REVISED: 8th January 2019
1. Data Types & Overview
- Personal Data means data that allows someone to identify or contact you (for example, your name, address, telephone contact, or e-mail address) as well as any other non-public information about you that can be associated with, or linked to, any data that allows the identification of an individual.
- Anonymous Data means data that is not associated with, or linked to, your Personal Data. Anonymous Data does not, by itself, permit the identification of any individual. We collect Personal Data and Anonymous Data, as described below.
- We collect and use Personal Data and Anonymous Data about users to (i) provide, measure, and improve the Services, (ii) communicate with you about your Account (as defined below) or transactions, (iii) send you information about changes to the Services or our policies, (iv) send you offers and promotions, (v) personalise content for you on the Services, (vi) detect, investigate and prevent activities that may violate our policies or applicable law, and (vii) as otherwise described in this Policy.
2. How We Obtain Information
a. Information You Provide to Us
You do not have to provide Personal Data to use the Site. However, you may need to provide certain Personal Information to use select Services, such as when you create a user account (an “Account”). When you create or update an Account, you must provide Personal Data that lets us contact you and deliver items purchased through the paid professional services, and when you place an order we collect financial details such as your bank account number and/or credit card number that allow us, or our third party service providers, to process payments (“Financial Information”) all of which we may store and use as set forth in this Policy. In addition, we may collect the following information in connection with the Services and Site:
- If you tell us where you are (for example, by allowing your mobile device to send us your location), we may store and use that information to provide you with location-based information. This feature may be deactivated in the location settings of your device.
- We retain information on your behalf, such as content submitted via the Services in connection with an order, the creation of content, or the distribution of content.
- If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to reply.
- If we provide the ability to post messages to the Site (in essence, a forum), the information in your posting will be stored on our servers and other users will be able to see it.
- We also collect other types of Personal Data that you may provide to us voluntarily in connection with support for the Services, such as your operating system and version, your mobile device or computer type.
- If you participate in a survey, contest or giveaway on our Site, we may ask for your e-mail address and/or phone number (to notify you if you win or not). We may also ask for first and last names, and sometimes post office addresses to verify your identity or to send prizes. Surveys and contests are voluntary and you should read the rules for each contest that you enter.
- We may also collect Personal Data at other points during your use of our Site or Services that state that Personal Data is being collected.
b. Information Collected via Technology
We use standard online and mobile technologies to perform and improve the Services, and in some cases, these technologies provide additional information about you:
- Information Collected by Our Servers. To make our Site and Services more useful to you, our servers (which may be hosted by a third-party service provider) collect information from you, including your browser type, operating system, Internet Protocol (“IP”) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, and/or a date/time stamp for your visit.
- Log Files. As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider (“ISP”), referring/exit pages, operating system, date/time stamp, and [clickstream data]. We use this information to analyse trends, administer the Services, track users’ movements around the Site, gather demographic information about our user base as a whole, and better tailor our Services to our users’ needs. For example, some of the information may be collected so that when you visit the Site or the Services again, it will recognise you and the information could then be used to serve information more appropriate to your interests. Except as noted in this Policy, we do not link this automatically-collected data to Personal Data.
- “Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing the website. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience of the Services.
- Pixel Tags. In addition, we use “Pixel Tags” (also referred to as clear Gifs, Web beacons, or Web bugs). Pixel Tags are tiny graphic images with a unique identifier, similar in function to Cookies, which track online movements of web users. In contrast to Cookies, Pixel Tags are embedded invisibly in Web pages and not stored on a user’s computer. Pixel Tags also allow us to send e-mail messages in a format users can read, and tell us whether e-mails have been opened to ensure that we are sending only messages that are of interest to our users. We do not tie the information gathered by Pixel Tags to our users’ Personal Data.
- Flash LSOs. When we post videos, third parties may use local shared objects, known as “Flash Cookies,” to store your preferences for volume control or to personalise certain video features. Flash Cookies are different from browser Cookies because of the amount and type of data and how the data is stored. Cookie management tools provided by your browser will not remove Flash Cookies.
- How We Respond to Do Not Track Signals. Users may use the BookPotato Privacy Setting tool to customise the amount of data that they will allow BookPotato to collect when the User is accessing BookPotato’s Site(s) or Services.
c. Information Collected from Third Parties
We may receive Personal and/or Anonymous Data about you from companies that provide our Services by way of a co-branded or private-labelled Site or companies that offer their products and/or services on our Site. We may add this information to the information we have already collected from you as described in this Policy in order to improve the Services
3. Use & Disclosure of Personal Information
Personal Data you submit to us is typically used either to provide the Services, respond to requests that you or your customers make, or help us better serve you and your customers. We use your Personal Data in the following ways:
- facilitate the creation of and secure your Account
- identify you as a user in our system
- provide improved administration of our Site and Services
- provide the Services you request
- improve the quality of experience when you interact with our Site and Services
- send you a welcome e-mail to verify ownership of the e-mail address provided when you create your Account
- send you administrative e-mail notifications, such as security or support and maintenance advisories, as well as order and shipping confirmations
- send you newsletters, surveys, offers, and other promotional materials related to our Services.
b. User Testimonials and Feedback; Forums
- We often receive testimonials and comments from users who have had positive experiences with our Services. We occasionally publish such content. When we do so, we may identify our users by their first and last name and indicate their home city, but will obtain the user’s consent prior to posting this information with the testimonial. We may post user feedback with a first name and last initial, or an Account handle that does not allow identification of the user, without obtaining advance consent. When you provide Feedback with respect to the Services, you consent to our using such Feedback, and identifying it, as described in this section.
