Originally published: 11 July 2026 · Last updated: 17 July 2026

Privacy Policy

This Privacy Policy explains what personal data Natal Settings collects, the purposes for which it is processed, the legal bases relied upon, and your rights under the EU General Data Protection Regulation (GDPR).

In summary: only the data required to provide the services you request is collected; it is not sold and is not shared for marketing; and information disclosed in a consultation is treated as confidential.

1. Data controller

Natal Settings is a sole practice operated by Margo Shevnin, established in Cyprus, and is the data controller for the personal data described in this policy.

Enquiries regarding this policy or your personal data may be sent to hello@natalsettings.com.

2. Personal data collected

2.1 When you enquire about or book a consultation

  1. Your name and the contact details used for our correspondence. Depending on how we are in contact, this may be an email address, a telephone number, or a username on a messaging or social platform (for example WhatsApp, Telegram, Instagram or LinkedIn).
  2. Birth data — date, time and place of birth — required to produce your chart and reading.
  3. Any information you elect to disclose regarding your circumstances, your question or your personal life. Depending on the consultation, this may include personal data of a sensitive nature, including data concerning your relationships, family, work, or health and wellbeing.

2.2 Partnership and group consultations

Consultations involving more than one person require the name and birth data of the additional individuals (a partner, family members, or colleagues).

You are responsible for ensuring that each such individual is informed of, and agrees to, this processing. Where a consultation concerns a child, the consent of a parent or guardian is required before that child’s data is processed.

2.3 Payment

Payment is made by Revolut or bank transfer. Card details are never received or stored by Natal Settings. Payments are processed by Revolut and the relevant bank under their own privacy terms.

2.4 When you visit this website

This website uses Google Analytics 4 to measure how visitors find and use it. The data recorded comprises:

  1. the pages viewed and the order in which they are viewed;
  2. the date, time and approximate duration of the visit;
  3. the referring website or link;
  4. approximate location (country, and in some cases city);
  5. device type, browser and operating system.

A randomly generated identifier is assigned to distinguish one visitor from another. This identifier is not linked to your name, contact details or birth data, and no advertising or behavioural profile is created.

Google Analytics 4 does not log or store IP addresses. The IP address is used transiently to derive the approximate location referred to above and is then discarded.

Analytics is loaded only where consent has been given via the notice displayed on the website. Where consent is declined, Google Analytics is not loaded, no analytics cookies are set, and no data concerning the visit is transmitted to Google. Save for Google Analytics, and only following consent, the website makes no third-party requests; fonts and images are served from this domain.

Analytics data is processed by Google LLC and may be processed on servers outside the European Union, including in the United States. For such transfers, Google is certified under the EU–U.S. Data Privacy Framework and additionally relies on the European Commission’s Standard Contractual Clauses as a safeguard.

The website is hosted on Cloudflare Pages, which may process technical data such as IP address and browser type for security and delivery purposes, as is standard for any website and as governed by Cloudflare’s privacy policy.

2.5 Session recordings and notes

With your prior consent, I may record our conversation or the voice messages we exchange, and I keep written notes, in order to prepare and deliver your reading. Recording is optional: you may decline, and I will work from written notes instead. Any recording is my private working material and is deleted once your reading is complete.

To develop my analysis I may use software tools, including AI tools. Where I do, I use only de-identified notes that contain nothing identifying you — no name, contact details or birth data. Recordings and full transcripts are not uploaded to such tools.

3. Cookies and local storage

This website sets no advertising cookies and no cookies that track visitors across other websites.

Where analytics consent is given, Google Analytics sets two first-party cookies:

  1. _ga — stores the randomly generated visitor identifier used to distinguish one visitor from another. Expiry: 2 years from the most recent visit.
  2. _ga_QSFYGEYVBM — maintains the state of the current browsing session; the suffix corresponds to this website’s Analytics identifier. Expiry: 2 years from the most recent visit.

Both cookies are first-party and contain only a random identifier; they hold no name, contact details or other personal detail. Browsers may impose a shorter lifetime in the absence of a return visit (approximately 7 days in Safari and approximately 13 months in Chrome). Where analytics consent is declined, neither cookie is set.

