GDPR & CCPA Compliance Notice

Last updated: November 30, 2025

Fortunes Foretold (“we,” “us,” “our”) is committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA) for California residents.

This notice supplements our main Privacy Policy and applies specifically to users covered under GDPR and/or CCPA.

1. Rights Under GDPR (EU/EEA Users)

If you reside in the European Economic Area (EEA), you have the following rights regarding your personal data:

1.1 Right to Access

You may request a copy of the personal data we hold about you.

1.2 Right to Rectification

You may request corrections or updates to inaccurate or incomplete personal information.

1.3 Right to Erasure (“Right to Be Forgotten”)

You may request deletion of your personal data when:

  • It is no longer needed for the purposes collected
  • You withdraw consent
  • You object to processing
  • We are processing data unlawfully

1.4 Right to Restrict Processing

You may request that we limit the processing of your data under specific circumstances.

1.5 Right to Data Portability

You may request a structured, machine-readable copy of your personal data.

1.6 Right to Object

You may object to:

  • Direct marketing
  • Processing based on legitimate interests

1.7 Right to Withdraw Consent

If processing is based on your consent, you may withdraw it at any time.

1.8 Right to Lodge a Complaint

You may lodge a complaint with your local Data Protection Authority.

2. Rights Under CCPA (California Users)

If you are a California resident, you have the following rights under the CCPA:

2.1 Right to Know

You may request to know:

  • The categories of personal information collected
  • The purposes for collection
  • The categories of third parties with whom we share personal data
  • The specific pieces of personal information we hold

2.2 Right to Deletion

You may request deletion of your personal information, subject to legal exceptions (e.g., tax, security, transactional requirements).

2.3 Right to Opt Out of “Sale” of Personal Information

We do not sell personal information as defined by the CCPA.

If we ever engage in data-sharing that qualifies as a “sale,” we will update this notice and provide an opt-out mechanism.

2.4 Right to Non-Discrimination

We will not deny services, charge different prices, or provide a lesser experience because you exercised your privacy rights.

3. How to Exercise Your Rights (GDPR & CCPA)

To access, update, delete, or request information about your data, contact us at:

📧 info@fortunesforetold.com

Please include:

  • Your name
  • Your email address
  • Whether you’re submitting a GDPR or CCPA request
  • Details of your request

We may need to verify your identity before responding.

4. Legal Basis for Processing (GDPR Only)

We process your personal data based on one or more of the following legal grounds:

  • Contractual necessity (e.g., fulfilling an order)
  • Consent (e.g., marketing communications)
  • Legitimate interests (e.g., analytics, website security)
  • Legal compliance (e.g., tax or accounting obligations)

5. Data Transfers (GDPR Only)

If you are located in the EEA, please note that your data may be transferred to and processed in countries outside the EEA.

We take reasonable steps to ensure adequate protection, including use of GDPR-approved safeguards where applicable.

6. Do Not Track (DNT) Signals

We do not respond to “Do Not Track” signals at this time due to lack of standardized technology.

However, California users still retain all CCPA rights.

7. Updates to This Notice

We may update this compliance notice periodically. Any changes will be posted with a new revision date.