Privacy policy.

This Privacy Policy explains how Tania Romeo ("I," "me," "my") collects, uses, stores, and protects your personal data when you use the website taniaromeo.com, purchase products or services, or submit your birth details through the Human Design chart widget.

I am based in Bergamo, Italy and operate as a sole proprietor. I serve clients worldwide. As an Italy-based data controller, I comply with the EU General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).

In plain language: I take your privacy seriously. I collect only what I need to create your report and deliver my services. I never sell your data. I never share it with third parties for marketing. Your birth details are used solely to generate your Human Design chart and report.

1. Data Controller

The data controller is:
Tania Romeo
Bergamo, Italy
Email: info@taniaromeo.com

2. What Personal Data I Collect

When you request a Human Design report (via the chart widget or order form):

— Full name
— Date of birth
— Exact time of birth
— Place of birth
— Email address

Why these specific details are necessary: Your Human Design chart is calculated using your exact birth date, time, and location. Without this data, the chart cannot be generated. This is not optional information — it is the minimum required to deliver the service you have purchased. Your name and email are required to deliver the report and communicate with you about your order.

When you purchase a product or service:

— Name and email address
— Payment information (processed securely by Stripe or PayPal — I do not store your payment card details)
— Any additional information you voluntarily provide in intake forms or correspondence

When you visit the website:

— Standard website analytics data (pages visited, time on site, referring source) collected via cookies, where you have given consent
— IP address (anonymised where possible)

3. Legal Basis for Processing

Under Article 6 of the GDPR, I process your personal data on the following legal bases:

Contract performance (Article 6(1)(b)): Processing your birth details and contact information is necessary to fulfil the service you have purchased — namely, the creation and delivery of your personalised Human Design report or other products.

Consent (Article 6(1)(a)): Where you have opted in to receive marketing communications, newsletters, or promotional content. You may withdraw consent at any time by clicking "unsubscribe" in any email or by contacting me directly.

Legitimate interest (Article 6(1)(f)): For website analytics and improving the quality of my services, where this does not override your fundamental rights and freedoms.

4. How I Use Your Data

Your personal data is used exclusively for:

— Generating your personalised Human Design chart and report
— Delivering purchased products and services to you
— Communicating with you about your order, including follow-up and support
— Sending marketing communications (only where you have given consent)
— Improving my website and services through anonymised analytics

I will never:

— Sell your personal data to any third party
— Share your birth details with any third party for marketing purposes
— Use your data for any purpose other than those stated above
— Make automated decisions about you based solely on your data (no profiling)

5. Birth Data — Special Considerations

I understand that birth details (date, time, and place of birth) are sensitive personal information. While birth data is not classified as "special category data" under Article 9 of the GDPR, I treat it with the highest level of care and confidentiality.

Your birth data is:

— Used solely for the purpose of generating your Human Design chart and personalised report
— Stored securely in encrypted systems with restricted access
— Accessible only to me (Tania Romeo) for the purpose of chart analysis and report creation
— Never shared with third parties except where necessary to generate the chart (e.g., chart calculation software), and only the minimum data required is transmitted
— Retained only as long as necessary (see Section 8 below)

6. Third-Party Services

I use the following third-party services to operate my business. Each processes only the minimum data necessary:

Squarespace — website hosting and e-commerce (processes order and contact data)
Stripe / PayPal — payment processing (processes payment data — I do not see or store your full card details)
Chart calculation software — generates the Human Design bodygraph from your birth data
Email service provider — delivers your report and any marketing communications you have consented to

Each of these providers has their own privacy policy and operates under GDPR-compliant or equivalent data protection frameworks. I have taken reasonable steps to ensure that all third-party processors provide adequate safeguards for your personal data.

7. International Data Transfers

As I serve clients worldwide, your data may be processed or stored in countries outside the European Economic Area (EEA). Where this occurs, I ensure that appropriate safeguards are in place, including:

— Use of service providers who are certified under recognised data protection frameworks
— Standard Contractual Clauses (SCCs) approved by the European Commission
— Adequacy decisions by the European Commission for the relevant country

8. Data Retention

Birth data and chart records: Retained for the duration of our client relationship and for a reasonable period afterwards (up to 3 years) to allow for follow-up services, updated readings, or support queries. After this period, data is securely deleted unless you request earlier deletion.

Purchase records: Retained for the period required by Italian tax and accounting law (currently 10 years for financial records).

Marketing data: Retained until you withdraw consent or unsubscribe.

Website analytics: Anonymised data is retained for up to 26 months.

9. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR. You may exercise any of these rights by contacting me at info@taniaromeo.com:

Right of access — You may request a copy of all personal data I hold about you.
Right to rectification — You may request correction of any inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — You may request deletion of your personal data, subject to any legal retention obligations.
Right to restrict processing — You may request that I limit how I use your data.
Right to data portability — You may request your data in a structured, commonly used, machine-readable format.
Right to object — You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

I will respond to any rights request within 30 days of receipt. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.

10. Children's Data

Some of my services (such as the "See Them Clearly" parenting product and "Before You Choose" student product) may involve processing the birth data of minors for the purpose of generating their Human Design chart.

In accordance with the Italian Privacy Code (Article 2-quinquies), children aged 14 and over may consent to the processing of their personal data in relation to digital services. For children under 14, consent must be provided by the parent or person with parental responsibility.

Where a parent purchases a report for their child, the parent is providing consent on behalf of the minor. Birth data of minors is treated with the same security measures and protections as adult data, and is used solely for chart generation and report delivery.

11. Cookies

This website uses cookies to improve your experience and to collect anonymised analytics data. When you first visit the site, you will be asked to consent to non-essential cookies. Essential cookies (required for the website to function) do not require consent.

You may manage your cookie preferences at any time through your browser settings or through the cookie consent banner on this website.

12. Data Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted storage, secure passwords, restricted access, and regular review of security practices.

While no method of electronic transmission or storage is 100% secure, I take all reasonable steps to protect your data in accordance with GDPR requirements.

13. Complaints

You may also contact me directly at info@taniaromeo.com and I will do my best to resolve your concern promptly.

14. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, services, or legal requirements. Any updates will be posted on this page with a revised "last updated" date. I encourage you to review this page periodically.