Privacy

An outline of what the final privacy policy must cover once the checkout, delivery, hosting, and analytics decisions are made.

Draft pending legal review.

Who is responsible

Identify the legal entity operating the site and how to contact it about personal data.

  • Registered legal name, address, and jurisdiction of the publisher
  • Contact route for privacy requests and, if required, a data protection representative

What information is collected

Describe every category of data the live site and its providers will process, including data collected automatically.

  • Data sent by email enquiries (name, address, message content)
  • Order and delivery data handled by the chosen checkout provider
  • Server and hosting logs (IP address, user agent, timestamps)
  • Browser storage: this preview stores cart contents in localStorage on the visitor’s device only
  • Any analytics, if adopted — currently none is installed

Purposes and lawful bases

Explain why each category is used and the legal basis for doing so in each applicable jurisdiction.

  • Fulfilling orders and delivering digital editions
  • Responding to enquiries
  • Security, fraud prevention, and service operation
  • Any marketing communications and how consent is obtained and withdrawn

Processors and sharing

List the third parties that receive data and under what arrangements.

  • Checkout, payment, and delivery provider(s) — to be selected
  • Hosting and email providers
  • International transfer mechanisms where data leaves its origin jurisdiction

Cookies and similar technologies

Set out the cookie and consent approach once analytics and checkout decisions are final.

  • Strictly necessary storage (e.g. cart) versus optional technologies
  • Consent mechanism, if any optional technologies are introduced
  • How visitors can clear or refuse storage

Retention

State how long each category of data is kept and why.

  • Order and tax records
  • Correspondence
  • Logs and backups

Your rights

Describe the rights available to visitors and customers and how to exercise them.

  • Access, correction, deletion, restriction, portability, and objection as applicable
  • Complaints to a supervisory authority
  • Verification of requests

Changes to this policy

Explain how updates will be versioned, dated, and communicated.

  • Effective date and version history
  • Notice of material changes