1. Introduction
Calibre Books (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you visit our website (calibrebooks.com) or make a purchase from us.
2. Information we collect
When you make a purchase: We collect your name, email address, and payment information. Payment card details are processed securely by Stripe and are never stored on our servers.
When you create an account: We collect your name, email address, and an encrypted password.
When you browse our website: We may collect non-personal information such as your browser type, device type, pages visited, and referring website through cookies and analytics tools.
When you subscribe to our newsletter: We collect your email address.
3. How we use your information
We use the information we collect to:
- Process and fulfil your orders
- Send you download links and order confirmations
- Provide customer support
- Send you newsletters and marketing communications (only with your consent, and you can unsubscribe at any time)
- Improve our website and services
- Comply with legal obligations
4. Data sharing
We do not sell, trade, or rent your personal information to third parties. We may share limited data with trusted service providers who assist us in operating our website and business, including:
- Stripe — for payment processing
- Cloudflare — for website security and performance
- Email service providers — for transactional and marketing emails
These providers are contractually obligated to protect your data and may only use it for the purposes we specify.
5. Cookies
Our website uses cookies to enable essential functionality (such as your shopping cart and login session) and to help us understand how visitors use our site. You can control cookie settings through your browser preferences. Disabling cookies may affect your ability to use some features of the website.
6. Data security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using SSL/TLS. Payment processing is handled by Stripe, which is PCI DSS Level 1 compliant.
7. Data retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including any legal, accounting, or reporting requirements. Order records are retained for a minimum of six years in accordance with UK tax and accounting regulations.
8. Your rights
Under UK data protection law (UK GDPR), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict processing of your data
- Request a portable copy of your data
- Withdraw consent for marketing communications at any time
To exercise any of these rights, please contact us at [email protected].
9. Children’s privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
10. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this page periodically.
11. Contact
If you have any questions about this privacy policy or how we handle your data, please contact us at [email protected].