Independently of the above, and regardless of the choice made, the consent selection is stored as a single entry named natalsettings-consent in the browser’s local storage, so that the notice is not shown again. This entry does not leave the browser. It, and the cookies described above, may be cleared at any time through the browser settings; clearing the natalsettings-consent entry causes the notice to be shown again.

4. Purposes and legal bases

Personal data is processed for the following purposes and on the following legal bases:

  1. Provision of the consultation requested — necessary for performance of a contract (GDPR Article 6(1)(b)).
  2. Correspondence relating to your reading, questions and session — necessary for performance of a contract (GDPR Article 6(1)(b)).
  3. Sensitive data disclosed in a consultation — processed on the basis of explicit consent (GDPR Article 9(2)(a)). Such data is provided at your discretion.
  4. Website analytics — processed on the basis of consent (GDPR Article 6(1)(a)), given via the website notice and withdrawable at any time by declining or by clearing browser storage. Analytics data is retained in Google Analytics for 14 months, after which it is deleted automatically by Google.
  5. Security and operation of the website — processed on the basis of legitimate interests (GDPR Article 6(1)(f)).
  6. Recording of a consultation — processed on the basis of your consent (GDPR Article 6(1)(a), and Article 9(2)(a) where a recording concerns sensitive matters), which may be withheld or withdrawn at any time.

No automated decision-making is carried out, and no individual profiling is performed. Marketing email is not sent except where specifically requested.

5. Recipients and processors

Personal data is not sold and is not disclosed to advertisers. Consultation content is not disclosed to any third party.

The following processors handle personal data on behalf of Natal Settings:

  1. Google LLC (Gmail) — transmission, receipt and storage of email correspondence.
  2. Cloudflare — website hosting and associated technical processing for delivery and security, and email routing (forwarding messages addressed to hello@natalsettings.com to the mailbox referred to above).
  3. Google LLC (Google Analytics) — provision of aggregate website statistics, and only where analytics consent has been given.
  4. Revolut and the relevant bank — payment processing.

Correspondence handled by Google may be processed on servers outside the European Union, including in the United States, under the same EU–U.S. Data Privacy Framework certification and Standard Contractual Clauses referred to in section 2.4.

Any future engagement of an additional processor will be reflected in an update to this policy.

6. Retention

  1. Reading and birth data — retained for as long as ongoing support may be required, and in any event no longer than three years following the last contact, unless earlier deletion is requested.
  2. Correspondence — retained for up to three years.
  3. Website analytics — retained in Google Analytics for 14 months, then deleted automatically.
  4. Payment records — retained for the period required by Cyprus tax law, currently six years from the end of the relevant tax year.
  5. Session recordings — deleted once your reading is complete, and in any event within 30 days of delivery.

Deletion may be requested at any time and will be carried out except where retention is required by law.

7. Confidentiality

Information disclosed in a consultation is treated as confidential. Clients are not discussed, and no client’s circumstances are used as an example — in content, on social media, or otherwise — without that client’s prior and specific agreement.

8. Your rights

Under the GDPR you have the right to:

  1. access the personal data held about you;
  2. rectify inaccurate data;
  3. erase your data (“the right to be forgotten”);
  4. restrict or object to processing;
  5. receive your data in a portable format;
  6. withdraw consent at any time, without giving reasons.

Requests may be made to hello@natalsettings.com and will be answered within one month.

If you consider that your data has not been handled in accordance with the law, a complaint may be lodged with the Office of the Commissioner for Personal Data Protection in Cyprus, or with the supervisory authority in your country of residence.

9. Security

Personal data is held on password-protected, encrypted devices and accounts and is not shared. While no system can be guaranteed entirely secure, reasonable measures are taken to protect the data entrusted.

10. Children

The services are provided to adults. Where a family consultation involves a child’s birth data, processing is carried out only with the consent of a parent or guardian.

11. Changes to this policy

Any change to this policy will be published on this page, and the date above will be updated.

12. Contact

Questions concerning this policy may be sent to hello@natalsettings.com.

← Back to Natal Settings