Privacy

Who we are

Robinne Weiss and her imprint, Sandfly Books, can be found at https://robinneweiss.com and can be reached by emailing robinne@robinneweiss.com.

What personal data we collect and why we collect it

For my part, I collect only the information I need to process your order or respond to your contact email, and I collect this only for the purposes of completing and sending your order or responding to your request.

If you request it (and only if you request it), I’ll put your first name, email address, and country code on my mailing list in order to send you my newsletter, which I send out roughly once a month.

I will never sell, rent or lease your data, and will only share it with the necessary companies to complete your order.

If you shop on my website, WooCommerce will collect information about you during the checkout process on our store.

While you visit my site, WooCommerce tracks:

  • Products you’ve viewed: they’ll use this to, for example, show you products you’ve recently viewed
  • Location, IP address and browser type: they’ll use this for purposes like estimating taxes and shipping
  • Shipping address: they’ll ask you to enter this so they can, for instance, estimate shipping before you place an order, and so I can send you the order.

WooCommerce also use cookies to keep track of cart contents while you’re browsing our site.

When you purchase from me, WooCommerce will ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as, to:

  • Send you information about your account and order
  • Respond to your requests, including refunds and complaints
  • Process payments and prevent fraud
  • Set up your account for our store
  • Comply with any legal obligations we have, such as calculating taxes
  • Improve our store offerings
  • Send you marketing messages, if you choose to receive them

If you create an account, WooCommerce will store your name, address, email and phone number, which will be used to populate the checkout for future orders.

WooCommerce generally stores information about you for as long as they need the information for the purposes for which they collect and use it, and they are not legally required to continue to keep it. For example, they will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

WooCommerce will also store comments or reviews, if you choose to leave them.

Comments

When visitors leave comments on the site, WordPress collects the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

My site uses the Akismet Anti-spam service. Akismet collects information about visitors who comment on Sites that use this service. The information they collect includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

Contact forms

If you submit a form on my site (contact, subscribe, program request or other form), we collect your name, email and IP address, and any other information you provide on the form. This information is used only to provide the service you have requested. We keep this information for up to 4 years for customer service purposes, but do not use it for marketing (unless your request was to join our mailing list, in which case we will send you our monthly newsletter).

Cookies

If you leave a comment on my site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

WooCommerce will also use cookies to keep track of cart contents while you’re browsing our site. At checkout, Stripe uses cookies to protect against fraud and ensure their services function properly.

Embedded Content From Other Sites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

I use Jetpack for site analytics. They collect site visitor information such as site visits, clicks, likes, IP addresses, browser language, and country code. Withinmy WooCommerce shop, Jetpack records when site visitors start a session in the shop, view products, add and remove products from the cart, view checkout, and complete orders. Jetpack also tracks device used, whether users can check out with / without an account, whether an account can be created, and which payment / checkout options are available to be used. Events include metadata such as a session ID for identifying the session (randomly generated), the user landing page URL, the current page URL; product name, product ID, quantity, and product category; unique user ID (randomly generated identifier); WooCommerce version; blocks used on cart & checkout pages. See Jetpack’s privacy policy for more details.

Who we share your data with

I share information with third parties who help me provide my orders and services to you. These providers include WooCommerce, Stripe, WordPress, Jetpack, Akismet, EmailOctopus and BookFunnel.

We accept payments through Stripe. When processing payments, some of your data will be passed to Stripe, including information required to process or support the payment, such as the purchase total and billing information. See Stripe’s privacy policy and their cookie policy for more details.

Jetpack collects the data as outlined in the Analytics section of this policy. Akismet collects information about visitors who comment on Sites that use this service. The information they collect includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

WooCommerce collects information needed to facilitate your purchases from our store. When you visit our site and make a purchase, WooCommerce collects information about: products you’ve viewed, location, IP address, browser type, shipping address, billing address, email address, phone number, credit card/payment details and optional account information like username and password.

WordPress, WooCommerce Shipping and Tax, Jetpack, and Akismet are all owned by Automattic. Visit Automattic’s privacy policy for more details.

I send emails through EmailOctopus. Here is EmailOctopus’s policy on handling the contacts of their customers:

Your contact lists are stored in Ireland, within the European Economic Area (“EEA”), on the secure servers of Amazon Web Services (“AWS”). Unless you are using our ‘EmailOctopus Connect’ service, they will also be available to our email service providers (“ESPs”). ESPs will only have access to your lists when you are sending an email. Once the email is sent, the ESPs no longer have access to your contact list. Our ESPs are SendGrid and SparkPost. We don’t, under any circumstances, sell or share your contact lists with anyone else. If someone on your contact list complains or contacts us, only then will we respond to that person. Only you, our authorised employees, and our ESPs have access to view your contact lists.

We may also monitor those events for the purposes of administering our service (including checking for any abuse of our service) and research on patterns and trends in the use of our service. We will never use any Contact data for the purposes of that administration or generating that research. It will always be conducted on an aggregated and anonymised dataset, which does not identify any individual Contact.

You may export (download) your contact lists from EmailOctopus at any time. We’ll only ever use and disclose the information in your contact lists for the reasons listed in this section or in the section entitled ‘How we use your personal information’ above.

We will never use or disclose the information in your contact lists to send our own informational and promotional content. If we detect abusive or illegal behaviour related to your contact list, we may share your contact list or portions of it with affected internet service providers (“ISPs”) or anti-spam organisations. We may also be required to disclose it to law enforcement or regulatory bodies. We will only do so if legally required.

We may conduct analysis on your use of the service and the results generated by your emails sent by means of the service. This analysis is conducted solely on an aggregated and anonymised basis.

See EmailOctopus’s privacy policy for more details.

Ebook orders are delivered through BookFunnel. BookFunnel may collect your name, email address and IP address for the purpose of delivering your book. See BookFunnel’s privacy policy for more details.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so WordPress can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

Contact form entries are kept for up to 4 years for customer service purposes, customer purchase records are retained for 7 years for tax requirements, and analytics data is retained indefinitely in order to track site performance over time.

If you subscribe to my newsletter, I retain your subscription information until you unsubscribe.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.

Where your data is sent

I will never sell, rent or lease your personal data to a third party.

Data on my site may be held inside or outside of the European Union. My use of your data complies with the Cross Border Privacy Rules System (“CBPR”) and Privacy Rules for Processor (“PRP”) systems, whether you are in the European Union or not.

The companies with which I share data (see Who we share your data with) all have their own policies on data transfer. See their policies for details.

How we protect your data

I employ commercially reasonable security measures to protect your information; however, no system is impenetrable. If you detect any unauthorised use of your data that stem from your use of my website, email me at robinne@robinneweiss.com.

Contact information

Privacy concerns and queries should be directed to robinne@robinneweiss.com.