Privacy policy

Controller and scope

The controller is Business Intelligence Marketing LLC, a US LLC formed in Delaware, Estados Unidos, identification Delaware File Number 7048819, address 1007 N Orange St, 4th Floor, PMB 1232, Wilmington, DE 19801, Estados Unidos, contact info@buinma.com. This policy covers browsing, accounts, reading responses and results, email deliveries, subscriptions and practice communications. Offering services to people in the European Economic Area is subject to the GDPR where Article 3 applies, even for a US company; applicable local requirements are also respected.

Data that may be processed

Depending on the function, we process your email, language, account and authentication details, messages, reading responses and results. Astrology or numerology experiences may ask for a name, birth date, time or place where needed for the chosen calculation. Technical connection, session and security data are also processed. Data come from you and your interaction with the service. Required fields are identified in each form; without necessary information, that function cannot be completed, but public content remains available.

Share only what is needed for your question. Avoid health information, sexual life, beliefs, identity documents or identifying details about other people in free-text fields. These categories are not requested for a symbolic reading.

Purposes and lawful bases

Responding to requests, preparing the requested reading, verifying email, delivering results and managing a consultation or account rely on performing the service or taking steps at your request (GDPR Article 6(1)(b)). Billing and rights-handling obligations rely on legal obligations (6(1)(c)). Account protection, abuse prevention and minimal technical records rely on a legitimate interest in service security (6(1)(f)), balanced against your rights; you may object on grounds relating to your situation.

Editorial emails, offers and optional reading history are managed according to your preferences and the relevant consent (6(1)(a)). Requesting an emailed result does not by itself subscribe you to advertising. You may withdraw each consent or unsubscribe without losing services already requested.

Cabinet consultations and technical services

Personal cabinet consultations are handled by tarot readers assigned according to the user’s language. Professionals may work from different countries. Consultation information is used to handle your request and provide the service.

Providers that may act on the controller’s behalf: hosting and location Business Intelligence Marketing LLC: alojamiento propio en Estados Unidos.; email and location Business Intelligence Marketing LLC: correo gestionado en la infraestructura propia del servicio en Estados Unidos.; technical platform, purpose and location Hoxera, plataforma de Business Intelligence Marketing LLC, operada en Estados Unidos como soporte técnico del servicio.. Technical support and administration may also be involved within their functions and contracts. We do not sell your data. Disclosure to authorities or others requires a legal obligation or other lawful basis. Services you open, such as WhatsApp, Facebook or YouTube, may act as independent controllers under their own policies.

International transfers

The controller is a US entity; actual server and provider locations are those disclosed here, not inferred from formation country. International operations, destinations and safeguards: El alojamiento, el correo y Hoxera se gestionan en Estados Unidos por la LLC. Las consultas personales se asignan a tarotistas según el idioma; estos profesionales pueden atenderlas desde distintos países. Para conocer el destino de una consulta concreta y ejercer derechos, contacta directamente con la LLC en info@buinma.com.. Where an operation is a GDPR Chapter V transfer, a valid mechanism is required, such as an applicable adequacy decision or standard contractual clauses with necessary assessments and additional measures. The EU-US Data Privacy Framework may be relied on only for an actually certified entity and covered data and processing. Neither this LLC nor all its providers are presumed certified. Consent is not a general replacement for safeguards on routine transfers. Request details or safeguards at info@buinma.com.

Managing and deleting your data

Data is managed for the purpose for which it was provided: handling a consultation, delivering a reading or maintaining a requested account or subscription. You can request deletion through the available account options or by writing to info@buinma.com. A link expiring does not itself delete the data.

Subscriptions remain while active and consent has not been withdrawn. After unsubscribing, only the minimum evidence necessary to demonstrate processing of the request and prevent improper further emails is retained. Contractual, tax and complaint records are kept for applicable statutory periods and, where required, restricted until liability periods expire.

Your rights

You may request access, rectification, erasure, restriction, portability where applicable, and object to processing based on legitimate interests, as well as withdraw consent. Write to info@buinma.com, stating your request and the details needed to locate it. Additional identity evidence is requested only where necessary and proportionate.

Deadlines depend on the applicable law and right. GDPR requests are normally answered within one month, extendable by up to two additional months with reasons and notice within the first month. Shorter applicable local periods are respected. You may complain to Spain’s AEPD or the competent authority in your residence; contacting the LLC first does not restrict that right. Rights are free subject to statutory exceptions.

Security, private access and changes

Access controls and technical and organisational measures are applied according to the data and risks. Do not share private reading links; sign out on shared devices. No digital communication is entirely risk-free. Consultations are intended for adults. Contact us if a child’s data have been submitted without a valid basis so they can be reviewed and, where appropriate, deleted.

Policy changes are reflected in the document version. If a new purpose or processing requires further information, a new lawful basis or consent, this will be addressed before it begins.

Privacy representatives and contacts

EU representative where GDPR Article 27 requires one: Atención directa por Business Intelligence Marketing LLC, con domicilio en Estados Unidos y contacto info@buinma.com. Este contacto de la entidad titular no identifica un representante establecido en la Unión Europea.. Data protection officer, if appointed: La entidad titular atiende directamente las cuestiones de privacidad en info@buinma.com. No se ha comunicado un delegado específico para este sitio.. Required local representatives or contacts elsewhere: Atención centralizada por Business Intelligence Marketing LLC en info@buinma.com y en el domicilio de la LLC.. These complement the controller’s contact. A US registered agent is not automatically an EU representative or a data protection officer.

Rights in Spanish-speaking America and the United States

These references apply where the relevant law covers processing. Mexico’s Federal Law on Protection of Personal Data Held by Private Parties in force since 2025 provides access, rectification, cancellation and objection (ARCO), and applicable consent withdrawal and limitation mechanisms. The competent authority is the Secretaría Anticorrupción y Buen Gobierno. Start requests at info@buinma.com.

Argentina’s Law 25.326 provides rights including access within 10 calendar days and rectification, updating or erasure within 5 working days in the statutory cases. Its authority is the AAIP. Colombia’s Law 1581 of 2012 provides rights to know, update, correct, request proof of authorisation and, where appropriate, revoke it or seek deletion; the authority is the SIC.

Peru’s Law 29733 and Regulation approved by Supreme Decree 016-2024-JUS, effective 31 March 2025, provide applicable rights and safeguards before the national data protection authority. In Chile, Law 19.628 applies under its current regime; Law 21.719’s amendments take effect on 1 December 2026 and must be reflected in procedures and safeguards from that date. They are not described as already effective before then.

US residents may exercise information, access, correction, deletion, portability, opt-out or appeal rights where a state law covers the business and processing. California’s CCPA/CPRA has specific applicability requirements; US LLC formation alone does not establish coverage. Standard public browsing does not use behavioural advertising or entail selling data for that purpose. Legally required opt-out choices and signals will be respected if covered processing is introduced.

From any country, contact the controller and explain your residence and request. An account, purchase or excessive documentation is not required to initiate a request; proportionate identity verification may protect data. Other mandatory local rights are not excluded.

Consultation confidentiality

Calls and consultations are not recorded. WhatsApp links let you initiate contact on that platform; they do not provide an automated reply or automatic customer service. Messages you choose to send are used to handle your request or consultation.

Your questions and results are processed to provide the requested service. Unsubscribing from advertising, deleting an account and cancelling a consultation are separate actions available through the stated channels without giving up your rights.

Optional analytics and conversions

If you accept analytics, Google Analytics measures visits and contact actions or readings with a verified email. These conversion events are shared with the linked Google Ads account to measure the contribution of ads. Our events do not send the email, answers or reading content. Google may process technical data, such as the IP address when receiving a connection, under its policies. Advertising storage and additional marketing code require marketing consent. Withdraw consent using Cookie preferences in the footer. If you accept analytics and reject marketing, Google may receive consent signals without advertising cookies.