Privacy Policy

1. Data controller

Astria Nova Ltd is the controller of the personal data processed through the StarSong service. You can reach us at any time at support@the-star-sense.com.

2. Data we collect

Order data: your name or nickname, email address, and the birth date, birth time and birth place needed to build your chart.

Payment data: transaction identifiers and the billing information required by our payment providers. We do not store full card numbers.

Technical data: IP address, device and browser type, and interaction events collected through cookies and similar technologies.

Support data: the content of messages you send us.

3. Why we process it

To create and deliver your StarSong (performance of a contract); to process payments and keep accounting records (legal obligation); to provide customer support and prevent fraud or abuse (legitimate interests); and to send marketing messages or run analytics where you have given consent.

4. Sharing

We share data only with processors who help us run the service: payment providers, email and hosting providers, analytics tools, and the astrologers and musicians who create your song. All of them act on our instructions under written agreements. We never sell personal data. Where data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses.

5. Retention

Order and birth details are kept for as long as needed to deliver and support your purchase, and afterwards only where required by accounting and tax law (normally up to seven years). Marketing contact data is kept until you withdraw consent. Technical logs are kept for a short period and then deleted or aggregated.

6. Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and object to processing based on legitimate interests. You may withdraw consent at any time, and you may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority. To exercise any right, email us — we respond within 30 days.

7. Security

We use encryption in transit, access controls, and least-privilege practices to protect your data. No online service is completely secure, but we review our safeguards regularly and notify affected users and regulators of qualifying breaches as required by law.

8. Children

The service is not directed at children under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

9. Changes

We update this policy when our processing changes. Material changes are announced on this page, and where required we ask for renewed consent.