Privacy Policy

1. Data Controller

The data controller for personal information collected on petitlenormand.com is Isabelle Nguyen.

This Privacy Policy applies to the website petitlenormand.com and to the services, products, communications, and customer support connected to it.

2. Scope of This Policy

Petit Lenormand offers educational content about the Petit Lenormand, free interactive readings, paid interactive readings, deferred questions answered manually, consultations or bookings where available, newsletters, marketing emails, preorder campaigns, the sale of a physical Petit Lenormand deck, and future physical or digital products.

This policy covers the personal information processed when you browse the site, interact with forms or readings, create a purchase or preorder, contact customer support, receive transactional or marketing emails, or interact with security, analytics, payment, fulfilment, or delivery systems connected to the site.

3. Personal Information Collected

Depending on how you use the site, we may collect personal, commercial, technical, and communication data necessary to operate the services and products offered.

This information may include your email address, first name, last name, phone number, language, country, time zone, billing information, shipping information, order details, preorder details, product preferences, selected delivery zone, customer support messages, booking information, and any information you voluntarily provide through a form, reading, deferred question, order, consultation request, booking, email, or other direct communication.

For physical products, including the Petit Lenormand deck and future physical products, we may process the information needed to manage your order, payment, fulfilment, delivery, customs or delivery documentation where applicable, customer service, returns, refunds, and legal accounting obligations.

Some information voluntarily provided may relate to your personal, relational, emotional, spiritual, professional, or financial life. This may happen, for example, when you submit a question for a reading, a deferred question, a consultation, or a support message. This information is used only in connection with the service requested, the follow-up you asked for, or your relationship with the site.

We may also collect data related to your purchases, abandoned checkout or cart activity, email interactions, pages viewed, device type, browser, approximate location inferred from technical data, referral source, consent choices, and technical logs necessary to protect the site and prevent abuse, fraud, spam, scraping, or unauthorized access.

We do not store complete payment card details on our website.

We do not publish your reading results, questions, orders, or private messages.

4. Purposes of Processing

We use personal information to operate the website, answer your messages, provide free and paid readings, process deferred questions, manage bookings or consultations, manage orders and preorders, process payments, provide access to paid content, prepare and deliver physical products, provide customer support, send transactional emails, manage refunds or returns, comply with accounting and tax obligations, secure the website, prevent abuse, measure audience and performance, improve the user experience, and manage newsletters or marketing communications when legally permitted.

We may also use your language, purchase history, product interest, interaction history, or source page to personalize certain communications, segment email flows, avoid sending irrelevant messages, and recommend related readings, products, or content.

5. Legal Bases for Processing

Depending on the situation, we process personal information on one or more of the following legal bases: your consent, the performance of a contract or pre-contractual steps, compliance with a legal obligation, and our legitimate interest in operating, improving, protecting, and developing the site and its services while respecting your rights and freedoms.

Consent may apply to newsletters, certain marketing emails, and non-essential cookies or similar technologies where required.

Contractual necessity may apply when you buy a paid reading, submit a paid deferred question, preorder the deck, purchase a physical or digital product, request delivery, ask for customer support related to an order, or book a service.

Legal obligations may apply to invoicing, accounting, tax, consumer law, fraud prevention, dispute handling, and regulatory requirements.

Legitimate interest may apply to website security, fraud prevention, service improvement, audience measurement where legally permitted, internal organization, customer relationship management, and limited direct marketing to existing customers where allowed by law.

6. Readings, Deferred Questions, and Consultations

When you use free or paid interactive readings, submit a deferred question, or request a consultation, we may process the information needed to provide the service, such as your selected reading, question, order reference, language, access status, payment status, and the information you voluntarily include in your request.

Paid interactive readings may use access controls to confirm that a purchase has been made and to prevent unauthorized or repeated access when the product is designed for single use.

Deferred questions may be read and answered manually by Isabelle Nguyen or through internal tools used to manage customer requests. Information provided in connection with a reading, deferred question, or consultation is treated as confidential and is never sold.

The site may store technical or transactional information needed to confirm access, prevent abuse, process support requests, or maintain proof of purchase. We do not make your personal readings publicly accessible.

7. Orders, Preorders, Decks, and Physical Products

When you preorder or purchase the Petit Lenormand deck or any future physical product, we may process your order details, selected product, quantity, payment status, billing details, shipping details, delivery country or zone, delivery fees, customer messages, and any information required to prepare, ship, track, support, refund, or manage your order.

For preorders, we may use your contact details to send important updates about production, expected shipping, delays, availability, delivery, or changes affecting your order.

For physical products shipped outside the country of dispatch, certain delivery or customs information may need to be shared with shipping, logistics, or customs partners when required to fulfil the order.

Future physical or digital products sold through petitlenormand.com will be covered by this policy when they require similar processing for payment, fulfilment, delivery, access, support, accounting, or legal compliance.

8. Payments Through Stripe

Payments made on the site are processed by Stripe, our secure payment provider.

Certain information necessary to process the transaction may be transmitted to Stripe, including your email address, billing details, phone number, shipping information where relevant, selected product, order amount, currency, tax or delivery information, and transaction metadata needed to complete and manage the purchase.

Stripe may also process information for fraud prevention, payment authentication, regulatory compliance, disputes, refunds, and receipts.

We never store your full payment card information on our website.

