Privacy Policy

Last updated: December 1, 2023

Introduction

At BookHaven (hereinafter, "we," "our," "us," or "the company"), we value and respect your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information that we obtain through our website www.bookhaven.com (the "Site"), as well as our online bookstore services (collectively, the "Services").

Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it. By using our Services, you accept the practices described in this policy.

Information We Collect

We may collect the following types of information:

Information You Provide to Us

• Account Information: When you create an account, we may collect your name, email address, username, password, and other information necessary to establish and maintain your account.
• Order Information: When you place an order, we collect data necessary to process your purchase, such as your name, shipping address, billing address, and payment details.
• Payment Information: When you make a purchase, we collect data necessary to process your payment, such as the cardholder's name, card number, expiration date, security code, and billing address.
• Communications: Information you provide when you contact us for technical support, customer service, or with general inquiries.
• User Content: Information you post on our forums, comments, reviews, or when you participate in our online communities.

Information We Automatically Collect

• Device Information: We may collect information about the device you use to access our Services, including hardware model, operating system, browser, IP address, and other unique identifiers.
• Usage Information: We collect information about how you interact with our Services, such as the pages you visit, the books you view, the time you spend on our Site, and the actions you take.
• Cookies and Similar Technologies: We use cookies, pixels, web beacons, and other technologies to collect information about your use of our Services. For more information, see our Cookie Policy.

Information from Third Parties

We may receive information about you from third parties, such as:

• Social networks, if you choose to register or log in to our Services through them.
• Business partners with whom we collaborate to offer promotions or joint services.
• Service providers who help us verify certain information (for example, to verify delivery addresses).

How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Improve Our Services

• Create and maintain your account.
• Process your transactions and send you confirmations.
• Fulfill your orders and deliver the books you purchase.
• Personalize your shopping experience.
• Respond to your questions and support requests.
• Improve and develop new features and functionalities.
• Analyze usage trends and activity to improve our Services.

Communications

• Send you information about your orders, delivery status, and purchases.
• Provide you with updates about our Services, policies, and terms.
• Send you promotional information about new books, special offers, or other products or services that may interest you, provided you have given your consent.
• Invite you to participate in surveys or provide feedback.

Security and Protection

• Protect the security and integrity of our Services.
• Detect, prevent, and address fraudulent activities, abuses, security breaches, or unauthorized activities.
• Verify your identity to prevent unauthorized access to your account.
• Comply with our legal obligations.

Legal Basis for Processing

We process your personal data in accordance with the following legal bases:

• Performance of a Contract: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.
• Consent: You have given your consent to the processing of your personal data for one or more specific purposes.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Who We Share Your Information With

We may share your personal information with the following categories of recipients:

Service Providers

We work with third parties that help us operate, provide, improve, integrate, customize, and promote our Services. These include providers of:

• Payment processing services
• Shipping and delivery services
• Web hosting and cloud storage services
• Analytics and audience measurement services
• Customer service services
• Marketing and communications services

These service providers have access to your personal information only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.

Publishers and Suppliers

In some cases, we may share certain information with publishers or suppliers of the books you purchase, such as for special orders, author-signed copies, or when processing warranty claims.

Other Users

Some of our features allow you to interact and share information with other users. For example, if you participate in forum discussions or leave book reviews, certain personal information associated with your user account may be visible to other users.

Legal Compliance and Protection

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, legal process, or governmental request.
• Enforce our terms, conditions, and policies.
• Protect the security, rights, property, or safety of BookHaven, our users, or the public.

Corporate Transactions

If BookHaven is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you (for example, via email and/or a prominent notice on our Site) of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

International Data Transfers

We are a company based in the United Kingdom, and your data may be transferred to and processed in countries other than the country you reside in. These countries may have data protection laws that are different from those of your country.

However, we have taken appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy. These measures include implementing standard contractual clauses approved by the relevant authorities for transfers of personal data between our affiliates and with our external service providers.

Data Retention

We retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

The criteria used to determine our retention periods include:

• The length of time you have an active account with us or use our Services.
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).
• Whether retention is advisable in light of our legal position (such as in regard to the enforcement of our terms of service, applicable statutes of limitations, litigation, or regulatory investigations).

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

Access

You have the right to request a copy of the personal information we hold about you.

Rectification

You have the right to request the correction of inaccurate or incomplete personal data we hold about you.

Erasure

You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Restriction of Processing

You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Objection

You have the right to object to the processing of your personal data in certain circumstances, such as when the processing is based on legitimate interests.

Consent

If we have processed your personal data based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the 'Contact' section of this policy. We will respond to your request within the timeframes established by applicable data protection laws.

Information Security

We implement technical, administrative, and physical security measures designed to protect the security of your personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive data
• Secure payment processing
• Restricted access to systems and data
• Monitoring and logging of activities
• Regular security assessments
• Security training for employees

However, no security system is impenetrable, and we cannot guarantee the absolute security of your information. It is important for you to protect your password and your computer to prevent unauthorized access to your account and personal information.

Children's Privacy

Our Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address provided below to request deletion of that information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our information practices or changes in applicable law. We will notify you of any significant changes in the way we treat your personal information by means of a prominent notice on our Site or by sending you an email. The date of the last revision is indicated at the beginning of this policy.

We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information.

Contact