Legal
Privacy Notice
How we collect, use and protect your personal data, and your rights under UK GDPR.
Effective 30 June 2026
1. Who we are
The BNN Astrology Association (“we”, “us”) is the data controller for the personal data described in this notice. You can contact us about data protection at info@bnnastrology.org. Our postal address is available on request.
2. The data we collect
- Application data, name, email and details you submit on the join, membership, exam or contact forms.
- Membership data, your tier, credential, status and directory profile (if you choose to be listed).
- Payment data, plan, amount and invoice references. Card details are handled by our payment provider and never reach our servers.
- Newsletter & events, your email and name when you subscribe or book an event.
- Technical data, limited request data (such as IP address and browser type) used for security and reliability.
3. How we use it & our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Handling membership and exam applications you submit | Performance of a contract / steps prior to a contract |
| Taking payment and keeping invoice / accounting records | Contract & legal obligation |
| Sending the newsletter and event announcements | Consent (withdrawable at any time) |
| Listing credentialed members (name, grade, country) in the public practitioner directory | Consent (opt-in, withdrawable at any time) |
| Replying to contact-form enquiries | Legitimate interests |
| Managing event bookings and calendar invitations | Performance of a contract / consent |
| Site security, fraud/abuse prevention and reliability | Legitimate interests |
4. Who processes your data
We use trusted service providers (processors) to run the Association. Some are outside the UK/EEA; where data is transferred internationally it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
| Provider | Service | Location |
|---|---|---|
| Supabase | Database, authentication & file storage | EU / US |
| Dodo Payments | Payments (merchant of record) | Global |
| Resend | Transactional & newsletter email | US |
| Google (Calendar) | Event calendar & attendee invitations | Global |
| Vercel | Website hosting & serverless functions | Global |
5. Cookies
We use only essential cookies and local storage. See our Cookie Policy for details and to change your choices.
6. How long we keep it
- Membership & application records, For the duration of membership, then up to 2 years.
- Contact-form enquiries, Up to 24 months.
- Newsletter subscription, Until you unsubscribe.
- Public directory listing, While you consent and remain credentialed; removed immediately on withdrawal.
- Event bookings, Up to 12 months after the event.
- Invoices & payment records, 6 years (UK tax law), then deleted or anonymised.
7. Your rights
Under UK GDPR you have the right to:
- Access: a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete your data (subject to records we must keep by law).
- Restriction: ask us to pause processing in certain cases.
- Portability: receive your data in a portable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: at any time, where processing is based on consent.
To exercise any of these, email info@bnnastrology.org. We respond within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
8. Children
Our services are intended for adults. We do not knowingly collect data from children under 16.
9. Changes
We may update this notice; we’ll change the “effective” date above and, for significant changes, tell members by email.