Privacy Policy

— I —Who we are

This Privacy Policy describes how The Hollow Coven ("we", "us", "the Coven") collects, uses, and protects information when you visit thehollowcoven.com (the "Site") or submit a petition for a working. By using the Site you consent to the practices described here.

— II —What we collect

We collect only what is necessary to answer a petition and to keep the Site running. Specifically:

• Information you give us through the petition form: the name (or chosen "true name") you provide, your email address, the rite you have selected, the photograph you upload, and any context you write into the message field.
• Payment metadata: if you pay a tithe, our payment processor (e.g. Stripe or PayPal) handles your card details directly. We receive only confirmation of the transaction, the last four digits of the card, and the billing name.
• Technical data automatically logged by our host (Netlify): IP address, browser user-agent, referring page, and timestamps. This is used for security, abuse-prevention, and operational diagnostics.
• Honeypot & anti-spam signals: our order form uses a hidden field and Netlify's spam-detection to filter automated submissions.

We do not ask for, and we do not want: your home address, telephone number, government identification, banking statements, medical records, or details about other people who have not consented to being mentioned.

— III —What we do not use

The Site does not run third-party advertising trackers, behavioural advertising pixels, social-media "like" widgets, or cross-site fingerprinting. We do not sell, rent, or trade personal information. Ever.

— IV —Cookies

This Site uses only the strictly-necessary cookies set by our host (Netlify) for basic site delivery and form-submission integrity. We do not set analytics or advertising cookies. You may block or delete cookies in your browser settings; the Site will continue to function.

— V —How we use what you send

• To read, prepare, and perform the working you have requested;
• to reply to you in writing about your petition;
• to take payment for the tithe owed;
• to keep records sufficient to comply with tax and accounting law in our jurisdiction;
• to defend the Coven and the Site against fraud, abuse, or unlawful conduct.

We never use your photograph, name, or message for any purpose other than the working you commissioned.

— VI —How long we hold it

• Photographs — held in a sealed working-folder for the duration of the rite, then destroyed (deleted from our systems) within 30 days of the working closing, unless you ask in writing for them to be destroyed sooner.
• Petition form contents — retained by Netlify Forms for as long as needed to answer you, and removed from active records within twelve (12) months thereafter.
• Email correspondence — kept only as long as needed to serve you, and pruned periodically.
• Payment records — kept for the period required by applicable tax and accounting law (typically 5–7 years).

— VII —Who sees it

Only the sister or sisters performing your working will see the contents of your petition. Beyond the Coven, your data may be processed by:

• Netlify, Inc. — site hosting and form submissions;
• Our payment processor (e.g. Stripe, PayPal) — only the data they require to take payment;
• Our email provider — to deliver our reply to you.

Each of these providers operates under its own privacy policy and is bound by data-processing terms. We do not share your information with anyone else, except where compelled to do so by valid legal process.

— VIII —Children

The Site is not directed at children under 18, and we do not knowingly collect personal information from children. If you believe a child has submitted information through the Site, please contact us and we will delete it.

— IX —Your rights

Depending on where you live (including the United Kingdom, the European Economic Area, California, and other jurisdictions with similar laws) you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("the right to be forgotten") — including immediate destruction of any photograph you sent us;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting processing already carried out;
• lodge a complaint with your national data-protection authority.

To exercise any of these rights, write to us through the petition form, marked "Concerning my data". We respond within 30 days.

— X —Security

The Site is served over HTTPS. Petition data is held within Netlify's encrypted form storage. Photographs are kept in access-restricted folders and destroyed on the schedule above. Despite reasonable safeguards, no system on the open internet is perfectly secure; you submit information to us at your own discretion.

— XI —International transfers

Our hosting and payment providers operate internationally. Your data may therefore be processed in countries other than the one in which you live, including the United States. Where required by law, such transfers are protected by standard contractual clauses or equivalent safeguards offered by those providers.

— XII —Changes to this Policy

We may revise this Policy from time to time. The current version will always be posted at this URL with the revision date noted above. Material changes will be highlighted at the top of the page for a reasonable period.

— XIII —Contact

For any privacy question — or to ask us, at any time, to destroy a photograph or delete records we hold about you — write to us via the petition form, marked "Concerning my data". By oath, we answer.

Sub Rosa · Sub Cinere.