About Us and this Privacy Notice

This notice explains how our eBook store processes your personal data when you browse, purchase, and download digital books from our website. Our services are not directed at children. If you are a minor, please have a parent or guardian review this notice with you.

We are the data controller of the personal data you provide to us.

Our data protection officer (DPO) oversees questions regarding this notice. If you have any questions or wish to exercise your legal rights, please contact our DPO at [email protected].

Changes to this Notice

We may update this notice from time to time. When material changes are made, we will notify you via email or a prominent notice on our website, as required by law.

The personal data we hold about you must be accurate and current. Please keep us informed if your information changes. You can update your details through your account settings, or by contacting us directly.

The Personal Data We Collect

Personal data is any information that can identify you as an individual. It does not include anonymous data where identification is not possible.

We may collect, use, store, and process different kinds of personal data about you, grouped as follows:

• Identity Data includes your name, username or similar identifier, and account profile information.
• Contact Data includes billing address, email address, and telephone number.
• Financial Data includes payment card details and billing information processed through our secure payment providers.
• Transaction Data includes details about payments made and the eBooks and digital products you have purchased from us.
• Technical Data includes information collected when you access our website — your IP address, login data, browser type and version, time zone setting, operating system, and device information.
• Profile Data includes your username and password, purchase history, reading preferences, wishlists, feedback, and survey responses.
• Usage Data includes information about how you use our website, which eBooks you browse, preview, or download, and your reading activity within our platform.
• Marketing and Communications Data includes your preferences for receiving newsletters, promotional offers, and recommendations about new eBook releases.

Failure to Provide Personal Data

Where we need to collect personal data by law or under the terms of a contract (e.g., to process your eBook purchase), and you fail to provide that data when requested, we may not be able to fulfill your order. In this case, we will notify you at the time.

How We Collect Your Personal Data

We collect data from and about you through the following methods:

• Direct interactions. You may give us your data directly — for example, when you create an account, purchase an eBook, subscribe to our newsletter, enter a promotion, or contact our support team. This includes Identity Data, Contact Data, and Financial Data.
• Website and cookies. As you interact with our website, we automatically collect Technical Data about your device, browsing actions, and patterns using cookies, server logs, and similar technologies. Please see our Cookie Notice for further details.
• Third-party analytics providers who supply us with Technical Data about site visitors and user behavior.
• Payment and transaction service providers who supply us with Financial Data and Transaction Data to process your purchases securely.

How We Process Your Data

We will only process your data when the law allows us to do so. Most commonly, we rely on the following lawful bases:

• Performance of a contract: Where we need to fulfill a purchase agreement (e.g., delivering your eBook after payment).
• Legitimate interests: Where it is necessary for our legitimate business interests and your fundamental rights do not override those interests.
• Legal or regulatory obligation: Where we need to comply with applicable laws and regulations.
• Consent: Where you have given us clear consent to process your data for a specific purpose.

We do not rely on consent as a lawful basis for processing your data except for certain electronic marketing. You have the right to withdraw consent to marketing at any time by contacting us or using the unsubscribe link in any email.

Purposes and Lawful Bases for Processing Your Data

Below we describe how we process your data, the lawful basis for each activity, and our legitimate interests where applicable.

Change of Purpose

We will only use your data for the purposes for which we collected it, unless we reasonably consider that another use is compatible with the original purpose. If you would like an explanation of how a new purpose is compatible, please contact us.

If we need to use your data for an unrelated purpose, we will notify you and explain the lawful basis that permits it.

We may process your data without your knowledge or consent where this is required or permitted by law.

Marketing Communications

You will receive marketing emails from us if you have purchased eBooks or requested information and have not opted out. These may include new releases, reading recommendations, and promotional offers.

You can opt out of marketing at any time by clicking the unsubscribe link in any email or by contacting us directly. We will honor your request promptly.

No Third-Party Marketing

We do not share your personal data with any third parties for their marketing purposes.

Cookies

You can configure your browser to refuse all or some cookies, or to alert you when a website sets cookies. Disabling cookies may cause certain features of our website to become unavailable or function improperly. For more information, please see our Cookie Notice.

Disclosures of Your Personal Data

We may share your data with the following parties for the purposes outlined in this notice:

• Service providers who deliver IT infrastructure, payment processing, email delivery, and download hosting services.
• Professional advisers including lawyers, accountants, and insurers who provide consultancy and compliance services.
• Regulators and authorities where required by law or regulation.
• Third parties involved in a business transaction such as a merger, acquisition, or asset sale, where the new owners may process your data as described in this notice.

We require all third parties to respect the security of your data and to treat it in accordance with the law. We do not permit them to process your data for their own purposes — only for specified purposes and under our instructions.

International Transfers

Some of our service providers may be located outside the European Economic Area (EEA), which means your data may be transferred internationally. Whenever we transfer data outside the EEA, we ensure equivalent protection by implementing at least one of the following safeguards:

• Transfer to countries deemed by the European Commission to provide an adequate level of data protection.
• Use of specific contracts approved by the European Commission (Standard Contractual Clauses) that give personal data the same protection it has within Europe.

Please contact us if you would like further information about the specific mechanism used for international data transfers.

Data Security

We have implemented appropriate technical and organizational security measures to prevent your data from being accidentally lost, used, accessed, altered, or disclosed without authorization. Access to your data is limited to employees, agents, and contractors who have a business need to know. They are bound by a duty of confidentiality and will only process your data on our instructions.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, tax, accounting, or reporting requirements, and for the establishment or defense of legal claims.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for processing, and applicable legal requirements.

In some circumstances, we may anonymize your data so that it can no longer be associated with you. In that case, we may use such information indefinitely without further notice.

Your Legal Rights

Under data protection laws, you have the following rights regarding your personal data: access, rectification (correction), erasure (the “right to be forgotten”), restriction of processing, objection to processing, data portability, and withdrawal of consent. To exercise any of these rights, please contact us.

You will not have to pay a fee to access your data or exercise any of these rights. However, we may charge a reasonable fee if your request is unfounded, repetitive, or excessive — or we may refuse to comply in those circumstances.

We may request specific information to confirm your identity and protect your data. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

We aim to respond to all legitimate requests within one month. If your request is complex or if you have made multiple requests, we will notify you and keep you informed of progress.