Privacy Policy
Last updated: 22 October 2026
1. Who We Are
Face Reading Lab is a trading name of Calonia Ltd, a company registered in England and Wales under company number 08512918.
Our registered address is:
Calonia Ltd
74 College Road
Maidstone
ME15 6SL
United Kingdom
Email: readings@facereadinglab.com
Calonia Ltd is the data controller responsible for the personal information described in this Privacy Policy.
We take the privacy of our visitors and customers seriously, particularly because our service involves uploading photographs for AI-generated face readings.
2. What This Privacy Policy Covers
This Privacy Policy explains how we collect, use, store and protect personal information when you:
- Visit our website.
- Request a free face reading.
- Purchase a Premium Face Reading.
- Upload a photograph.
- Receive emails from us.
- Subscribe to or unsubscribe from marketing communications.
- Contact us with an enquiry.
Our services are intended for adults aged 18 or over.
3. Information We Collect
Free Face Readings
When you request a free face reading, we collect:
- Your first name.
- Your email address.
- A photograph you upload.
- Your consent to the processing of your photograph.
- Your optional marketing preferences.
- The date and time of relevant consent.
- Your AI-generated face reading.
- A reading reference number and generation date.
- Information about whether your reading email was sent successfully.
Premium Face Readings
If you purchase a Premium Face Reading, we also collect:
- Your order reference and payment status.
- The amount and date of your payment.
- Your Stripe payment reference.
- A photograph uploaded for your premium reading.
- Your consent to early digital-content supply, including the wording accepted and the date and time.
- Your premium reading and its delivery status.
- Any cancellation or refund information associated with your order.
Payment card information is collected and processed directly by Stripe. We do not receive or store your full payment card details.
Information You Provide When Contacting Us
If you contact us, we may collect your name, email address and the information you include in your message.
We use this information to respond to your enquiry or resolve any issue.
4. How We Handle Your Photograph
We recognise that photographs are personal information and take care in how they are processed.
When you upload a photograph:
- Your browser resizes and compresses the image before uploading it.
- The photograph is transmitted securely using an encrypted HTTPS connection.
- It is processed by our application and AI service provider to generate your face reading.
- We do not save photographs in our application database.
- We do not attach photographs to emails.
- Our technology providers may temporarily process or retain information in accordance with their own data-handling policies.
Because we do not save your photograph in our application database, you will be asked to upload it again if you purchase a Premium Face Reading.
We do not use photographs for facial recognition or to establish someone’s identity, and we do not create biometric identification templates.
Please upload only a photograph of yourself or another adult who has agreed to its use. Do not upload photographs of children.
5. Why We Use Your Information
We process personal information for the following purposes and under the following lawful bases provided by UK data protection law.
Providing Free Face Readings
We use your name, photograph and other information to generate and deliver the free reading you request.
Lawful basis: Consent.
You may withdraw your consent at any time, although this will not affect processing already carried out.
Providing Premium Face Readings
We use your information to process your purchase, generate your premium reading, deliver it by email and provide customer support.
Lawful basis: Performance of a contract.
Payment and Accounting
We retain necessary payment and transaction records to comply with our legal and accounting responsibilities.
Lawful basis: Legal obligation.
Cancellation and Consent Records
We retain records of your agreement to early digital-content supply and your acknowledgement of the relevant cancellation arrangements.
Lawful basis: Legal obligation and our legitimate interests in demonstrating compliance with consumer protection requirements.
Marketing Emails
We may send you occasional emails about Face Reading Lab, including information about our services and offers.
We will only send marketing emails if you have actively chosen to receive them.
Lawful basis: Consent.
Marketing consent is optional and is not required to receive a free or premium face reading.
Security and Service Improvement
We may process limited technical and transaction information to maintain the security and reliability of our service, investigate problems and prevent misuse.
Lawful basis: Legitimate interests.
Automated Processing
Our face readings are generated using artificial intelligence.
The readings are intended for entertainment and personal reflection only. They are not used to make decisions about you that have legal or similarly significant effects.
6. Third-Party Service Providers
We use specialist technology providers to operate Face Reading Lab.
These include:
OpenAI
We use OpenAI’s API to analyse uploaded photographs and generate written face readings.
The information supplied may include your photograph, first name and, where relevant, the text of your earlier free reading.
We use OpenAI’s commercial API rather than a consumer ChatGPT account.
Stripe
Stripe processes payments and refunds for Premium Face Readings.
Payment card information is entered directly into Stripe’s secure checkout system.
Stripe may also process information for fraud prevention, security and regulatory compliance.
Resend
Resend provides our email delivery service.
It processes information necessary to send free readings, order confirmations, premium readings and any marketing emails you have agreed to receive.
This may include your name, email address and the content of emails sent to you.
