Tarot.com Privacy Policy

Last Updated: February 11, 2025

Last Reviewed: October 15, 2020

Introduction

This Privacy Policy applies to the websites owned and operated by Zappallas, Inc. (“Zappallas”, “we”, “our”, or “us”), including Tarot.com, Numerology.com, Dailyhoroscope.com and Zappallas, together with Zappallas’ applications and services that collect personal data and display these terms (collectively, the “Platforms”). By using any of our Platforms, you agree that your personal data will be handled as described in this Privacy Policy, and consent to the same. You also agree to any other terms referenced in this Privacy Policy, including without limitation our Terms of Use, which are incorporated by reference. If you do not agree with our practices set forth in this Privacy Policy, you are prohibited from using the Platforms or otherwise sharing personal data with Zappallas.

This Privacy Policy does not apply to any Zappallas Platforms or other sites or services that do not display or link to this Privacy Policy or that contain their own privacy statement.

Zappallas does not publish text, images, or multimedia content that portray nudity, foul language, violence or other data not suitable for children. Regardless, our Platforms are not intended for or directed to children under the age of 16 and you are prohibited from using our Platforms if you are under 16. Please let us know if you believe we have collected personal data from someone under the age of 16. Where we discover that personal data of an individual under 16 has been provided to us, we will use reasonable efforts to remove such information from our systems.

We want this Privacy Policy to be accessible to you. If you would like to receive this Privacy Policy in another format (e.g., audio, large print, braille), please contact us as indicated in the Where to Contact Us section below.

Location of Data; International Transfers

Zappallas is headquartered in the United States, but we provide our Platforms globally. When you use our Platforms from outside of the U.S., your personal data may be transferred to, stored in, and processed in the U.S. By providing us with your personal data, you consent to such transfer, storage, and processing of your information anywhere in the world. Some jurisdictions may have data-protection laws less stringent than those in your home jurisdiction. As required by applicable law, we will enter into data protection agreements or other legally approved mechanisms to lawfully transfer and otherwise process personal data internationally, such as standard contractual clauses, lawfully approved certifications, compliance with a jurisdiction’s data privacy framework, or binding corporate rules.

Our Collection And Use Of Your Data

Data We Collect From You

Personal Data You Provide Directly. We collect personal data directly from you when you register on our Platforms, sign up to receive text messages (“SMS messages”) on your mobile device, personalize your account, or pay for services or products through our Platforms. We may also collect personal data directly from you if you provide such information in narrative fields, or in connection with a personalized horoscope, astrology, tarot, or numerology report. For instance, when you create an account with us you may be required to provide a name, email address, mobile number, and birthdate for us to provide you with products and services through our Platforms. In addition, to provide you with a more individualized experience, like a personalized horoscope, astrology, tarot, or numerology report, you may wish to provide your birth location, zip code, astrological sign, sexual orientation, gender identity, and other related data. Some of this data, such as sexual orientation and gender identity, may be considered “sensitive personal data” under applicable law so we want to reiterate that you are not required to provide it: that decision is up to you. Where you choose to purchase products or services, including Karma Coins® tokens, gift certificates, and expert readings, we will collect payment card data such as your credit card number, expiration date, and billing address, but this data is sent directly to our payment processors and is never stored or otherwise retained by Zappallas. Payments may also be processed using PayPal and those payments are processed in accordance with the terms of your account with PayPal.

Data We Automatically Collect. When you interact with our Platforms we may collect data about you through automated means such as your unique device ID, device type, machine ID, approximate location, computer and connection data, browser type, IP address, domain name, and date and time stamps for your visits. We may also collect data associated with your use of our Platforms, including data about the way you interact with our Platforms or any content or advertising included on our Platforms, your page views and traffic to and from our Platforms, hyperlinks clicked, and the URL you visited before and after you use the Platforms. As is the case with most websites, we also employ cookies, pixel tags, web beacons, and similar technologies within our Platforms to collect and store certain data about users, to improve our Platforms and advertising, and to help us remember you and your preferences when you revisit our Platforms. Our use of third-party vendors as described in this section has been interpreted to be a “sale” and “sharing” by some privacy regulators, so we are therefore disclosing that we may sell or share your personal data to specific categories of third parties. We also provide an opportunity for you to opt out of “sales” or “sharing” (as defined by applicable law) of your personal data through a Do Not Sell or Share My Personal Data link in our Platform footer; you may be able to limit sharing with third parties as described in this section by clicking and following the instructions at that link. You may also review our cookie-manager tool on our Platforms for more information about what we automatically collect from you, and your options regarding such collection.

