ENFR
Buy a book

Legal

Privacy Policy

Last updated: [date]

Draft: this page is waiting for company details and legal review before launch.

1. Who we are and how to contact us

[Registered company name], trading as Syzygy Media, company number [Company number], registered office [Registered office address], is the controller of your personal data. Contact us about privacy at hello@DOMAIN-TO-CONFIRM.

[Client to confirm: ICO registration number.]

2. What personal data we collect

  • Messages you send us: your name, email address and what you write in the contact form.
  • Orders: your name, email, delivery address, phone number (if needed for delivery) and what you ordered. Your card details go directly to Stripe or Paystack and are not seen by us.
  • Email list: your email address, only if you sign up. [Client to confirm if used.]
  • Technical data: our web host may record your IP address and browser details in server logs for security.

We do not run advertising or tracking cookies. Small preference settings (your colour theme, language and cookie choice) are stored on your own device.

3. Why we use it and our legal basis

  • To deal with your order and deliver it: contract.
  • To reply to your messages and enquiries: our legitimate interest in running the business, and steps you ask for before a contract.
  • To keep accounts and tax records: legal obligation.
  • To send news about our books: your consent, which you can withdraw at any time.
  • To keep the website secure: our legitimate interest.

4. Who we share it with

We share data only with those who help us run the business: Stripe (UK card payments), Paystack (Nigeria payments), our website hosting provider, our email provider, postal and courier services for delivery, and our accountants. [Client to complete the list.]

We do not sell your data.

5. International transfers

Some providers process data outside the UK, for example in the United States or Nigeria. Where they do, we rely on safeguards the law accepts, such as the UK’s adequacy decisions or approved contract terms. [Solicitor to confirm for each provider.]

6. How long we keep it

  • Order and payment records: [6] years, as tax law requires.
  • Messages and enquiries: [12] months after we last contact you.
  • Email list: until you unsubscribe.

7. Your rights (UK GDPR, EU GDPR and Nigeria Data Protection Act)

You can ask to see your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw your consent. To use your rights, email hello@DOMAIN-TO-CONFIRM. We will reply within one month.

The UK GDPR and Data Protection Act 2018 apply to our processing. If you live in the EU (for example in France), the EU GDPR gives you similar rights. If you live in Nigeria, the Nigeria Data Protection Act 2023 applies and gives you similar rights.

8. Complaints to the regulator

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). In Nigeria, you can contact the Nigeria Data Protection Commission. In France, you can contact the CNIL. We would like the chance to put things right first.

9. Changes to this policy

We will update this page if our use of your data changes, and show the date of the latest update at the top.