Privacy Policy.

Privacy Policy — The Foundations of Tarot

This policy explains how Tarot & Transformation, trading as The Insight Story Ltd., ("we", "us", "our") collects, uses, and protects your personal data when you purchase or access The Foundations of Tarot.

1. What We Collect
When you purchase the course, we collect the personal data you provide at checkout via ThriveCart, which may include your name, email address, billing address, and payment details. We do not store your card details ourselves — these are processed securely by ThriveCart and its payment processors.

2. How We Use Your Data
We use your data to:

  • Provide you with access to the course via ThriveCart Learn

  • Process payments, including instalments under a payment plan

  • Send you course-related communications (e.g. login details, updates, support)

  • Send you marketing emails; you can unsubscribe at any time

  • Meet our legal and accounting obligations

3. Legal Basis for Processing
We process your data under the following legal bases: performance of a contract (to deliver the course you've purchased), legal obligation (e.g. tax records), and consent (for optional marketing communications).

4. Sharing Your Data
We share your data with ThriveCart, which hosts our checkout and learning platform, and with payment processors used to handle transactions. We do not sell your data to third parties. We may also disclose data if required by law.

5. International Transfers
ThriveCart and its payment processors may store or process data outside the UK/EEA. Where this happens, appropriate safeguards (such as standard contractual clauses) are used to protect your data.

6. Data Retention
We retain your data for as long as necessary to provide you with course access, meet legal and tax obligations, and resolve any disputes. Marketing data is retained until you unsubscribe or withdraw consent.

7. Your Rights
Under UK GDPR, you have the right to access, correct, or delete your personal data, restrict or object to processing, and request data portability. To exercise any of these rights, contact us at [your support email].

8. Cookies
Our checkout and course platform (ThriveCart) may use cookies for functionality, analytics, and payment processing. Please refer to ThriveCart's own privacy policy for details on their use of cookies and data handling.

9. Complaints
If you have concerns about how your data is handled, please contact us first at [your support email]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy
We may update this policy from time to time. Any changes will be posted here with an updated effective date.

11. Contact
Questions about this policy or your data? Reach out to us at hello@victoriasmithmurphy.com.

Last updated: 15th Sept 2026