Data Collected by Third Parties. As disclosed in our cookie-manager tool on our Platforms, we also incorporate third-party ads, offerings, and other technologies (such as plugins, pixels, and cookies) into our Platforms, enabling third parties to collect usage, demographic, and other data (including personal data) about you and your online activities through your use of our Platforms and across other websites and applications. Any data collected through such integrated ads or technologies is collected directly by those third parties for their use and disclosure and is subject to the third party’s privacy policies. Please review our cookie-manager tool for more information about these third parties and their technologies.

Data Provided to Social Networking Sites. Some of our Platforms may offer you the ability to connect to your social networking accounts (“SNS”) such as Facebook, Instagram, Pinterest, Twitter/X, YouTube or other social networking sites directly from our Platforms to the SNS or from the SNS to our Platforms. Where you choose to connect your account with an SNS, post or otherwise share data on the SNS connected to your account, or interact with our content using an SNS such as through use of a “Like” or “Share” feature, we may receive or access data about you from the SNS. The applicable SNS will also receive data about your interactions with it. Please remember that any interactions involving an SNS, including without limitation posting data to an SNS, may be accessible by other users of the SNS and subject to the SNS’s terms of service and privacy policy.

During the last 12 months, we have collected all categories of personal data listed in this Our Collection And Use Of Your Personal Data section.

How We Use Your Data

We use your data to operate and improve our Platforms, to provide you with products and services you have requested including order fulfillment and associated payment processing, responding to inquiries or customer service requests, sending information to you including SMS messages (where you sign up to receive them), invoices, confirmations and updates, administering your account, displaying content based upon your interests, and to protect against, investigate, and deter any unauthorized, illegal, or fraudulent activity. In addition, we may use your data to market our products, Platforms, promotions, and offers which we feel you may find interesting, provided you have not opted out of receiving such data or, where required by law, we have your express consent. We may also use your data to understand general customer trends and patterns and improve our Platforms.

When We Share Your Data

Third-Party Service Providers. We may disclose your personal data to third-party service providers who perform services on our behalf including third parties that process payments; send marketing communications on our behalf; deliver SMS messages you sign up to receive; help us create or maintain our databases; or help us research or analyze use of our Platforms. We require that our service providers get your prior consent to use your data to market their own products or services to you directly. When we transfer any of your personal data to a service provider, the provider will be contractually required to use your data only to carry out the services we have requested, to provide appropriate protection of your data, and to comply with applicable laws and regulations.

Third-Party Analytics and Targeted Advertising. We use third parties for analytics and targeted advertising purposes. Using third parties for these services has been interpreted to be a “sale” and “sharing” by some privacy regulators, and we therefore offer you the option to opt out of these practices.

Third-Party Partners. We may share data with our third-party partners including advertising partners (excluding mobile phone numbers). When we do, we will either aggregate (combine the data of numerous people together so that the data does not identify you) or de-identify (remove or change data to prevent association with you) your personal data so that the third party will not be able to associate that data to you, your computer, your household, or your device.

SNSs and Third Parties Using Integrated Technology. As discussed above, data collected about you via third-party ads, SNSs connected to your account, and other third-party integrated technologies (such as plugins, pixels, and cookies) is collected directly by, and therefore disclosed to, the third party or SNS. Any such data is subject to the third party or SNS’s privacy policy. Please see our cookie-manager tool for more information on this topic.

Advertising. We work with third parties, such as network advertisers, to display advertisements on our Platforms, as well as to display Zappallas ads on third-party websites. Network advertisers are third parties that display advertisements based on your use of our Platforms, along with other third-party websites and mobile applications usage. This enables both Zappallas and these third parties to target advertisements by displaying ads for products and services in which you might be interested. Third-party ad network providers, advertisers, sponsors, and/or traffic measurement services may use cookies and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These third-party cookies and other technologies are governed by each third party’s specific privacy policy, not this one. We may provide these third-party advertisers with information about your usage of our Platforms. More specifically, at this time we partner with SHE Media for the purposes of placing advertising on our Platforms, and SHE Media will collect and use certain data for advertising purposes. To learn more about SHE Media’s data usage, please see their privacy policy.

