Privacy Policy
Last updated Jun 2026Who we are
Poppy and Ellie Ltd is a private limited company registered in England and Wales.
Company number: 16354650
Registered office: 132 Annesley Road, Hucknall, Nottingham, England, NG15 7DD
We are the data controller for the personal data described in this policy, meaning we decide how and why it's used.
What we collect, and why
We only collect what we need to deliver a reading, run our business, and communicate with you. Here is exactly what that involves at each stage.
1. Booking and payment
When you book a reading, payment is taken through Squarespace, which uses its own payment processing (including Stripe). We do not see or store your full card details these are handled directly by Squarespace and its payment provider under their own terms and privacy policy.
At booking, we collect your name and email address, and basic details about the reading you've chosen.
2. Birth details
To prepare a reading, we need accurate birth information: date, time, and place of birth. We collect this from you directly by email, following your booking.
Where a reading is for a couple, family, or group, the person booking provides birth details on behalf of the other people included in the reading. This means we are sometimes given personal data about people who haven't contacted us directly themselves.
If you are submitting another adult's birth details to us, a partner, friend, or family member, please make sure they're comfortable with this before you do.
3. Birth details for children
Family readings sometimes include birth details for children under 18, submitted to us by a parent or guardian. We treat this data with the same care as any other birth information, and rely on the parent or guardian's authority to share it on the child's behalf as part of arranging the reading for their family.
We do not knowingly collect birth details for children from anyone other than a parent or guardian, and we do not use children's data for any purpose beyond preparing the reading that was booked.
4. Preparing your reading
We use birth charting software installed locally on our own devices to generate the astrological and human design charts your reading is based on. This software is not cloud-based and does not transmit your birth data to any third party the chart is generated and viewed on our device only.
Once your reading is complete, we delete the chart data from this software. We do not retain it after delivery unless you ask us to.
5. Keeping your chart for future readings
If you would like us to keep your chart on file — for example, if you're planning to return for a deeper or future reading — you can ask us to retain it. We will only keep it if you request this, and you can ask us to delete it at any time.
6. Email correspondence
We use Google Workspace for our business email. Conversations about your reading, including the birth details you send us, are held in our email account as part of normal correspondence.
Please be aware that standard email isn't a fully secure channel for sensitive information. If you would prefer to share birth details in another way, let us know and we'll find an alternative.
7. Mailing list
We send occasional updates by email to people who have asked to hear from us. This happens in two ways:
If you download one of our free resources from the website, you are told at that point that doing so adds you to our mailing list.
If you email us about a reading or our work, we may ask whether you'd like to be added to the mailing list. We only add you if you say yes.
We send these updates manually from Gmail, sporadically, not on a fixed schedule. Every email includes a way to unsubscribe. You can also ask us to remove you at any time by emailing hello@poppyandellie.com.
Our legal basis for using your data
Under UK data protection law, we need a valid reason (a “legal basis”) for everything we do with personal data. Here's what applies to each use described above:
Booking, payment, and birth details — processed under contract: we need this information to provide the reading you've paid for.
Children's birth details — processed under contract with the parent or guardian, on the basis of their authority to arrange the reading on the child's behalf.
Mailing list — processed under consent: we only add you if you've been told this will happen and have agreed to it, whether by downloading a resource or by replying yes to our question.
How long we keep your data
Chart data: deleted after your reading is delivered, unless you ask us to retain it.
Email correspondence: kept as part of our normal business records. We don't currently apply an automatic deletion period to email, but you can ask us to delete specific correspondence at any time.
Mailing list: we keep your email address until you unsubscribe or ask us to remove you.
Payment records: retained by Squarespace and its payment processor in line with their own policies, and by us where needed to meet UK accounting and tax obligations.
Who we share your data with
We don't sell or share your personal data with third parties for marketing purposes. The only services involved in handling your data are:
Squarespace — website hosting, booking, and payment processing
Google Workspace — business email
Both providers act as processors on our behalf and have their own privacy and security obligations. We do not use cloud-based birth charting software, so your birth details are not transmitted to any chart-generation service beyond our own devices.
Your rights
Under UK GDPR, you have the right to:
Ask what personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data (including chart data we've retained at your request, or your mailing list entry)
Ask us to stop using your data for a particular purpose
Withdraw consent at any time, where we rely on consent (such as the mailing list)
To exercise any of these rights, email hello@poppyandellie.com. We'll respond within one month.
If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ico.org.uk), the UK's data protection regulator.
Changes to this policy
We may update this policy as our business or our processes change. The “last updated” date at the top will reflect the most recent version. If changes are significant, we'll do our best to let you know directly.
Contact us
If you have any questions about this policy or how we handle your data, email us: