Skip to content
The Sunn

Privacy Policy

Last updated: draft-2026-10-22

Draft — pending legal review

This policy is a working draft and will be finalised before bookings open. Items in square brackets are details we are still confirming. For questions in the meantime, please use the contact page.

Who we are

The Sunn is operated by The Sunn ("we", "us"), Paldi, Ahmedabad, Gujarat, India. We offer online tarot and numerology consultations. This policy explains what personal data we collect when you use this website or book a consultation, why we collect it, and the choices you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023.

Information we collect

We only collect what we need to arrange and deliver your consultation:

  • Booking details: your name, email address, phone number, state, time zone and how you would like to meet (Google Meet, Zoom, WhatsApp call or phone call).
  • Intention notes, if you choose to write them. They are optional.
  • Payment information: payments are processed by Razorpay. We receive the payment reference, status, amount and method type, but never your full card, bank or UPI details.
  • Messages you send through the contact form.
  • Technical data needed to keep the site secure, such as your IP address for spam and abuse protection (stored only as a one-way hash for rate limiting) and error reports with personal details removed.

How we use your information

  • To hold and confirm your booking, take payment, and send your confirmation, receipt, reminders and calendar files.
  • To let your reader prepare for and hold the session with you.
  • To process cancellations, reschedules and refunds under our Refund & Cancellation Policy.
  • To answer your questions and keep records we are required to keep for accounting.
  • To protect the website against fraud, spam and misuse.

We do not sell your personal data and we do not use it for advertising.

Consent

When you book, we ask you to accept this privacy notice with a checkbox that is never pre-ticked. We record which version of the notice you accepted and when. You can withdraw your consent at any time by writing to us; this does not affect processing that already happened, and we may still need to keep some records for legal reasons (see Retention).

Intention notes

Intention notes can be personal. They are encrypted when stored, are visible only to your reader and the business owner, and are never included in emails, calendar feeds or logs. They are deleted 12 months after your session.

Retention

  • Booking and payment records: kept as long as needed for accounting and tax purposes (currently around 8 years for receipts).
  • Intention notes: deleted 12 months after the session.
  • Unpaid reservations that expired: your name, email address, phone number and notes are deleted 30 days after the reservation expired.
  • Booking management links stop working 30 days after your session.
  • Payment notifications we receive from Razorpay: their contents are removed after 180 days.

Who we share it with

Your reader sees the details needed for your session. We also use these service providers (sub-processors):

  • Razorpay — payment processing.
  • Resend — sending booking emails.
  • Cloudflare — website delivery, security and the anti-spam check on our forms.
  • Sentry — error monitoring, with personal details removed before reports are sent.
  • [OQ-5/M8: hosting (VPS) provider name] — hosting of the website and database in India.

We may also disclose information when the law requires it.

Your rights: access, correction and deletion

You can ask us for a copy of your personal data, ask us to correct it, or ask us to delete it, subject to records we must keep by law. You can also withdraw consent or raise a grievance. Write to support@thesunn.rishabhshah.tech and we will respond within a reasonable time. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Security

We use encrypted connections (HTTPS), encrypt sensitive fields at rest, limit staff access to what each person needs, and protect admin accounts with two-factor authentication. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Cookies

We use only essential cookies. See our Cookie Policy for details.

Changes to this policy

If we change this policy, we will update the date at the top of this page. The version you accepted when booking stays on record with your booking.

Contact for data requests

The Sunn, Paldi, Ahmedabad, Gujarat, India.

Email: support@thesunn.rishabhshah.tech · Phone: +91 88490 48015. You can also write to us through the contact page.