Privacy Policy

Data controller

Drakaris 9 EOOD (Дракарис 9 ЕООД, company ID / ЕИК 205929726), registered in the Republic of Bulgaria. Contact: hello@oraclesandrunes.com.

What we collect

Name, email, phone and (for orders) shipping address. Card data is processed directly by Stripe — we never store it.

Legal basis & purpose

Contract performance (bookings and orders), legal obligations (accounting), and legitimate interest (security and operations).

Recipients

Stripe (payments), Supabase (database hosting), Vercel (site hosting), Google (calendar and email), courier service.

Your rights (GDPR)

Access, rectification, erasure, restriction, portability and objection. To exercise: hello@oraclesandrunes.com. You may lodge a complaint with the Bulgarian DPA (CPDP).

Cookies

We use only strictly necessary cookies for session and language. No tracking or advertising cookies.

Sample template — pending legal review.