Privacy policy

1. What we collect

To fulfil an order: your email address, the items purchased, the amount and currency, and the country used to determine tax. Payment card data is handled by Stripe and never reaches us.

If you subscribe to new title announcements: your email address and the language you were reading in.

2. Why, and on what legal basis

Order and delivery data is processed to perform the contract with you (GDPR Art. 6(1)(b)) and to meet tax record keeping duties (Art. 6(1)(c)).

Newsletter emails are sent on your consent (Art. 6(1)(a)), withdrawable at any time via the link in every message.

3. Cookies and similar technology

We set only functional cookies: your chosen language, the currency resolved from your location, and your bundle you are still building, which is stored in your browser and never sent to us as an identifier.

We do not use advertising or tracking cookies that follow you across sites, so no consent banner is required.

4. Who else processes your data

Stripe (payment processing), Cloudflare (hosting and delivery), and our transactional email provider. Each acts under a data processing agreement. Where data leaves the EEA it is transferred on Standard Contractual Clauses.

5. How long we keep it

Invoice and transaction records are kept for the statutory retention period. Newsletter subscriptions are kept until you unsubscribe.

6. Your rights

You may request access, correction, erasure, restriction, portability, or object to processing. Write to us at the address above. You may also complain to your national data protection authority.

7. Server logs

Our host records technical request data such as IP address and user agent for security and abuse prevention, retained briefly and not used to profile you.

8. Changes

If this policy changes materially we will note the change on this page.