Privacy
Privacy notice
A working outline. It must be reviewed by a lawyer for your jurisdiction before launch, and every <<PLACEHOLDER>> filled in.
Who is responsible
<<LEGAL_ENTITY>>, <<ADDRESS>>. Data protection contact: <<privacy@>>.
What we collect, and why
Orders. Name, email, and for physical copies a delivery address, to fulfil the order and meet accounting obligations. Card details are handled by the payment provider and never reach our servers.
Newsletter and sample chapter. Name and email, on your consent, with a confirmation step. Leave at any time from a link in any email.
Enquiries. Whatever you put in the form, to answer you.
Marketing is always separate
Consent boxes are never pre-ticked. Transactional email about an order is sent whether or not you have opted into marketing, because it is part of the order, and it is kept apart from the marketing list.
How long we keep it
Order records for <<RETENTION>> to meet tax and accounting rules. Marketing contacts until you unsubscribe.
Your rights
Access, correction, deletion, portability, objection, and the right to complain to your supervisory authority. Requests go to <<privacy@>> and is answered within one month.
Cookies and analytics
Nothing non-essential runs before you consent where consent is legally required. Analytics is <<ANALYTICS_PROVIDER>>, configured without cross-site tracking. The site sets no cookies of its own; the payment provider sets what it needs during checkout.
Processors
<<PAYMENT>>, <<EMAIL_PROVIDER>>, <<FORM_STORAGE>>, <<HOSTING>>. Each under a data-processing agreement.