Legal
Privacy Policy
Last updated: 8 July 2026
Draft — needs review
This policy is complete in substance but must be reviewed by a qualified adviser and have its
[operator identity] fields filled in before the store starts taking payments.
We keep this simple: we collect as little as possible, we never sell your data, and we only use trusted providers to run the shop and deliver your books.
1. Who we are
This website (readhalcyon.com, "Halcyon", "we", "us") is the online store of [legal operator name], [registered address], tax ID [NIF/VAT]. We are the data controller for the personal data described below. You can reach us at [contact email].
2. What data we collect, and why
- Purchase data. When you buy a book, checkout and payment are handled by Payhip, which acts as the merchant of record. Payhip receives your name, email, billing country and payment details; we never see or store your card details. We receive the information needed to fulfil your order (e.g. your email and what you bought).
- Delivery data. Your book is delivered by BookFunnel, which uses your email to send your download link and let you re-download your purchase.
- Newsletter data. If you choose to subscribe, we store your email with MailerLite to send you new-release news. You can unsubscribe at any time from any email.
- Technical data. Our host, Cloudflare, processes basic connection data (such as IP address) to serve and protect the site. If privacy-friendly, cookieless analytics (Cloudflare Web Analytics) is enabled, it measures aggregate visits without tracking you across sites.
3. Legal bases (GDPR / RGPD)
- Performance of a contract — to process and deliver your purchase.
- Consent — to send you the newsletter (withdrawable at any time).
- Legitimate interest — to keep the site secure and understand aggregate usage.
4. Who we share it with
Only the processors needed to run the shop, each under their own privacy terms:
- Payhip (payments & order processing) — payhip.com/privacy
- BookFunnel (book delivery) — bookfunnel.com/privacy
- MailerLite (newsletter, if you subscribe) — mailerlite.com privacy
- Cloudflare (hosting & security) — cloudflare.com privacy
We do not sell or rent your personal data to anyone. Some providers are based outside the EU; where that is the case, transfers rely on the safeguards (such as Standard Contractual Clauses) set out in their policies.
5. How long we keep it
Purchase records are kept as long as needed to fulfil the order and meet legal and tax obligations. Newsletter data is kept until you unsubscribe. Aggregate analytics are not tied to your identity.
6. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time. To exercise them, email [contact email]. If you are in the EU/EEA and believe your data is mishandled, you may complain to your supervisory authority (in Spain, the AEPD, aepd.es).
7. Cookies
This site uses no advertising or cross-site tracking cookies. The Payhip checkout may set cookies strictly needed to process your payment. If analytics is enabled, it is cookieless.
8. Changes
We may update this policy; the "last updated" date above will change accordingly.