To Comply with Legal Process. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We reserve the right to disclose your personal data as required by law and when we believe that disclosure is necessary to protect our rights or the safety of any person or entity, or to comply with a judicial proceeding, court order, or legal process served on us.

Third Parties to a Business Transaction. If we go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of our assets, your personal data will likely be among the assets transferred. Similarly, if we are a party to a bankruptcy proceeding, the information we have collected about you may be transferred to an acquiring or merged entity. You will be notified via prominent notice on our Platforms for 30 days before any such change in ownership or control of your personal data.

Where we want to share data with third parties not described above, we will obtain your consent to do so.

Linked Websites

Our Platforms may contain links to other websites and third-party goods or services that are not covered by this Privacy Policy. Those sites, goods, and services may have data practices that are different than ours. If you access or otherwise submit personal data to any of those sites, or purchase goods or services from those third parties, you will be subject to their policies and procedures. We encourage you to carefully read the applicable terms and conditions of any website you visit, and before purchasing any third-party goods or services.

Storing And Accessing Your Data

How We Store And Secure Your Data

Zappallas will take appropriate precautions to protect personal data in our possession from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We are committed to complying with applicable privacy laws and adhering to appropriate measures designed to protect personal data. We also encourage you to take steps to protect your account and personal data, including signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in information private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity. Regardless of the steps we take, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Retention of Your Personal Data

We will retain your data for as long as your account is active, as needed to provide the Platforms, or to comply with our legal obligations, resolve disputes, or enforce our agreements.

Use of Cookies and Other Tracking Mechanisms; Universal Opt-Out Mechanism Compatibility

As more fully disclosed through the cookie-manager tool available through our Platforms, Zappallas uses cookies and other technologies to (i) analyze trends, administer the Platforms, perform analytics functions such as tracking movements around the Platforms, and gather demographic information about our audience as a whole and (ii) target and customize advertisements that may be displayed to you on our Platforms and third-party websites. We may receive reports from these tracking technologies on an individual and aggregated basis. In addition, our use of third-party vendors for analytics and targeted-advertising purposes has been interpreted to be a “sale” and “sharing” by some privacy regulators, so we are therefore disclosing that we may sell or share your personal data to specific categories of third parties.

To learn more about these technologies, how Zappallas uses them, and your choices regarding our use of these technologies, please review the information available through our cookie-manager tool. You can use our cookie-manager tool to opt out of all cookies our Platforms use except cookies necessary for Platform functionality. In addition, our Platforms respond to Do Not Sell and Do Not Track signals, and a global opt-out mechanism (currently, the Global Privacy Control), all of which you can activate through your browser or device settings. Specifically, you can indicate your desired privacy settings through your browser or device, and our Platforms will receive those preferences and act accordingly.

Your Personal Data Choices and Rights

Updating Or Making Choices About Your Data

Updating or Making Choices Through the Platform; Unlinking SNS Accounts

If your personal data changes or if you no longer desire to use our Platforms, you may correct, update, or delete data about you by logging into your account profile on the applicable Platform and making changes within your account settings. You may also call or email us or contact us by postal mail at the contact information listed below. We will respond to your request within the time required by applicable law.

If you decide at any time that you no longer wish to have your SNS account linked to your Platforms account, you must de-link the SNS by logging into your profile for such SNS and changing your preferences. Please refer to the privacy settings of the SNS to determine how to adjust our permissions and manage the interactivity between our Platforms and your social media account.

You can choose to stop receiving personalized emails, promotional emails and newsletters from us at any time simply by following the unsubscribe link at the bottom of any email or newsletter, or by logging into your profile on the applicable Platform and changing your account preferences. Please note that in order for us to continue servicing your account, you cannot opt out of receiving service related emails regarding your account or your transactions with us.

Other Privacy Rights Under Applicable Law

In addition to the rights we provide to you elsewhere in this Privacy Policy, this section details how you may review, update, or delete certain personal data and exercise any additional rights you may have under applicable law.

