On My Terms

Privacy notice

Last updated 11 October 2026

This notice explains what personal information On My Terms collects, why, who can see it, and what rights you have over it under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

On My Terms is run by Caron Harris, trading as On My Terms. We are the “controller” of your personal information, which means we decide how it's used. Our business address is Suite RA01, 195–197 Wood Street, London E17 3NU. We are registered with the Information Commissioner's Office under number ZC268843. You can contact us through the contact form or at hello@onmytermswithcaron.co.uk.

What we collect

  • Your account: your name and email address, when you create a free account or join the Circle.
  • Membership and payments: your plan (monthly or yearly), its status and renewal date, and a Stripe customer and subscription reference. Card details are handled entirely by Stripe — we never see or store your card number.
  • Personal readings: your name, email, the focus area you choose, your question (if you ask one), the cards you draw, and the written reading.
  • Values Discovery and My Values: how you responded to each value, the values you keep, your five core and five supporting values, the reflections you write about them, your earlier versions, and when you agreed to how they're kept.
  • Welcome questions and My Next Chapter: the values, life chapter, priorities, focus areas, intentions and goals you choose to share.
  • My Numbers: your birth name, current name (if different) and date of birth, if you choose to add them.
  • My Journey: the journal entries you write, the reflections you save from quotes, numbers, meditations and Principles, and when you agreed to how your journal is kept.
  • Meditations: which meditations you've completed and saved as favourites.
  • Daily Quotes: the quotes you save, your reaction to a quote (a heart or a thumbs up), any comments you post, any comment you report, and a record of saves, revisits, journal reflections and shares (used only in total, to plan future quotes).
  • Feedback: what you tell Caron through Share feedback, the area it's about, and whether you're happy to be contacted about it.
  • Messages: anything you send through the contact form.

We don't use analytics, advertising or tracking tools, and we don't build profiles of you for marketing. We don't send marketing emails.

Why we use it, and our lawful basis

  • To provide what you've signed up for — your account, membership, readings and the member area (journal, values, numbers, meditations, comments): because it's needed for our agreement with you.
  • To take payments and keep records: for our agreement with you, and because the law requires us to keep financial records.
  • To keep the site safe and respectful (moderating comments and reports, preventing misuse), to read feedback and reply to messages, and to count quote activity in total: our legitimate interest in running a safe, useful site, which we've checked doesn't override your interests.

Health, relationships and beliefs

Some of what you share — especially in your journal and in Values Discovery — may be about your health or wellbeing, your religious, spiritual or philosophical beliefs, or your relationships. The law calls this “special category” information and asks for extra care.

  • Your journal: before your first entry, we ask for your explicit consent, with an unticked box you tick yourself. We record when you agreed and to which wording. You can withdraw at any time from My Journey; your journal entries are then deleted.
  • Values Discovery and My Values: the values you choose (for example Health, Faith or Spirituality) and the reflections you write about them may reveal this kind of information. Before you begin, we ask for your explicit consent in the same way, recorded with the time and wording. You can withdraw at any time with “Delete my values” in My Values, which deletes them all.
  • Feedback and messages: please don't include health or other very personal information — these go to Caron. If you do, we use it only to reply to you, and you can ask us to delete it.
  • Reading questions: share only what you're comfortable sharing. When personal readings open, you'll be asked for your agreement before your question is used to prepare your reading.

Your journal, values and reflections

Your journal entries, values and reflections are private to your account. The site's database only lets your own account read them: no other member can see them, Caron has no access to them through the site, and they are never sent to any AI service. Like any website's data, they're stored with our database provider, Supabase, which keeps them on our behalf. Anyone with owner access to the database itself — Caron and the person who helps her run the site — could technically open them through our database provider's own tools. We don't, unless you ask us to (for example, to delete your account) or the law requires it. Our database provider's backups also hold copies for a limited time.

Who can see your information

  • Only you, on the site: your journal entries, values and reflections, welcome answers, Next Chapter details, numerology details, saved quotes, meditation activity and your own reaction to each quote.
  • Other signed-in members: your first name and the words of any comment you post on a Daily Quote, once it has been published. Members see how many people reacted to a quote, never who.
  • Caron, as the site administrator: your account details and membership status, reading orders, comments (including ones waiting to be published), reports, your feedback and your messages. Your email address is only shown alongside your feedback if you said Caron may contact you about it.
  • Personal readings: your reading is private to your account and kept in My Readings. Caron sees what's needed to fulfil and support your order (your name, email, what you bought and when, and whether the reading was written), not the reading itself. If a reading has to be written by hand, she also sees your focus, question and cards.

Who we share it with

We use these service providers, who process information on our behalf. We do not sell your information.

  • Vercel — hosts the website.
  • Supabase — our database and sign-in, and storage for the meditation audio.
  • Resend — sends our emails (setting or resetting your password, confirming a new email address, replying to messages, and emails about your readings and membership).
  • Stripe — payments and the billing page where you manage your membership. When you buy a reading, the name you give, your focus area, your question (if you ask one) and the cards you choose are also sent to Stripe with the payment and kept in its payment record. They aren't shown on the payment page, on receipts or on your billing page. How long Stripe keeps them is set by Stripe's own retention arrangements, not by us.
  • Anthropic — the AI service that prepares personal readings. It receives the name you give, your focus area, your question and your cards — never your email, payment details, journal, values or reflections. Under its current policy, Anthropic deletes what it receives within 30 days, unless it needs to keep it longer to enforce its usage policy or to comply with the law.

Some of these providers are based in, or process information in, the United States. Where your information leaves the UK, we rely on the safeguards UK law allows: UK adequacy regulations (including the UK–US “data bridge” for certified companies) or the Information Commissioner's approved contract clauses.

How long we keep it

  • Your account and what's in it: for as long as your account is open. You can delete journal entries, your values and reflections, your numerology details, comments, saved quotes and reactions yourself at any time. They're removed from our website's active database straight away; copies can remain in our database provider's backups for a limited time, until those backups are replaced. (None of these are sent to Stripe.)
  • If you close your account: ask us through the contact form and we'll delete your account and what's in it, and confirm to you, within one month.
  • Payment and order records: for as long as UK tax and accounting law requires — at least five years after the 31 January tax return deadline for the year they relate to.
  • A fully refunded reading: only the minimum record (who, what, when and the amount). The reading, its cards and your question are deleted from our website's database; copies remain in our database provider's backups for a limited time, and the details sent with the payment stay in Stripe's payment record under Stripe's own retention arrangements (see “Who we share it with”). A refunded clarifying card's record keeps which card was drawn, but not your question or its interpretation.
  • Messages and feedback: for as long as we need them to help you. You can ask us to delete them at any time.

Your rights

You can ask to access, correct, export or delete your personal information, to restrict or object to how it is used, and to withdraw consent where we rely on it.

You can already, at any time and without asking us:

  • edit or delete your journal entries, or withdraw your journal consent;
  • add to your values reflections, and delete your values and reflections (including earlier versions), which also withdraws your Values Discovery consent;
  • change or remove your numerology details;
  • change your name, email address and password;
  • delete your own comments, and remove saved quotes and reactions.

For anything else, or to close your account, send us a message through the contact form from the email address on your account. We'll reply within one month, as the law requires.

Children

On My Terms is for adults. You must be 18 or over to create an account or buy a reading, and we don't knowingly collect information from anyone younger.

Complaints

If you're unhappy with how we've handled your information, please tell us first through the contact form. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this notice

If we make significant changes to this notice, we'll email members before they take effect. The date at the top shows when it last changed.