In accordance with the General Data Protection Regulation (GDPR) and French data protection law, ORADIA is committed to protecting the privacy of its users and ensuring the security of their personal data.

This privacy policy describes how I collect, use, protect, and share your personal information when you use the ORADIA site.

Identification data

• Last name
• First name
• Email address
• Postal address
• Postal code
• City

Payment data

• Payment information processed by Stripe
• Transaction history
• Subscription information (where applicable)

Profile and usage data

• Profile information (photo, personal description)
• Card draw history
• Personal notes and intentions
• Account preferences and settings

Video guidance data

• Name and email transmitted by Cal.com when booking
• Time slot and duration of the session
• Content of the draw performed during the session (cards drawn, intention set, AI analysis)
• Jitsi Meet link for the session

Anonymous draw intentions

• Intention set during a draw without an account (non-logged-in visitors)
• Associated cards drawn
• No identifying data is collected for these entries

Technical and statistical data

• IP address (anonymized)
• Browser type and operating system
• Pages visited and browsing time
• Cookies and similar technologies

This data is collected as part of order management, delivery, and customer relations.

Providing services

• Creating and managing your user account
• Performing personalized card draws
• Managing preorders and orders
• Organizing product delivery
• Access to your history and profile

Communication and follow-up

• Sending the newsletter (with consent)
• Order tracking notifications
• Delivery information
• Follow-up on contact requests

Payment

• Payment processing via Stripe
• Subscription management
• Invoicing and accounting

Service improvement

• Anonymized statistical analysis
• Optimizing the user experience
• Developing new features

Video guidance

• Organizing and following up on sessions booked via Cal.com
• Sending the Jitsi Meet connection link by email
• Reviewing the client's draw history to prepare the guidance session

Editorial analysis (legitimate interest)

• Aggregated, anonymized analysis of draw intentions to guide editorial content (newsletter, blog)
• No individual decision is based on this data

Legal obligations

• Archiving contractual data
• Responding to administrative requests

Processing of your data relies on the following legal bases:

Consent

For optional data (newsletter, user reviews, etc.)

Contract performance

For data necessary to provide the services requested

Legal obligations

For data required by law (invoicing, archiving)

Legitimate interests

For service improvement and data security

Data is retained for as long as necessary to manage orders and meet legal obligations.

User account data

Kept for the entire duration of service use, then deleted within 30 days of an account deletion request.

Order and delivery data

Kept for 5 years for order management, invoicing, and accounting obligations.

Payment data

Bank details are not stored. Only transaction information is kept for 5 years for accounting purposes.

Draw history

Kept for 3 years after the last draw, unless earlier deletion is requested.

Newsletter

Data kept until unsubscribed. History kept for 6 months for traceability.

Technical data

Anonymized logs and statistics kept for a maximum of 13 months.

ORADIA implements appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for all communications
• Secure hosting on GDPR-compliant servers
• Strict access control to data
• Regular, secure backups
• Staff training on data protection
• Security incident management procedures

Essential cookies

Necessary for the site to function (authentication, security, preferences).

In-house audience measurement

To understand how the site is used (pages visited, where visitors come from), we only use technical session identifiers stored locally in your browser (sessionStorage) — never a cross-site tracking cookie or a third-party service.

Functionality cookies

To remember your preferences and personalize your experience.

You can configure your browser to refuse cookies or delete existing ones.

Right of access

You can request a copy of all your personal data.

Right to rectification

You can correct inaccurate information about you.

Right to erasure ("right to be forgotten")

You can request the deletion of your personal data.

Right to data portability

You can retrieve your data in a structured format.

Right to object

You can object to the processing of your data for legitimate reasons.

Right to restriction

You can request that processing of your data be restricted.

To exercise your GDPR rights, you can:

By email

Send your request to: contact@oradia.fr

Information to provide

• First and last name
• Email address of your ORADIA account
• Right being exercised
• Details of your request

Response time

I commit to responding within one month at the latest.

You can delete your account at any time from your member area.

Deletion results in:

• Immediate deletion of your profile
• Anonymization of your draw history
• Deletion of your contact data
• Immediate stop of the newsletter

Some data may be retained for legal obligations (invoicing, archiving).

The following subcontractors are involved in processing your data:

Transfers to subcontractors located outside the European Union are governed by appropriate safeguards (standard contractual clauses or a European Commission adequacy decision).

For any question regarding the protection of your data or to exercise your rights:

Email: contact@oradia.fr

I reserve the right to modify this privacy policy at any time. Changes will be published on this page, and I will notify you by email of any significant changes.