Privacy policy
This Privacy Policy describes how Collected Books Limited handles your personal information when you visit, use or make a purchase from this website (www.collectedbooks.co.uk).
How we use your information
Using our website
We use Shopify to power our website and online store. You can read more about how Shopify uses your personal information on Shopify’s Privacy Policy.
Parts of our website are hosted by Hiltonian Media Ltd and CloudFlare.
As you use our website, the following information may be collected automatically using cookies, log files, web beacons, tags or pixels: web browser software information, device information, IP address, time zone, cookie information, the sites or products you view, search terms, and how you interact with the website. This information is collected to load the site accurately for you, and perform usage analytics to optimise our website. It is in our legitimate interests to collect this data to prevent malicious use of our services, monitor server performance, increase security, and diagnose problems. This information might be transferred outside of the EEA.
Website analytics
We use Google Analytics to analyse how visitors use our website. This stores a “cookie” on your computer containing an anonymous tracking ID to allow Google to track your activity around our website. This service is subject to Google’s Privacy Policy. We've taken steps to ensure that you are not personally identifiable to Google Analytics, including the anonymisation of your IP address and preventing Google from sharing our Analytics data with its other services. The information associated with your cookie tracking ID is deleted 14 months after your last use of our website. Learn more about how you can control the information sent to Google and opt-out of Google Analytics.
Contact form
If you fill in and submit our contact form, the information you supply will be logged or sent to us by email and only used to respond to your enquiry. It is in your legitimate interests for this data to be processed so that we can respond to your enquiry. This information is retained for as long as necessary to deal with your enquiry.
Placing and processing orders
When you place an order with us, your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number are used in order to fulfil the contract and process your order. When you place an order through our website, Shopify will retain your personal information unless and until you ask us to erase it for you.
Your name and delivery contact information is transferred to the courier(s) used to send your order – they will handle your data according to their privacy policy (Royal Mail), and might transfer it outside of the EEA.
If you make payment with PayPal, your order information (including personal data) is transferred to PayPal to facilitate the payment process. This is required to fulfil the contract and process your order. Your data will be processed and retained by PayPal in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.
If you make payment by card (except through PayPal), your order information (including personal data) is processed by Shopify Payments to facilitate the payment process. This is required to fulfil the contract and process your order. Your data will be processed and retained by Shopify in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.
Mailing list (marketing emails) and email notifications
If you subscribe to our mailing list, we'll send you marketing emails from time to time. We'll only do this with your consent, and you can withdraw your consent at any time by clicking the “unsubscribe” link at the bottom of one of our marketing emails.
If you start the checkout process but do not complete your order, we might send you an email a few hours later containing a link to allow you to complete your order. This is in your legitimate interests, as it allows you to easily resume your order if you were unable to complete checkout. It is also in our legitimate interests to remind customers to complete the checkout process.
We might also send you one-off notification emails in response to specific events, such as account activation or order confirmation/updates. This is in your legitimate interests so that you can complete or be kept informed about the relevant process.
To send these emails to you, your data will be processed and retained by Klaviyo (who provide our mailing list software) in accordance with their Privacy Policy, and might be transferred by them outside of the EEA.
Registering and logging in
When you register on our website, we collect your name, email address and password. This information is used to allow you to log in to the website and speed up checkout, so it is in your legitimate interests for us to use your information in this way.
Any personal information (including your name and contact details) that you provide through the My Account section of the website will only be used to process orders and provide you with customer support. Shopify will retain your personal information unless and until you ask us to erase it for you.
Detecting humans
It is in our legitimate interests to prevent automated scripts from abusing our website. To do this, we use reCAPTCHA, a piece of software provided by Google, to verify that you are indeed a human. When you start to interact with reCAPTCHA, Google may set identifier cookies. This service is subject to Google’s Privacy Policy. Learn more about how you can control the information sent to Google.
Your Rights
Depending on why we use your data, you have various rights under the GDPR. These are:
- The right to be informed about the use of your data. This privacy policy forms part of that obligation.
- The right to access your personal data or confirm that it is being processed.
- The right to rectify any inaccurate personal data or complete any incomplete personal data.
- The right to have any personal data erased or restrict its processing in some circumstances.
- The right to object to the use of your personal data, but only if we are processing your data for legitimate interests (rather than, for example, to fulfil a contract).
- The right to data portability of personal data they have provided to a controller, but only if we are processing the information on the basis of consent or to fulfil a contract, and when the processing is carried out by automated means.
To exercise any of these rights, please contact us. Where a request is unfounded or excessive, or you are requesting information we have already provided to you, we may charge a reasonable fee to fulfil the request or refuse to respond. We will take reasonable steps to verify your identity before fulfilling the request, and we will respond within one month.