Privacy Policy

1. Who is responsible for your data

Peter Salmann ("we", "us") is responsible (the "controller") for the personal data described in this policy. For questions or requests about your data, reply to any email you've received from us.

Our checkout is run by Stripe, and orders are sold through Link, Stripe's checkout service, which acts as the merchant of record for us. Stripe handles the details you enter at checkout, including your payment details, under its own Link privacy policy and Stripe privacy policy.

2. What we collect and why

When you buy an e-book

After checkout, Stripe shares your order details with us: your name, email address, billing country or address, what you bought, the amount you paid, your order and receipt numbers, and limited payment information such as the card brand and the last four digits. We never see your full card number.

We use this to send you your e-books, answer your questions, handle refunds and keep the sales records the law requires. The legal basis is the contract with you (GDPR Article 6(1)(b)) and our legal obligations (Article 6(1)(c)).

When you email us

We receive your email address and whatever you write. We use it to reply and help you, based on the contract with you or our legitimate interest in answering messages (Article 6(1)(b) and (f)).

When you visit the website

Like every website, ours receives technical data when you visit: your IP address, browser type, the pages you request and the time. Our hosting provider records this in short-lived server logs, and the site's fonts load from Google Fonts, which also receives your IP address. We use this only to run the website securely and display it properly, based on our legitimate interest (Article 6(1)(f)).

3. Who we share it with

We use a few trusted providers to run the shop. Each gets only what it needs:

• Stripe (Link): checkout, payment, tax, receipts, invoices, refunds and disputes. Privacy policy
• Netlify: hosts the website and runs the small program that emails your e-books. Its logs include a short record that a delivery email was sent to your address. Privacy policy
• Resend: sends the email with your e-books, so it processes your email address, name and the message. Privacy policy
• Google: if you reply to our emails, your reply arrives in our Gmail inbox, so Google processes it. Google Fonts supplies the website's fonts and receives your IP address. Privacy policy

We don't sell or rent your data, and we don't share it with advertisers. We only disclose it to anyone else if the law requires us to.

4. Data outside the EU

Some of these providers are based in the United States or use servers outside the EU and EEA. When your data is transferred there, they protect it with the safeguards the GDPR allows, such as the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

5. Cookies and tracking

This website doesn't set cookies and doesn't use analytics, advertising or tracking pixels.

Stripe's checkout page uses its own cookies to make payments work and prevent fraud. See Stripe's cookie policy.

If we ever add analytics or advertising tools, we'll update this policy first and ask for your consent where the law requires it.

6. Emails

We only email you about your order: your e-books and our replies if you contact us. Stripe sends your receipt and invoice. We don't send newsletters or marketing emails unless you sign up for them separately.

7. How long we keep it

• Order details: as long as we need them to deliver, support and refund your order, then for as long as tax and accounting law requires.
• Emails with you: as long as we need them to handle your request and keep a record of your order.
• Technical logs: kept by our providers for a short period, then deleted automatically.

8. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's wrong;
• delete your data, unless the law requires us to keep it;
• limit how we use it, or stop using it where we rely on our legitimate interests;
• send your data to you or another company in a common format.

To make a request, reply to any email you've received from us, and we'll answer within one month. For the payment details Stripe holds, you can also contact Stripe through its privacy policy.

If you think we've handled your data wrongly, you can complain to the data protection authority in the country where you live or work. We'd appreciate the chance to fix it first.

9. Children

Our e-books are made for adults. We don't knowingly collect data from children under 16.

10. Security

The website and all our providers use encrypted connections (HTTPS). Only the people who run the shop can see your order details.

11. Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top.

12. Contact

To reach us, reply to any email you've received from us, such as the one that delivered your e-books.

See also our Terms of Service and Refund Policy.