  • Opting Out of Text Messages and Promotional Emails. You may opt out of receiving any text messages by replying “STOP.” You may opt out of marketing or promotional emails from Zappallas by (i) clicking the “Unsubscribe” (or similar) link in those emails or (ii) emailing [email protected]. Please keep in mind that you may still receive transactional and service-related emails from us, such as emails related to your purchases or subscriptions.
  • Other Rights. In the United States, consumer privacy is governed by federal privacy laws covering specific types of data and/or data uses, and state privacy laws providing general consumer-privacy rights. This section provides additional information regarding state-level privacy laws that are currently, or will soon be, in effect. Residents of such states can exercise their privacy rights by submitting a request to us as indicated in the Where to Contact Us section below. Please note that the below list may contain rights that are not applicable to you (e.g., if you live in a state without a comprehensive privacy law).

    • Right to Correct. You have the right to request that we correct inaccurate personal data about you. If you become aware that the personal data that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
    • Right to Deletion. You have the right to request that we delete your personal data, with certain exceptions.
    • Right to Know/Right to Access/Portability. You have the right to request confirmation regarding whether we have collected personal data about you and that we provide you with access to that personal data. If you submit an access request, we will provide you with copies of the requested pieces of personal data in a portable and readily usable format. Please note that we may be prohibited by law from disclosing certain pieces of personal data, and we may be limited in the number or frequency of requests we must fulfill.
    • Right to Disclosure You may request that we disclose information to you about our collection and use of your personal data, such as: (i) the categories of personal data we have collected about you; (ii) the categories of sources for the personal data we have collected about you; (iii) our business purpose for collecting, using, processing, sharing or selling that personal data, as applicable; (iv) the categories of third parties (and in some jurisdictions, the specific third parties) with whom we share that personal data; and (v) if we sold or shared your personal data for cross-contextual behavioral advertising (as defined by applicable law), two separate lists stating: (A) sales or sharing, identifying the personal data categories that each category of recipient purchased; and (B) disclosures for a business purpose, identifying the personal data categories that each category of recipient obtained. Certain laws limit the number or frequency of requests we must fulfill.
    • Limited Use and Disclosure of Sensitive Personal Data. You have the right to opt-out of or limit our use of your sensitive personal data, but please note that Zappallas does not require you to provide sensitive personal data. If you choose to provide us with sensitive personal data, we will only use it to provide you with the products and services you request. In no event do we disclose any sensitive personal data for the purpose of inferring characteristics about you. If this ever changes in the future, we will update this Privacy Policy and provide you with methods to limit our use and disclosure of your sensitive personal data.
    • Opt-Out of Selling and Sharing. You may opt-out of the sale or sharing of personal data for targeted advertising practices by adjusting your cookie and/or browser settings, or by submitting a request by email at [email protected]. If you submit your request by email, please put “OPT-OUT REQUEST” in the subject line.
    • Right to Opt-Out of Profiling. You have the right to opt-out of certain automated profiling, particularly if the profiling is done in connection with access to critical goods or services (e.g., essential goods or services or employment).
    • Right to Nondiscrimination. We will not discriminate against you for exercising your privacy rights. For example, unless permitted by law we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services; (iii) provide you a different level or quality of goods or services; (iv) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (v) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under applicable privacy laws.
    • Right to Disclosure of Marketing Information. California’s Shine the Light Act (Civil Code sections 1798.83-1798.84) entitles California residents to request certain disclosures regarding personal data sharing with affiliates and/or third parties for marketing purposes.
    • Right to Appeal. If, after submitting a request under this section, you believe we have refused to act according to applicable law, you may appeal our action or inaction by using the following appeal process:

      • As indicated in the Where to Contact Us section below, send us a notice with “Privacy Rights Appeal Notice” in the subject line (“Appeal Notice”) within 60 days of the earlier of either (i) our rejection of, or failure to fully comply with, your request or (ii) if we have not responded to your request, when you initially submitted your request.
      • The Appeal Notice must contain information sufficient for us to verify your state of residence, identity/authority to act on behalf of the consumer, and evaluate your appeal.
      • We will either approve or deny your appeal within 45 days of your Appeal Notice, and will notify you in writing (which may be by email), of our decision and the reason(s) for our decision.
      • If we deny your appeal, our notice may provide you with contact information for the attorney general in your jurisdiction so you may submit a complaint to them.

