report, so download it first.
You can also object to how we process your data, ask for a copy in a portable format, and complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) if you think we have got something wrong.
Who is responsible
The seller named at the bottom of this page is responsible for your data. Contact for any privacy question: hello@esotorium.com. We reply within 24 hours.
Esotorium reports and tools are for self-reflection and entertainment. They are not medical, psychological, financial or legal advice, and they do not predict events.