Legal
Privacy
What is collected, why, and how to have it removed.
[Draft — needs the client's lawyer]
Written from how the shop actually works and from UK consumer law, but it is a legal document: the company details in square brackets must be filled in and the whole text signed off before launch.
Who is responsible
[ADD LEGAL ENTITY NAME AND REGISTERED ADDRESS] is the data controller for this website. Questions and requests: [ADD PRIVACY EMAIL].
What is collected
When you order. Your name, email address, delivery address, phone number if you give one, and what you bought. This is needed to take the payment, send the books and deal with any problem afterwards.
When you pay. Card details are entered on Stripe's own payment page and are never sent to or stored on this website. We receive only the result of the payment and the last four digits of the card.
When you subscribe. Your email address and the date you subscribed.
When you browse. A cookie holding your basket, and a cookie remembering your chosen currency. Both are necessary for the site to work and neither is used for advertising.
Why it is allowed
Order data is processed to perform the contract between you and us, and afterwards kept to meet accounting and tax obligations. Newsletter emails are sent on the basis of your consent, which you may withdraw at any time.
Who else sees it
- Stripe — payment processing.
- The delivery carrier — name and address, in order to deliver the parcel.
- Our email provider — to send order confirmations and, if you asked for it, the newsletter.
Your data is not sold, and it is not shared with advertising networks.
How long it is kept
Order records are kept for [ADD RETENTION PERIOD — commonly 6 or 7 years for tax purposes]. Newsletter subscriptions are kept until you unsubscribe.
Your rights
You may ask for a copy of your data, ask for it to be corrected or deleted, object to how it is used, or ask for it to be sent elsewhere. Write to [ADD PRIVACY EMAIL].
If you are not satisfied with the answer, you may complain to the Information Commissioner's Office (ico.org.uk) or to the supervisory authority in your own country.