Additional Information for International Residents

Residents of certain foreign countries have legal rights that overlap with those set forth in the “Other Privacy Rights Under Applicable Law” section above. They may also have legal rights associated with their personal data (“Personal Data”) beyond the generally applicable rights set forth above. If you are a resident of such a foreign jurisdiction, this section provides you with additional information associated with those rights.

• International Transfers. As disclosed above, Zappallas is headquartered in the U.S. and Personal Data will be transferred to, processed, and maintained on computer systems located in the U.S. The U.S. is not currently a country the European Union has deemed “adequate” under applicable data protection laws. We may enter into data protection agreements or other legally approved mechanisms with our vendors to support compliance with applicable law, however. Specifically, we will take appropriate safeguards to require that Personal Data we process will remain protected in accordance with this Privacy Policy when transferred internationally, including when processed by third-party service providers. The safeguards we will take may include one or more of the following: implementing standard contractual clauses, relying on a third-party service provider’s lawfully approved certification and/or compliance with a data privacy framework, or binding corporate rules.

• Zappallas as Controller. For Personal Data we collect from our Platforms, Zappallas is generally the data controller.

• Legal Basis for Processing. Zappallas collects and uses Personal Data based on our delivery of requested goods or services, legitimate business interest, or consent. More specifically, we will collect Personal Data from you: (i) where we have your consent; (ii) where we need your Personal Data to provide the Platforms, other goods or services you request, and/or perform a contract with you; (iii) where we have a legal obligation to do so; or (iv) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (such as processing for administrative purposes, product development or improvement, preventing fraud or criminal acts, or securing information that we collect). If you have questions about, or need further information concerning, the legal basis on which we collect and use your Personal Data, please send an email to [email protected].

• Onward Transfers. As disclosed above, Zappallas engages third-party providers to provide a variety of services that are necessary for the Platforms’ functionality. Such third parties act in accordance with the terms of our agreements, which include appropriate data-protection provisions. These agreements require that these third parties use your Personal Data only in a manner consistent with our instructions and applicable law.

• Complaints. If you have a concern about our processing of Personal Data that we are not able to resolve, you have the right to lodge a complaint with the data-protection authority where you reside.

Identity Verification Requirement

We are required by law to verify that any request submitted was made by someone with the legal right to access the information. Therefore, before we can give access to or provide any information based upon a data-subject request, we may require that you provide us with additional information so we can verify your identity and legal authority.

To make a request, please contact us at [email protected] with “Personal Data Request” in the subject line and provide us with full details in relation to your request, including your contact information and any other detail you feel is relevant. We will provide a response to any access request within the timeframe required by law. If we cannot substantively respond in a timely manner, we will notify you and provide you with the reason for the delay.

Under certain circumstances we may not be able to fulfill your request, such as where doing so would interfere with our regulatory or legal obligations, where we cannot verify your identity, or if your request involves disproportionate cost or effort; in any event, we will respond to your request within a reasonable time frame and as required by law, and provide you an explanation.

Please also note that in some cases, as we have previously noted within this Privacy Policy, you are able to access, correct, and update your personal data directly by logging into your account. Should you need additional assistance, please contact us by email {[email protected]}.

Changes To This Privacy Policy

Any updates or changes to this Privacy Policy will be posted to this Privacy Policy, and across our Platforms including our websites’ home pages, on our app, and other places we deem appropriate so that you are aware of what data we collect, how we use it, and under what circumstances we disclose it. We reserve the right to modify this Privacy Policy at any time, so please review it frequently. If we make material changes to this Privacy Policy, we will notify you here, by e-mail, or by means of a notice as described in this paragraph, prior to the change becoming effective.

Where To Contact Us

If you have any questions or concerns regarding this Privacy Policy, or would like to exercise your privacy rights, please contact us at:

Zappallas, Inc.
7412 SW Beaverton Hillsdale Hwy, Suite 102
Portland, Oregon 97225
Email Us
Toll free: 1-800-471-8313