Privacy Notice
Your privacy, held with care.
Last updated 17 October 2026
Visitor introductions, location and confidentiality
For invited members, we keep the approved account email, optional name and approval time in our Cloudflare-hosted member register. The private Boutique and ordering use ChatGPT sign-in to verify the approved email. Mystic Rose Fellowship administrators manage approvals and revocations. Access to the invitation register is restricted to the site owner; Tarot readings are conducted personally and are not recorded by this register.
We do our best to honour the trust and personal confidences of Order members and applicants. The website uses Cloudflare hosting and security capabilities, with AI assistance in development. The visitor welcome can be skipped while you explore the public pages.
Location is requested only after you choose the map option and grant your device permission. We round coordinates to two decimal places before showing the OpenStreetMap embed. OpenStreetMap receives the approximate map centre and normal connection information when its map loads. Location is included in your introduction only if you select the sharing checkbox and submit the form. We do not publish a visitor location map or continuously track your position.
The introduction form asks for your name, preferred contact method and contact details. Optional wishes and any location you choose to share are delivered by FormSubmit to hello@mysticrose.world for a personal response. Your chosen contact channel may have its own service provider. A session-only browser flag remembers when you dismiss or submit the welcome; unsent names and contact details are held only in the current page’s memory.
Who we are
This website is operated by Mystic Rose Studio Ltd, company registration 16981936, registered in England and Wales. Questions about privacy can be sent to hello@mysticrose.world.
Website information
With your permission, Mystic Rose uses Google Analytics 4 and Mystic Rose Analytics to understand visits and improve the website. It may collect viewed pages, approximate location, device and browser information, referral source and engagement data, including downloads, contact-link clicks and form submission events. Form contents and contact-link addresses are excluded from these custom events. Analytics storage stays disabled until you choose “Allow analytics”. You can change your choice through “Privacy & cookies” in the website footer. Essential session storage remembers the guest entrance during the current browser session. Hosting and security providers may process standard request information such as time, IP address, device and requested page.
Applications and production proposals
A free invitation application includes your name, email address, applicant category, preferred contact method and details, any artwork, calendar or creation you selected and any wishes you choose to share. Phone is optional. We use these details to review your application and reply to your enquiry. Applications are delivered by FormSubmit to hello@mysticrose.world. A Fellowship production proposal includes a legal name, contact number, current address, proposal, optional work link and your confirmations about experience, identity verification and relocation. An apprentice application includes a legal name, contact number, current address, motivation and the same identity and relocation confirmations. These details help us assess and reply to the submission. Identity documents are not collected through the website. You may ask us to remove your information at any time by contacting Mystic Rose.
Identity verification
Identity documents are not uploaded through the public website or sent by ordinary email. If an application proceeds, Mystic Rose will arrange a separate secure verification method and explain how the document is handled and when it is deleted.
Service providers
Google and Mystic Rose Analytics provide website analytics after a visitor gives consent. Mystic Rose Analytics stores a random session identifier in session storage, page paths without query strings, referral domain and path without query strings, a campaign source label, approximate country, device category, visible time and action categories. Raw IP addresses and form contents are excluded from its event records. Events older than 90 days are removed in bounded batches during subsequent collection. Choosing “Essential only” stops collection and clears the session identifier. You can access the website while analytics is disabled. FormSubmit delivers Fellowship applications and production proposals to Mystic Rose by email. The website hosting and security infrastructure processes ordinary request data needed to deliver and protect the website. Service providers may process data in other countries using their applicable safeguards.
Your rights
Depending on where you live, you may have rights to access, correct or erase personal data, restrict or object to processing, withdraw consent and raise a concern with your local data-protection authority. Contact us and we will help with requests concerning information controlled by Mystic Rose.
MYSTIC ROSE