Privacy policy

Last updated: October 2026

Your Numerology Blueprint is run by me, Amber Bordewijk, based in the Netherlands. I want you to know what happens to your data. This privacy policy explains what information I collect when you visit the website or order a numerology report, how I use and protect it, and your rights under global privacy regulations, including the General Data Protection Regulation (GDPR), UK GDPR, and US State privacy laws (including California CCPA/CPRA).

1. Data controller

The data controller responsible for your personal information is:
Amber Bordewijk (founder of Your Numerology Blueprint)
Location: The Netherlands (European Union)
Contact: hello@yournumerologyblueprint.com

2. Personal data I collect

I only collect the information I need to create and deliver your blueprint:

First name: Used to personalize the report.
Date of birth: Used exclusively to calculate your numerological positions (life path, core numbers, year cycle).
Email address: Used to email you the completed personalized report and your order confirmation.
Payment transaction reference: A unique token provided by our payment gateway to verify your purchase. We never see or store your payment card numbers or bank account details.

3. Purpose and legal basis for processing

Under Art. 6(1)(b) of the GDPR, I process your personal data on the basis of contractual necessity: to deliver the report you ordered. After a purchase I also send you a few short emails: a check-in about your report and a tip about similar reports. You can unsubscribe with one click at the bottom of every email. If you only request your free result, I send you that one email and nothing else.

4. Payment processing

All financial transactions are handled by authorized payment service provider Mollie B.V. (licensed in the European Union). Mollie processes payments in compliance with PCI-DSS standards and their own privacy policy.

5. Subprocessors and technical service providers

For the technical side I work with a few suppliers. They only process data on my instructions and under a data processing agreement:

Hosting (Railway Corp.): Secure, encrypted cloud hosting where the website runs and your order is processed.
Database (Turso, ChiselStrike Inc.): Encrypted database where your order (first name, date of birth, email address and report) is stored for up to 12 months.
AI Text Compilation (Anthropic PBC - Claude API): I send your first name and your calculated numbers over a secure connection to the API to put together the text of your report. Your date of birth is not sent. Under the commercial API terms, this data is kept confidential and never used to train AI models.
Payment Processing (Mollie B.V.): Certified European payment service provider for secure checkout (credit cards, PayPal, iDEAL, Apple Pay). I never see or store your payment card details.
Transactional Email Delivery (Resend Inc.): Used to automatically deliver your personalized numerology report and order confirmation.
Web Analytics (Google Ireland Limited): Google Analytics 4 is used to measure aggregated website traffic, popular pages, and user engagement without personal identification.
Advertising Attribution (Meta Platforms Ireland Limited): Meta Pixel is used to measure the effectiveness of our social media advertisements on Facebook and Instagram and track conversion events.
Support & Inbound Email Forwarding (ImprovMX & Google Workspace): For receiving, routing, and answering customer support inquiries sent to our domain email addresses.
Domain Routing & Redirects (Redirect.pizza): Technical routing service for canonical domain redirects (e.g. www to root domain), strictly processing technical network routing without retaining user profiles.

6. No sale of personal data (US & California CCPA/CPRA notice)

I never sell, rent or trade your personal information to third parties or data brokers. Under California Consumer Privacy Act (CCPA) and other state privacy laws, you have the right to know what personal data is collected, request deletion, and not be discriminated against for exercising your privacy rights.

7. Cookies and tracking technology

I use a small number of cookies and similar technologies to keep the website working, to see anonymously how the site is used and to measure my ads:

Essential & functional cookies: Necessary for core website operations, language selection, security, and session management. These cannot be disabled.
Analytical cookies (Google Analytics 4): Help us understand how visitors engage with the website (e.g. scroll depth, popular pages) on an aggregated level. IP addresses are automatically anonymized.
Marketing cookies (Meta Pixel): Placed with your consent to measure the effectiveness of our social media advertisements on Facebook and Instagram and track completed orders.

You can manage your cookie preferences at any time via the cookie banner on the website or by adjusting your browser settings to block or delete cookies.

8. Data retention

I keep your order details for up to 12 months after purchase, so you can request your report again if you lose the email. After that I remove your data from the database, except what I have to keep for tax purposes.

9. Children's privacy

The website and paid reports are meant for people who are at least 18 years old (or the age of majority where you live). I do not knowingly collect or solicit personal data from children under the age of 16.

10. Your privacy rights

Depending on your location, you have the following rights regarding your personal data under applicable data protection laws:

Right of access: Request a copy of the personal data I hold about you.
Right to rectification: Request correction of inaccurate personal information.
Right to erasure: Request deletion of your personal data (“Right to be Forgotten”).
Right to restriction or objection: Object to or restrict certain types of processing.
Right to data portability: Request transfer of your data in a structured, commonly used format.

To exercise any of these rights, please email hello@yournumerologyblueprint.com. I will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority (e.g. the Dutch Data Protection Authority / Autoriteit Persoonsgegevens or the UK Information Commissioner's Office).