Privacy Policy

Last updated: 16 June 2026

Who we are

This website is operated by Nina Poli, trading as The Leigh Witch (“we”, “us”, “our”), a spellwork and tarot-reading service based in Essex, England. Our website address is https://theleighwitch.com. If you have any questions about this policy or your personal data, contact us at [email protected].

The information we collect

When you place an order or contact us, we collect:

  • Your contact and order details — your name, email address, billing and (where relevant) delivery address, and phone number.
  • The details you give us for your reading or working — the information you enter at checkout so we can carry out your order. This may include your date of birth, your question or situation, and any names or details you choose to provide about other people (for example, the name to go into a spell jar, or the subject of a working).
  • Payment information — your payment is processed securely by our payment providers (PayPal, Stripe, Klarna, and Google Pay). We do not see or store your full card details.
  • Technical information — basic data such as your IP address, browser type, and cookie data, collected automatically by our website host and our security and delivery provider (Cloudflare) to keep the site running and secure.

Names and details of other people

Some orders ask you to provide the name of another person (for example, for a spell jar or a working directed at someone). You should only give us information you are entitled to share. We use these details solely to carry out the order you have placed; we do not use them for marketing and we do not share them other than as described below.

How we use your information

We use your information to:

  • process your order, take payment, and carry out your reading or working;
  • send you order confirmations, updates, and — if you have booked a reading — a one-time thank-you discount code for a future spell;
  • respond to your enquiries and provide customer support;
  • keep records we are required to keep for accounting, tax, and legal reasons; and
  • protect the website against fraud and abuse.

Our lawful bases under UK GDPR are: performance of your contract (to fulfil your order), our legitimate interests (to run and secure the business and answer enquiries), and compliance with legal obligations (such as keeping financial records).

Who we share your information with

We share your information only where necessary to run the service:

  • Payment providers (PayPal, Stripe, Klarna, Google Pay) to take your payment;
  • Our email provider to deliver order and reward emails;
  • Our website host and security and delivery provider (Cloudflare) to operate and protect the site; and
  • Professional advisers or authorities where we are legally required to do so.

We never sell your personal information.

Cookies

We use essential cookies that make the website and your basket work, and cookies set by our security and delivery provider (Cloudflare). These are necessary for the site to function. We do not use advertising or cross-site tracking cookies.

How long we keep your information

We keep your order and reading details for as long as needed to provide the service and deal with any follow-up, and we keep transaction records for as long as the law requires (in the UK, generally up to six years for tax purposes). Where you have only made an enquiry and not placed an order, we keep your message only as long as needed to deal with it.

Your rights

Under UK data protection law you have the right to ask us to: give you a copy of the personal data we hold about you; correct anything that is wrong; delete your data; restrict or object to how we use it; and provide your data in a portable form. To exercise any of these, email [email protected] and we will respond within one month. Some data we are legally required to keep (for example, financial records) may be exempt from erasure.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at https://ico.org.uk.

Children

This website and our services are intended for adults aged 18 or over. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last revised.

Contact

Nina Poli, trading as The Leigh Witch — [email protected]