9. Transactional Emails, Newsletters, and Marketing

We may send transactional emails related to your orders, preorders, readings, deferred questions, bookings, payments, receipts, access links, delivery updates, refunds, customer support, or important service information.

If you subscribe to the newsletter or otherwise consent where required, we may send you educational content, updates, offers, abandoned checkout reminders, product announcements, deck preorder updates, recommendations, and marketing communications related to Petit Lenormand.

We use Brevo as our email marketing and contact management provider. The information processed for email communications may include your email address, first name, language, source page, interests, purchase history, last product viewed or purchased, abandoned cart or checkout data, email interaction data, and communication preferences.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us.

Unsubscribing from marketing emails does not prevent us from sending necessary transactional or service emails related to an active order, preorder, payment, delivery, refund, legal notice, security issue, or service you requested.

10. Hosting, Security, and Technical Infrastructure

The site is hosted and distributed through Cloudflare services.

In connection with security, performance, caching, delivery, analytics, abuse prevention, and the proper functioning of the site, technical providers may process technical data such as IP addresses, user agents, URLs visited, request timestamps, security events, logs, cookie or consent data, device information, and data related to blocked or suspicious traffic.

We may use technical systems, security rules, databases, access logs, and internal dashboards to detect errors, prevent fraud, block malicious bots, protect paid content, troubleshoot broken pages, and maintain the reliability of the site.

11. Analytics, Cookies, and Similar Technologies

The site uses analytics and audience measurement tools, including Google Analytics, to better understand how visitors use the site and to improve content, navigation, products, and the user experience.

These tools may collect information such as pages viewed, visit duration, events, device type, browser, approximate location, traffic source, conversions, purchases, and certain technical data related to your browsing.

The site may also use cookies or similar technologies that are necessary for technical operation, security, payment redirection, access management, language preferences, analytics, or marketing, depending on the configuration of the site.

Where required by applicable law, non-essential cookies or similar technologies will be subject to a consent or preference management mechanism.

12. Service Providers and Recipients

We may share personal information with trusted service providers only when necessary for the purposes described in this policy.

These providers may include payment providers, hosting and security providers, email marketing and transactional email providers, analytics providers, delivery or logistics partners, calendar or video meeting tools, customer support tools, accounting or administrative tools, and technical tools used to operate and secure the site.

Current or potential providers may include Stripe, Cloudflare, Brevo, Google Analytics, Google Workspace tools such as Gmail, Google Calendar, Google Meet or Google Sheets, and delivery or fulfilment partners used for physical products.

These providers process information only for the relevant service they provide, subject to their own privacy and security terms.

We do not sell your personal information.

13. International Transfers

Some service providers may process or store personal information outside your country of residence, including outside the European Economic Area.

When such transfers occur, we rely on appropriate safeguards where required by applicable law, such as contractual protections, adequacy decisions, or other lawful transfer mechanisms made available by the relevant providers.

14. Data Retention

We keep personal information only for as long as necessary for the purposes for which it was collected, including to provide the requested service, manage orders or preorders, answer customer support requests, maintain proof of purchase, comply with accounting and tax obligations, resolve disputes, protect the site, and comply with legal obligations.

Order, payment, invoice, refund, and accounting information may be retained for the period required by applicable tax, accounting, consumer protection, and legal rules.

Email marketing data is kept until you unsubscribe, withdraw consent, object to processing, or until it is no longer useful for the purpose for which it was collected.

Technical and security logs are generally kept for a limited period, unless a longer retention is necessary to investigate abuse, fraud, security incidents, technical errors, legal claims, or repeated unauthorized activity.

Information submitted for readings, deferred questions, consultations, or customer support is kept only as long as necessary to provide the service, handle follow-up, maintain business records where required, and protect our legitimate interests in case of dispute.

15. Your Rights

Depending on your location and applicable law, you may have the right to access your personal information, request correction, request deletion, object to certain processing, restrict certain processing, request portability, withdraw consent where processing is based on consent, and lodge a complaint with a competent supervisory authority.

If you are located in the European Union, these rights may apply under the General Data Protection Regulation.

If you are located in another jurisdiction, you may have similar rights under your local privacy laws.

To exercise your rights, you can contact us at: [email protected].

We may need to verify your identity before responding to certain requests.

16. Additional Information for California Residents

If you are a California resident, California privacy laws may provide additional rights regarding your personal information, including the right to know, access, correct, delete, and opt out of certain uses of personal information.

Petit Lenormand does not sell personal information. If advertising or analytics tools are configured in a way that qualifies as sharing or targeted advertising under applicable California privacy law, a specific opt-out mechanism may be required.

You can contact us at [email protected] for any privacy request.

17. Children

The site is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13.

Some services, purchases, consultations, or paid products may be intended only for adults or for users who have the legal capacity to enter into a contract in their country of residence.

If you believe that a child has provided personal information through the site, please contact us so that we can take appropriate action.

18. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

These measures may include secure payment processing, access controls, hosting security features, anti-abuse rules, logging, monitoring, and limited access to customer information.

No website, online service, or electronic transmission can be guaranteed to be completely secure. If a security incident affects your personal information and notification is required by law, we will take appropriate steps to inform you and the relevant authorities where necessary.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the site, products, services, legal requirements, technologies, providers, or business activity.

The date at the top of this page indicates the latest update. If a change is significant, we may take reasonable steps to inform users where appropriate.

20. Contact

For any question related to this Privacy Policy or the processing of your personal information, you can contact us at: