Privacy & Data Protection Policy

Document Version: 2.1.0 (Last Updated: May 8, 2026)

1. Data Controller

RIDGWELL SERVICES LIMITED (Company No. 16277582), registered in England and Wales, is the data controller for all personal data collected via speaktoheaven.com.

2. Special Category Data Warning

Given the spiritual and religious nature of this service, your interactions with the AI may inadvertently reveal "Special Category Data" (such as religious beliefs, philosophical convictions, or health-related information).

Consent: By voluntarily entering such information into the chat interface, you provide explicit consent for us to process this data solely for the purpose of providing the AI simulation service.

3. AI Provider Disclosure & Model Training

Third-Party AI: We utilize Large Language Models provided by third-party processors (such as OpenAI, Anthropic, or Google).

Model Training: We do not use your personal chat history to train the underlying public models of our third-party AI providers. However, de-identified and pseudonymized chat logs may be reviewed by our internal team to improve our specific safety filters and "spiritual alignment" protocols.

4. Data Retention Periods

We adhere to the principle of "data minimization." Our retention schedules are as follows:

• Account Data: Retained for the duration of your active account plus 6 years for tax and legal compliance.
• Chat Interaction Logs: Retained for 2 years from the date of interaction to provide conversation continuity, unless you exercise your right to erasure.
• Technical Logs: (IP addresses, etc.) Retained for 90 days for security auditing purposes.

5. Payment & Dispute Data Retention

Financial data related to your purchase (transaction amount, date, last 4 digits of card) is retained for 7 years to comply with UK HMRC tax regulations and to handle potential billing disputes or refund requests. Full payment card details are never stored on our servers and are handled exclusively by our PCI-DSS compliant processors.

6. Fraud Prevention Logs

To protect our community and payment partners, we maintain "Fraud Prevention Logs." This includes Technical Data and Transactional Data used to identify patterns of card testing, unauthorized chargebacks, or account takeovers. These logs are maintained as part of our legitimate interest in securing our platform.

7. Processor & Sub-Processor Categories

We share data with the following categories of processors:

• Cloud Infrastructure: For hosting the website and database.
• AI Service Providers: For generating the simulation responses.
• Payment Gateways: For processing one-time payments (e.g., Stripe, PayPal).
• Customer Support Tools: For managing your help requests.
• Analytics Providers: For monitoring site performance.

8. International Data Transfers

Data may be transferred to, and stored at, a destination outside the UK or the European Economic Area (EEA), specifically to the United States where our AI and Cloud providers are headquartered. We ensure such transfers are protected by Standard Contractual Clauses (SCCs) or other legally recognized adequacy frameworks to ensure your data receives the same level of protection as it does in the UK.

9. Your Rights: Access & Deletion

Under the UK GDPR, you have the right to:

• Access: Request a copy of all data we hold about you.
• Deletion (Right to be Forgotten): Request that we delete your account and all associated chat logs. Note: We may retain certain data if required by law (e.g., tax records).
• Rectification: Correct any inaccurate personal information.

10. Contact Information

RIDGWELL SERVICES LIMITED
85 Great Portland Street, First Floor, London, England, W1W 7LT
Email: help@speaktoheaven.com