- If you make any comments on a blog or forum associated with our Site, you should be aware that any Personal Data you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages. Even if you later delete the information, it may have been saved by other users on their computers and deleting the post will not affect any such other copies of the information. We are not responsible for the Personal Data you choose to submit in these blogs and forums.
c. Creation of Anonymous Data
- We may create Anonymous Data records from Personal Data by exchanging information that makes the data personally identifiable to you. We use this Anonymous Data to analyse request and usage patterns so that we may improve the Services and improve Site navigation. We may use Anonymous Data, aggregated and other de-identifiable information for any purpose and disclose Anonymous Data to third parties in our sole discretion.
d. Disclosure of Personal Data.
- Third Party Service Providers.We may share your Personal Data with third party service providers to: provide you with the Services that we offer you through our Site; to conduct quality assurance testing; to facilitate creation of Accounts; to provide technical support; and/or to provide other services to BookPotato. These third-party service providers are required not to use your Personal Data other than to provide the services requested by BookPotato.
- We may share some or all of your Personal Data with our parent company, subsidiaries, joint ventures, or other companies under a common control (“Affiliates”), in which case we will require our Affiliates to honour this Policy. Corporate Restructuring. We may share some or all of your Personal Data in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving sale, transfer, divestiture, or disclosure of all, or a portion, of our business or assets. In the event of an insolvency, bankruptcy, or receivership, Personal Data may also be transferred as a business asset. If another company acquires our company, business, or assets, that company will possess the Personal Data collected by us and will assume the rights and obligations regarding your Personal Data as described in this Policy.
4. Protecting Your Content
In order to provide quality products, the BookPotato employees and third-party service providers fulfilling your order, or providing Customer Support, need to have access to your Content.
5. Updating Your Personal Information
BookPotato will make an effort to keep all your Personal Information up to date when you provide it to us. BookPotato provides you the ability to update your account information and change your password at any time. Visit your Account Profile pages on the Site to make any of these changes, or by contacting our Customer Service team under “Contact Us” on our Site. If any of your Personal Information should change, or you identify a mistake in our records, please contact us and we will update your data.
6. Third Party Website
Our Site and Services may contain links to third party websites. The links to third party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content or websites. When you click on a link to any other website, you will leave our Site or Services and go to another Site, and another entity may collect Personal Data from or about you. We have no control over, do not review, and cannot be responsible for, these outside websites, their content, or their practices. This Policy does not apply to these outside websites. We encourage you to read the privacy policies of every website you visit.
7. Your Choices Regarding Information
You have several choices regarding the use of information with our Services:
Cookies. If you decide at any time that you no longer wish to accept Cookies from our Service, you can instruct your browser, by changing its settings, to stop accepting Cookies or to prompt you before accepting a Cookie from the websites you visit. Consult your browser’s technical information. If you do not accept Cookies, however, you may not be able to use all portions of the Services or all functionality of the Services.
Changing or Deleting Your Personal Data. All users may review, update, correct or delete the Personal Data in their Account via the “My Account” page within the Services. If you completely delete all of your Personal Data, then your Account may be deactivated. We will use commercially reasonable efforts to honour your request. We may retain an archived copy of your records as required by law or for legitimate business purposes.
Security of Credit Card and Bank Account Information. For online payments we use the payment services of Stripe Payments Platform (https://stripe.com/gb) and PayPal Holdings, Inc. (https://www.paypal.com). We do not process, record or maintain your credit card or bank account information. For more information on how payments are handled, or to understand the data security and privacy afforded such information, please refer to https://stripe.com/gb/privacy and https://www.paypal.com/us/webapps/mpp/ua/privacy-full
8. Data Security & Integrity
The security, integrity and confidentiality of your information are extremely important to us. We maintain physical, electronic, and procedural safeguards to secure your Personal Data. However, there is always some risk in transmitting information electronically. The Personal Data we collect is stored within databases that we control. We use security measures consistent with industry standards, such as firewalls and encryption technology, to protect this information. However, we cannot guarantee the security of our databases, nor can we guarantee that information you supply won’t be intercepted while being transmitted to us over the Internet.
9. Our Policy Towards Children
The Service is not intended for children under the age of 16. If you become aware that we may have Personal Data of a child, please contact us at firstname.lastname@example.org. We do not knowingly collect personal information from children under the age of 16. If we become aware that a child under the age of 16 has provided us with personal information, we will take steps to remove such information and terminate the associated Account. Do not register for BookPotato services if you are under the age of 16. If you require the use of the BookPotato Site(s) or Services and are under the age of 16, a Legal Guardian must create your BookPotato Account or sign up for BookPotato Services.
10. Changes To This Policy
This Policy is subject to occasional revision, and if we make any material changes in the way we use your Personal Data, we will notify you by sending you an e-mail to the last e-mail address you provided to us and/or by prominently posting notice of the changes on the Site. Any changes to this Policy will be effective within thirty (30) calendar days following our dispatch of an e-mail notice to you or thirty (30) calendar days following our posting of notice of the changes on our Site. These changes will be effective immediately for new users of our Services. At all times, you are responsible for updating your Personal Data to provide us with your most current e-mail address. If the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. If you do not wish to permit changes in our use of your Personal Data, you must deactivate your Account prior to the effective date of the changes. Continued use of the Site or Services following notice of such changes will indicate your agreement to be bound by the terms and conditions of such changes.
The Site is controlled and operated by us from the United Kingdom, and is not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the United Kingdom. We do not represent or warrant that the Site, or any part of the Site, is appropriate or available for use in any particular jurisdiction. Those who choose to access the Site are doing so on their own initiative and at their own risk, and are responsible for complying with all local laws, rules and regulations. We may limit the Site’s availability, in whole or in part, to any person, geographic area or jurisdiction we choose, at any time and in our sole discretion.