Nadia's Charts

Privacy Policy

Version v2.2, 26 September 2026 · applies to nadiascharts.com and to the "Nadia's Charts" / "Le carte di Nadia" service

This page explains, in plain and complete words, which personal data we collect, why, where we keep it and what your rights are. It is written to comply with the EU General Data Protection Regulation (GDPR, for people living in the European Union) and with applicable United States law.

1. Who processes your data

The data controller is Nadia Di Dio, sole proprietor, based in Myrtle Beach, South Carolina, United States, who writes the readings personally. Orders and payments of the "Nadia's Charts" / "Le carte di Nadia" service are handled on her behalf by Tanya, her associate (California). For any question or request about your data write to nadia@nadiascharts.com.

2. What data we collect

Data	When	Why
Full name, email address	when you fill in the order form or write to us	to confirm the order, write to you and deliver the chart
Date, time and place of birth	in the order form	these are the data from which the birth chart is calculated: without them the service does not exist
City where you live (solar and lunar returns only)	in the order form	the year and the month are calculated for the place of residence: without it the return cannot be made
Name, date, time and place of birth of a second person (synastry only)	in the order form	needed to calculate the second chart; whoever orders declares to have that person's permission, and that person can ask us at any time to delete their data
Optional notes, chosen language and product	in the order form	to write the reading and deliver it in the right language
Payer's name and amount paid	when you pay with Zelle	to match the payment to the order; we never see card or account numbers

We do not collect data about health, opinions, religion or other "special categories". The readings speak of energy and rhythms in a general way and do not replace a doctor.

If you order a chart for someone else (a relative, a friend), their birth data are their personal data: by ordering you declare that you have their permission to give them to us. For a minor, the order must come from a parent or legal guardian. If you do not have this permission, do not send the data.

3. Why we use it and on what basis

To perform the service you ordered (calculate the chart, write the reading, deliver the PDF, send bulletins and updates if you subscribe): legal basis = performance of the contract.
To answer your questions and requests: legal basis = the contract or our legitimate interest in answering those who write to us.
For third-party data you give us: legal basis = the consent of the person concerned, which you declare you have.
For legal obligations (bookkeeping, taxes): legal basis = legal obligation.

We do not use your data for advertising, we do not sell it, we do not share it with anyone for commercial purposes, we do no profiling and no automated decisions. We send no newsletters: you receive only what you ordered.

4. Where the data is and who sees it

Card payments are handled by Stripe (Stripe, Inc., South San Francisco, USA): when you pay by card you enter your card details on Stripe's pages and they stay with Stripe — we never see them and never keep them. Of each payment we only receive name, email, amount and date, which we need for the invoice and to know the order is paid. Stripe's privacy policy: stripe.com/privacy.
The order form is run by Netlify (Netlify, Inc., San Francisco, United States), which hosts the site: the data you enter reaches the service mailbox and stays in the Netlify dashboard only for the time needed to take charge of it, then it is deleted from there.
Email at nadia@nadiascharts.com is hosted by Microsoft 365 (Microsoft Corporation, United States).
Payments go through Zelle (Early Warning Services, LLC) and the banks of the payer and the recipient, which process your data under their own privacy policies; we receive only the name and the amount.
Calculation and documents are done on private computers in the United States, protected by password and encryption, with encrypted backups. Chart files are not kept on cloud services open to the public. For the calculations and for the first draft of the readings software tools are used; every reading is re-read, corrected and signed by Nadia Di Dio.
Your data is seen only by Nadia Di Dio and by the members of her family who run the service for her (orders, payments and the technical part), bound to the same confidentiality. Nobody else.

If you live in the European Union: your data is processed in the United States. The transfer is necessary to perform the contract you requested (Article 49(1)(b) GDPR); Microsoft also takes part in the EU-U.S. Data Privacy Framework; with the other providers the contractual safeguards required by law apply.

5. For how long

Birth data and charts: for the duration of the relationship (for example a subscription) and up to 24 months after the last order, so that we can update or correct your chart; then they are deleted.
Correspondence: 24 months from the last exchange.
Accounting data (name, amount, date): 7 years, as required by US tax rules.
At your request we delete earlier (see point 7), except what the law obliges us to keep.

6. Cookies and tracking

The site uses no profiling cookies and no traffic analytics (no Google Analytics, no advertising pixels). Fonts are hosted on the site itself, not by external services. The only technical data the Netlify server sees is your IP address, to deliver the page to your device and protect the site from abuse. The site does not sell or share personal information with anyone.

7. Your rights

At any time you can ask us:

to know which data we hold about you and to receive a copy;
to correct it (for example a wrong birth time);
to delete it;
to restrict its use or to object to a specific use;
to receive it in a machine-readable format (portability);
to withdraw a consent you gave, without affecting what was done before.

An email to nadia@nadiascharts.com is enough: we answer within 30 days. If you live in the European Union you may also contact the supervisory authority of your country. If you live in a US state that grants rights over personal data, you can exercise them at the same address, without any penalty.

8. Security

The site is served over HTTPS (encrypted connection). Data and documents are kept on computers protected by password and disk encryption, with encrypted backups. Should a breach affecting you occur, we will notify you and the authorities within the legal deadlines.

9. Minors

The site is not aimed at minors. Birth charts of children and teenagers are made only at the request of a parent or legal guardian, who is the contact person for all communications.

10. Changes

If we change this policy, we update the version and date at the top of the page; for important changes we notify active subscribers by email.