GDPR Policy
Introductionย
At Bookish Closet, your privacy is a top priority. This Privacy Policy outlines how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. It applies to all individuals who access our website, use our services, or make purchases through our platform, including customers in the European Union (EU) and European Economic Area (EEA).
Data Protection Commitment
We are fully committed to protecting your personal information across all touchpointsโwhether you're browsing our website, placing an order, or subscribing to our communications.
Information We Collect
We collect and process the following categories of personal information:
A. Information You Provide
- Contact Information: Name, email address, phone number, shipping and billing addresses
Payment Information: Securely processed via authorized providers (e.g., Shopify, Stripe, PayPal) - Order History: Purchase records and user preferences
- Communication Preferences: Your selected email and marketing preferences
B. Information Collected Automatically
- Usage Data: IP address, browser type, pages visited, time spent, device information
- Cookies: Used to personalize content, store preferences, and support analytics and marketing (see Section 15)
C. Information from Third Parties
- Service Providers: Shopify (store platform), payment processors, logistics partners
- Marketing and Analytics Tools: Google Analytics, Meta Ads, and similar platforms
Lawful Basis for Processing
We process your personal data under the following legal bases:
- Consent: Where required, such as for marketing communications
- Contractual Necessity: To fulfill orders and provide customer support
- Legal Obligation: To comply with applicable regulations
- Legitimate Interest: For fraud prevention, analytics, service improvement
- Vital Interests or Public Task: Rare, but applicable in specific legal scenarios
How We Use Your Information
- To fulfill orders and process payments
- To deliver customer support
- To send order confirmations and updates
- To improve our website and services
- To provide targeted advertising and marketing (with your consent)
- To comply with legal and regulatory obligations
Sharing of Personal Information
We may share your personal data with trusted third parties, such as:
Shopify โ for powering our online store (Shopifyโs Privacy Policy and Privacy Center)
- Privacy Policy: https://www.shopify.com/legal/privacy
- Privacy center:ย https://privacy.shopify.com/
(*) Shopify explains how it collects, uses, and shares personal data when merchants use its ecommerce platform and when customers interact with Shopify-powered stores.
Payment Providers โ Stripe and PayPal
- Stripe Privacy Policy:ย https://stripe.com/privacy
(*) Stripe describes what personal data it collects (such as transaction data and contact details), how it processes payments, prevents fraud, and shares data with partners needed to provide payment services
- PayPal Privacy Statement: https://www.paypal.com/us/legalhub/paypal/privacy-full
(*) PayPalโs privacy policy outlines how it collects and processes personal information for payments and financial services, and how users can manage privacy settings.
Shipping / Logistics Partners
- United States Postal Service (USPS) - Privacy Policy:
https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm -
United Parcel Service (UPS) Privacy Notice: https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/privacy-notice.page
Marketing Platforms โ only with your consent
(**) Legal Authorities โ when required by law.ย We do not sell your personal information.
Behavioural Advertising
We use your data for interest-based advertising, including:
- Google Analytics - Privacy Policy: https://policies.google.com/privacy
- Meta Ads โ Privacy Policy: https://www.facebook.com/privacy/policy/
- Other Ad Networks (via cookies, with your consent).ย
You can opt out using these links:
- Facebook / Meta Ads Preferences: Facebook Ad Preferences Settings
- Google Preferences: https://adssettings.google.com
- Bing Preferences: https://account.microsoft.com/privacy/ad-settings/signedout
Digital Advertising Alliance
International Data Transfers
If your data is transferred outside the EEA, we ensure:
- Appropriate Safeguards under GDPR (e.g., SCCs, Privacy Shield legacy)
- Partner Compliance with EU data protection standards.
Data Retention
We retain your information only as long as necessary to:
- Complete transactions
- Comply with legal requirements
- Prevent fraud
- Fulfill user deletion requests
- You may request deletion at any time (see Section 11).
Data Security Measures
We implement robust security measures to protect your data:
- SSL Encryption
- Secure payment gateways
- Restricted employee access
- Regular security assessments
- Incident response protocols
Your GDPR Privacy Rights
As an EU/EEA resident, you have the right to:
- Access your data
- Correct inaccuracies
- Delete your data
- Object to certain processing
- Withdraw Consent at any time
- Port your data to another provider
- Restrict Processing in certain conditions
Contact us at support@bookishcloset.com. We aim to respond within 30 days.
Automated Decision-Making
- We do not engage in automated decision-making that has legal or significant effects.
- Shopify may use limited automation (e.g., fraud detection) that does not affect your rights.
Using Your Information
We use your personal information to:
- Offer products and services
- Process and ship orders
- Communicate offers and updates
- Improve customer experience
Cookie Policy
We use cookies to:
- Enhance site functionality
- Analyze usage patterns
- Personalize content and ads
- Store user preferences
- You can control cookie settings in your browser. Blocking cookies may affect website performance.ย Learn more: www.allaboutcookies.org
Technical & Organizational Measures
- Ongoing employee data protection training
- Processing activity documentation
- GDPR-compliant service contracts
- Automated compliance tools for user consent and opt-outs
Updates to This Policy
We regularly review this policy to maintain legal compliance and transparency. Any updates will be posted on this page with a revised "Last Updated" date.
Contact Us
For questions or to exercise your rights, please contact:
๐ง Email: support@bookishcloset.com
๐ Business Hours: Monday โ Friday, 9:00 AM โ 6:00 PM EST