Zite
Zite provides the application platform used to generate readings, manage customer requests and store relevant records.
This includes information such as names, email addresses, generated readings, payment references and consent records.
Website Hosting
Our main website is operated using WordPress and hosted by our website hosting provider.
Our website may also use essential security, performance and content-management services.
We do not sell your personal information to third parties.
We may disclose information where legally required or where reasonably necessary to establish, exercise or defend legal claims.
7. International Data Transfers
Some of the technology providers we use are based outside the United Kingdom or may process personal information in other countries, including the United States.
Where personal information is transferred internationally, we seek to use providers with appropriate data protection arrangements and safeguards.
Depending on the provider and the circumstances, these may include recognised international data transfer agreements, contractual protections or applicable adequacy arrangements.
The particular safeguards and retention arrangements depend on the provider and its contractual terms.
You can contact us at readings@facereadinglab.com if you would like further information about the international processing of your personal information.
8. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including any applicable legal or accounting requirements.
Our normal retention arrangements are:
Photographs
Photographs are not saved in our application database. Our technology providers may temporarily process or retain information under their own policies.
Free Face Readings
Free reading text is normally retained for approximately 60 days before deletion.
Your name and email address are normally deleted with the reading unless you have subscribed to marketing or another lawful reason for retaining the information applies.
Premium Face Readings
Premium reading text is normally retained for approximately 60 days so that we can assist with delivery problems or resend a report if necessary.
After this period, the reading text is deleted.
Premium Orders and Consent Records
We normally retain necessary premium order, payment, refund and cancellation consent records for up to seven years for accounting, legal and record-keeping purposes.
Abandoned Orders
Unpaid, abandoned orders are normally deleted after approximately 30 days.
Marketing Subscribers
We retain your contact details and marketing preferences while you remain subscribed.
If you unsubscribe, we stop sending marketing communications and retain only the minimum information necessary to respect your decision, normally your email address and unsubscribe status.
Deletion Arrangements
Our application performs automatic data cleanup as part of its regular activity. This means deletion may occur shortly after the relevant retention period rather than on an exact calendar date.
Our technology providers may retain information separately under their own applicable policies and legal obligations.
9. Marketing Communications
Receiving marketing emails from Face Reading Lab is entirely optional.
When requesting a free face reading, you may choose whether to receive marketing communications.
The marketing checkbox is separate from the consent required to process your photograph and is not selected automatically.
If you subscribe, we may occasionally email you about our services, offers or related information.
You can unsubscribe at any time by:
- Clicking the unsubscribe link in a marketing email.
- Emailing readings@facereadinglab.com.
Unsubscribing from marketing does not prevent us from sending essential service emails, such as your requested reading, payment confirmation or information about an existing order.
10. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information.
These include:
- Encrypted HTTPS connections for transmitting information.
- Restricted access to customer records.
- Secure, randomly generated links for accessing certain services.
- Using Stripe to handle payment card information.
- Limiting the personal information retained by our application.
- Deleting reading text when it is no longer required.
Although we take reasonable precautions, no internet-based service can guarantee absolute security.
11. Cookies and Tracking
Our website currently uses a necessary cookie from CookieYes to manage cookie preferences.
This cookie lasts for up to one year.
We do not currently use Google Analytics or advertising tracking cookies.
Our embedded face-reading application does not deliberately set analytics or advertising cookies.
If you purchase a Premium Face Reading, Stripe may use cookies on its payment pages for security, fraud prevention and payment processing.
We may introduce analytics or advertising cookies in future. Where consent is legally required, we will ask for it before setting those cookies.
12. Your Data Protection Rights
Under UK data protection law, you have a number of rights concerning your personal information.
Depending on the circumstances, these include:
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct inaccurate or incomplete information.
- Erasure: Ask us to delete personal information where applicable.
- Restriction: Ask us to restrict certain processing activities.
- Objection: Object to certain uses of your information.
- Data portability: Request information in a portable format where this right applies.
- Withdrawal of consent: Withdraw consent where processing relies on it.
Some rights are subject to legal limitations. For example, we may need to retain certain payment records to comply with accounting or legal obligations.
To exercise your rights, please email:
readings@facereadinglab.com
We may ask you to verify your identity before responding.
We will normally respond within one month, and there is usually no charge.
13. Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can investigate.
Email: readings@facereadinglab.com
14. Children
Face Reading Lab is intended for adults aged 18 or over.
We do not knowingly provide face readings for children and ask users not to upload photographs of anyone under 18.
If we discover that personal information relating to a child has been submitted contrary to this policy, we will take appropriate steps to delete it.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, technology providers, legal requirements or data-handling practices.
The date at the top of this page indicates when the policy was last updated.
Where changes are significant, we will take appropriate steps to inform affected users.