Last updated 26 August 2026. Plain-English version: we only collect what we need to build your report and process payment, we don't sell your data, and you can ask us to delete it any time.
Your Chiron Story is an Australian sole trader business ("we", "us"), operated by Elle Maree Chaloner (ABN 30 935 913 602), based in New South Wales, Australia. We create personalised Chiron astrology reports from the birth details you provide, and deliver them digitally as a PDF by email. This policy explains what personal information we collect, why, who we share it with, and what your rights are.
Depending on how you interact with us, we may collect: your name and email address; the birth date, birth time and birth place you provide to generate your report; order details, including the product purchased, price, currency, and payment and delivery status; anything you send us directly, like a support request or a correction; and basic technical information collected automatically when you visit the site, such as your IP address and browser type, via our website host and any analytics tools we use. If we ever introduce optional marketing communications, we'll also record your subscription preference. We do not collect your payment card details ourselves — see "Payment information" below.
We usually collect personal information directly from you — when you place an order, contact us, or otherwise provide it through the site. Some technical information is collected automatically by our website, hosting or analytics tools.
Your birth date, time and place are used to calculate your natal chart and generate your personalised report. Your email is used to deliver your report and for order-related communication, like a receipt or a support reply. We also use information where reasonably necessary to process and reconcile payments, keep business and tax records, prevent misuse or fraud, and maintain the reliability of our service. We don't use your information for anything beyond fulfilling your order and supporting you as a customer, unless you separately opt in to something else in future, and any marketing communications we send will only go out with the required consent. We do not use your birth information to make decisions about your eligibility for employment, credit, insurance, healthcare, housing, or other rights or services.
Producing your report involves automated software and the third-party providers listed below — your birth details are converted into astrological chart data, and automated text-generation tools assist in writing the report itself. We only give each provider the information it reasonably needs to do its part. None of this is used to make a legal, financial, medical, employment or other decision that affects your rights or access to services.
All payments are processed directly by Stripe, a PCI-compliant payment processor — we never receive or store your full card number. When you enter your payment details, you're interacting directly with Stripe's own systems, and their own privacy policy applies to that part of the transaction (stripe.com/privacy).
If you order a report using someone else's birth information, you're responsible for making sure you have their permission, or another lawful basis, to share it with us. Please don't submit another person's details if doing so would breach their privacy or any law. Our service is intended for customers aged 18 or over.
We share the minimum data necessary with the service providers that help us run the business: Stripe for payment processing; Postmark for sending your report and order emails; Make.com, which automates connecting your order to report generation and delivery; Astrology API (astrology-api.io), which turns your birth data into chart positions and your chart wheel image; Anthropic's Claude, which writes the personalised text of your report from that chart data; PDFMonkey, which formats that written text into your final PDF report; and Google Workspace, where your order record is logged in Sheets, the writing instructions your report is built from are stored in Docs, and your chart image and finished report file are stored in Drive. Each provider processes your information under their own privacy policy. We may also disclose information where reasonably necessary to professional advisers, regulators, courts or law-enforcement bodies where required or authorised by law, or in connection with a sale or restructuring of the business, subject to appropriate protections. We do not sell, rent, or trade your personal information to anyone, for any reason.
Our systems and service providers may store or process data outside Australia, including in the United States, which is standard for cloud-based small businesses. We take reasonable steps, appropriate to our size, when choosing and managing providers that handle information overseas, and we review the providers we use from time to time — this policy will be updated if a material change affects customers.
We use reasonable technical and organisational measures appropriate to a small online business: restricted access to our business systems, account authentication controls, and using established, reputable cloud and payment providers. No online service can guarantee absolute security, but we take this seriously.
Birth details, calculated chart data, and report-generation working data are ordinarily deleted or de-identified within 90 days of your report being delivered, unless we need to keep them for an unresolved support, fraud, or legal matter. Your final report file is ordinarily kept for up to 12 months, to allow reasonable re-delivery and support. Core transaction and accounting records are kept for at least 5 years, as Australian tax law requires. Support correspondence is ordinarily kept for 2 years after a matter is closed, and security/technical logs for up to 12 months. If we introduce marketing communications, we'll keep a record of your consent or unsubscribe preference for as long as reasonably needed to honour it. You can request earlier deletion at any time — see "Your rights" below.
You can ask us, at any time, to tell you what personal information we hold about you, correct inaccurate information, or delete your information where we're not required to keep it for legal or accounting reasons. We may need to verify your identity before acting on a request, and we may need to refuse or limit a request where the law requires or permits us to keep the information — if so, we'll explain why. To do this, get in touch via our Contact page.
If you have a concern about how we've handled your personal information, contact us via our Contact page with enough detail for us to understand the issue. We'll acknowledge your complaint and aim to investigate and respond within 30 days. If the Privacy Act 1988 (Cth) applies to our handling of the matter and you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Your Chiron Story currently operates below the $3 million annual turnover threshold that generally exempts small businesses from the full obligations of the Privacy Act 1988 (Cth). We nevertheless use the Australian Privacy Principles as an important benchmark for our privacy practices, and we'll reassess our position if our turnover, activities, or the law changes — reform of the small-business exemption has been proposed, though not yet made law.
If you're located in the European Economic Area or UK, GDPR may give you additional rights over your data, including access, correction, deletion and data portability. Contact us via our Contact page and we'll action any such request in the same way.
We also accept customers from the United States. US privacy laws vary by state and often apply only where a business meets certain thresholds. Where an applicable US privacy law gives you a right in relation to information we hold — for example, a right to access, correct or delete personal information — contact us via our Contact page and we'll respond as required by that law. We do not sell personal information for money. If our advertising or analytics practices materially change in a way that creates additional rights under an applicable US state privacy law, we'll update this policy and provide any legally required choices.
Order and service emails are used to fulfil your purchase and support you as a customer — they aren't marketing. If we introduce promotional email marketing in future, we'll keep it separate from necessary order communications, obtain consent where required, identify the sender, and provide a working unsubscribe link.
Our website currently uses only the essential cookies and technical tools needed for security, checkout and basic site operation — nothing beyond that. If we introduce analytics, advertising pixels, or other non-essential tracking in future, we'll update this section and put the appropriate consent or opt-out mechanism in place first.
We may update this policy as our business or the law changes. The "last updated" date at the top will always reflect the current version.
Questions about this policy or your data? Reach us via our Contact page. For general guidance on Australian privacy rights, see the Office of the Australian Information Commissioner at oaic.gov.au; for consumer rights, see the ACCC at accc.gov.au/consumers.