Document Overview
GlobalBazi is operated by Happy Mamaland Limited. This policy explains how we process account, chart, payment, analytics and support data under the UK GDPR, the Data Protection Act 2018 and applicable privacy laws.
Controller and contact details
Happy Mamaland Limited (UK company number 17215430) is the data controller for personal data processed through the GlobalBazi website, chart tools, reports, account features and payments. Registered office: 8 Camden Row, Cuckoo Hill, Pinner, England, HA5 2AH.
For privacy, data protection or GDPR rights requests, contact support@globalbazi.com and include “Privacy / GDPR” in the subject line. For general support, orders or payment queries, you may use the same email address.
Data we collect
We collect account data you provide, such as your name or display name, email address, login status, language preference, support messages and account settings.
To provide BaZi chart and report services, we collect birth date, birth time, birth city or country, gender, chart names and additional form content you submit.
To process transactions, we keep order records, invoices, payment status, payment provider transaction IDs, refund and dispute records. Full card numbers, CVV codes and equivalent sensitive payment credentials are handled by the payment provider and are not stored directly by us.
We may also collect technical data such as IP address, device and browser information, page views, error logs, cookies, analytics events and security logs to operate the site, protect security, prevent abuse and improve the service.
If you submit report feedback or a page comment, we keep the rating, issue category, comment, related page, language, submission time, account ID when signed in, a one-way hashed IP identifier, a masked network prefix, and a country code. Anonymous content feedback does not store the complete IP address and is used only for internal improvement and abuse prevention.
If you submit a partnership or advertising enquiry, we keep the contact name, business email, company or brand, role, website, country or market, enquiry type, audience, budget range, timing, proposal, referral source, language, submission time, account ID when signed in, one-way hashed identifier, masked network prefix, and country code. We do not store the complete IP address with partnership enquiries.
If you voluntarily opt in to marketing, we keep the subscription status, language, consent source and version, consent and unsubscribe times, and a random unsubscribe identifier. Accounts that do not opt in are recorded as not subscribed without affecting account creation or service access.
Data about other people
If you submit birth details that are not your own, you confirm that you have lawful authority, consent or another valid basis to provide that data to us, and that you have explained that it will be used to generate BaZi reports or related services.
Please do not submit unnecessary sensitive information in free-text fields, including health conditions, religious beliefs, political opinions, identity document numbers, bank account details or any other highly sensitive information unrelated to the service.
Purposes and lawful bases
We use personal data to perform our contract with you, including creating free charts, generating paid reports, saving account content, processing payments, issuing invoices, providing customer support and managing orders.
We also process data based on legitimate interests, including maintaining site security, preventing fraud or abuse, analysing service performance, improving product experience, resolving technical issues, protecting company rights and responding to reasonable enquiries.
Partnership and advertising enquiry data is available only to authorised administrators and is used to assess commercial fit, conduct reasonable due diligence, respond, negotiate, maintain necessary business records, and prevent abuse. Submitting an enquiry does not consent to unrelated marketing.
Report feedback and content comments are private to authorised administrators by default and are not published automatically. If we later wish to publish a comment, display name or other identifying information, we will obtain any additional consent required.
Only users who actively select the separate marketing option are included in marketing exports. Every marketing email must include an unsubscribe link; using it records the address as unsubscribed and excludes it from later marketing exports. Essential account, payment, security and report-delivery emails are not affected by marketing unsubscribe.
Where required by law, we keep necessary transaction, accounting, tax, company compliance, refund, dispute and anti-fraud records. You may withdraw cookie or non-essential analytics consent through Cookie settings in the site footer, and marketing consent through the unsubscribe control in a marketing message.
Payments, invoices and fraud prevention
Payments are processed by Worldpay, Stripe or another regulated payment service provider. The payment provider handles payment methods, authentication, risk checks, disputes and refunds under its own privacy policy and compliance obligations.
We use payment and order data to reconcile transactions, deliver digital content, process refunds, handle chargebacks, respond to payment provider or bank enquiries, and meet accounting, tax and audit obligations.
Cookies, analytics and tracking
We may use essential cookies to maintain login, security, cart or checkout flows. Without these cookies, parts of the site may not function correctly.
Where Google Analytics or similar tools are enabled, we collect aggregated or pseudonymised usage data to understand traffic, conversions, errors and page performance. You can manage non-essential tracking through browser settings, cookie tools or provider opt-out mechanisms.
Chart calculation and automated processing
GlobalBazi reports may be prepared with a rules-based engine, content templates and automated text preparation tools. This processing is used to provide the metaphysical content you request. It is not used for credit, insurance, employment, medical, legal or other decisions that produce legal or similarly significant effects.
The birth details you provide affect chart and report output. You may ask us to correct inaccurate data, or update or delete data yourself when account features allow it.
Sharing and processors
We share data only when needed with trusted service providers, such as hosting, database, authentication, payment, email, analytics, error monitoring, customer support and security providers. These providers may process data only under our instructions or their own legal compliance obligations.
We may also disclose necessary data where required by law, court order, regulatory request, payment dispute, anti-fraud investigation, law enforcement request, company restructuring, merger, sale, or to protect the rights and safety of us, users or third parties.
International transfers
Our users, suppliers and cloud infrastructure may be located in the United Kingdom, the European Economic Area, the United States, Hong Kong or other locations. Where personal data is transferred outside the UK or EEA, we use appropriate safeguards where required, such as adequacy regulations, Standard Contractual Clauses, provider data processing agreements or other lawful transfer mechanisms.
Retention
Account, chart and report data is normally kept until you delete your account or request deletion, unless we need to retain data to complete orders, handle disputes, maintain security or comply with legal obligations.
Payment, invoice, refund, tax and accounting records are normally kept for up to six years or any longer statutory period required under UK law and reasonable business needs. Security logs, error logs and analytics data are retained for shorter periods as needed, or kept in aggregated form.
Feedback and page comments are kept for as long as reasonably needed to improve products, resolve issues, prevent abuse and maintain moderation records, then deleted, anonymised or aggregated.
Partnership and advertising enquiries are kept for as long as reasonably needed to assess, follow up, negotiate, prevent abuse, and maintain business records. Unsuccessful or inactive enquiries are deleted, anonymised, or archived when no longer reasonably needed; records that lead to a business relationship may be retained for contractual, accounting, tax, or legal requirements.
Your GDPR rights
Where applicable, you may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent where processing is based on consent. Submit requests to support@globalbazi.com with “Privacy / GDPR” in the subject line. We may need to verify your identity and account ownership.
If you are in the UK, you also have the right to complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/. If you are elsewhere, you may contact your local data protection authority.
Security and minors
We use reasonable technical and organisational measures to protect data, including trusted cloud providers, access controls, encrypted transmission, payment-provider-hosted payment data and log monitoring. No internet service can be guaranteed to be completely secure.
GlobalBazi is not sold directly to people under 18. Parents or guardians may submit data and purchase reports for minors where they have lawful authority to do so.
Updates to this policy
We may update this policy due to legal requirements, payment provider requirements, product features or operational needs. Material changes will be reflected by updating the date and content on this page, and where required by law we will provide appropriate notice.
Support Contact
For questions about this document, your account, payments or data handling, contact us through the official support email.
Support email:support@globalbazi.com